Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
File: qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft (raw, json)
Hash identifier: H0IpRH9QB6kzu9zCkjDGgdcv/bHTF8qmZWPifwbo/4Q=
Subject key identifier: 80:A8:14:5F:A3:CA:41:08:97:D4:3B:AB:E0:B6:0C:E3:13:FA:F4:ED
Authority key identifier: A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
Certificate issuer: /CN=a9d988d1df0a6ccab2e93614951059960bad4342
Certificate serial: 0193549B554E6D70AFBE181D5A1459B14240
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
Manifest number: 1179
Signing time: Fri 22 Nov 2024 16:01:26 +0000
Manifest this update: Fri 22 Nov 2024 16:01:26 +0000
Manifest next update: Sat 23 Nov 2024 16:01:26 +0000
Files and hashes: 1: GC-wNDRG1czwLkH1fXMmecer_dI.roa (hash: /21euQHaLclE42xfY7ptCmj1qtOrp9GqAzQ1CWQ6r5U=)
2: Jrge4SA3eXv1WTTR8HXR0KL0SPQ.roa (hash: e+7QxUyJQWuzE4Q2M95Sn1cUvQR3gTp0yxhIUJ/4PGM=)
3: qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl (hash: dmQGtiU5uY2/5sP0MUxfRdp5u7v3vxOTJA9c7/jJXNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9b:55:4e:6d:70:af:be:18:1d:5a:14:59:b1:42:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d988d1df0a6ccab2e93614951059960bad4342
Validity
Not Before: Nov 22 16:01:26 2024 GMT
Not After : Nov 23 16:01:26 2024 GMT
Subject: CN=80a8145fa3ca410897d43babe0b60ce313faf4ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d9:60:9c:56:1f:79:ca:84:bf:8f:f9:0d:3c:
6c:c6:a4:30:32:c6:bc:3e:ce:03:9a:ec:a3:a0:5a:
4e:41:2f:40:f5:4b:1d:fb:06:28:54:83:0c:48:1e:
1a:df:b9:c2:f1:7e:f8:46:2c:d8:90:9b:91:fa:8a:
36:23:2e:96:a6:1d:a8:58:78:2c:60:4d:6a:f4:dc:
6a:f1:51:b5:59:f3:50:f3:6e:cd:9c:aa:eb:d8:26:
05:5b:4a:3b:a7:1b:44:0c:e5:f2:71:0a:65:a3:3b:
35:a1:fc:78:9f:7f:9d:1c:6b:b0:19:66:a4:60:50:
d3:2e:f4:78:e7:f6:d0:19:4f:8e:cf:df:89:a9:50:
4a:3a:44:40:76:e4:5f:f2:83:f6:bd:e0:92:07:e8:
6c:3e:b9:47:32:56:04:bb:ba:61:d9:01:d0:88:26:
ac:ca:c6:4b:f5:9e:b1:bc:70:83:3a:28:0a:64:19:
5e:72:65:44:1b:68:dd:6d:c3:0f:88:be:13:45:2f:
6e:45:18:86:bd:77:9b:be:76:24:e1:33:2d:22:a2:
ef:4f:c2:1a:68:7d:4c:7b:33:1b:63:03:e8:62:3a:
ae:5d:58:48:52:ac:8c:12:ec:53:58:7c:8f:6d:91:
33:75:8f:80:d5:27:7d:14:78:3f:78:0e:37:68:eb:
f5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A8:14:5F:A3:CA:41:08:97:D4:3B:AB:E0:B6:0C:E3:13:FA:F4:ED
X509v3 Authority Key Identifier:
keyid:A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:28:1a:dd:86:f8:2b:3b:f4:6f:54:97:53:8c:26:89:04:7f:
04:ac:4b:0b:e1:c3:6b:69:18:c7:c6:33:e6:47:eb:b2:c2:b4:
9a:b8:db:e0:eb:36:c3:d6:b1:c1:fd:96:5e:e9:9f:0c:92:f7:
c5:de:c4:fc:f3:5d:88:71:de:73:e4:65:90:47:3b:9f:36:f1:
97:d1:39:6c:90:4f:67:42:87:7f:42:07:16:a8:53:d6:31:e3:
82:35:ef:66:6f:6f:a1:03:ed:6a:45:bf:9b:90:e2:3c:3a:ef:
b3:7b:4b:be:13:9c:db:b0:6c:64:39:dd:8e:7f:5d:68:61:75:
7b:a6:bc:c8:70:88:bf:66:d5:3a:82:45:a0:56:eb:f0:07:80:
2b:9a:29:61:1e:97:45:14:84:ba:a1:fe:1c:25:e9:e0:ec:1c:
c5:39:93:6b:f6:38:d5:f7:a2:78:0c:c7:47:39:f8:00:60:98:
6d:58:49:bc:cd:34:6e:34:1b:c8:0a:1f:e4:e4:21:90:7c:5c:
24:f4:49:32:eb:b5:c0:2a:34:1d:03:85:1b:dc:1e:9f:d9:27:
45:94:38:d2:03:9e:98:20:2f:82:50:1a:2e:9e:3e:08:51:0e:
9d:6c:05:c0:6b:28:c3:8d:0f:2f:29:f1:b6:86:87:28:12:bf:
59:75:a9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:15:09 2024 by rpki-client on console-fra.rpki-client.org