Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
File: QSewwP58CJNeJYcT_PkP6VjuA-4.mft (raw, json)
Hash identifier: ulUECvkBGlgCuW270RiWTkEhoUH9RaFH4POgRS2ERB0=
Subject key identifier: 10:57:C4:06:0E:3C:87:4B:86:2B:05:69:8C:9D:11:08:E3:80:51:E0
Authority key identifier: 41:27:B0:C0:FE:7C:08:93:5E:25:87:13:FC:F9:0F:E9:58:EE:03:EE
Certificate issuer: /CN=4127b0c0fe7c08935e258713fcf90fe958ee03ee
Certificate serial: 01935207642CC356F827712038C05784779A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
Manifest number: 0C8C
Signing time: Fri 22 Nov 2024 04:00:36 +0000
Manifest this update: Fri 22 Nov 2024 04:00:36 +0000
Manifest next update: Sat 23 Nov 2024 04:00:36 +0000
Files and hashes: 1: 9YuupHmmpdpZRIMFT3I7baZGqNE.roa (hash: lsZW98Tmevy02BiHWfFsy0RXV2xTXQsK+1mzAjecLm0=)
2: EGVu-mbXBqUf60_nuaxm1gnX_S4.roa (hash: mzFRixQOCAXy131KudzurUtyd4oH0u9R9Fm/6j7PB2E=)
3: QSewwP58CJNeJYcT_PkP6VjuA-4.crl (hash: +gGkfY8/vp/oCpSzxPEFlXB9PPkfLRThq3xxo+Puyyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:07:64:2c:c3:56:f8:27:71:20:38:c0:57:84:77:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4127b0c0fe7c08935e258713fcf90fe958ee03ee
Validity
Not Before: Nov 22 04:00:36 2024 GMT
Not After : Nov 23 04:00:36 2024 GMT
Subject: CN=1057c4060e3c874b862b05698c9d1108e38051e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9e:ff:ad:9b:26:44:84:e6:b8:db:fd:0e:f6:
ca:b1:85:1c:80:10:f4:74:37:ad:05:fd:04:78:33:
5b:20:58:18:89:cb:de:5c:ac:46:79:53:11:ec:51:
c8:ff:eb:7e:a9:4b:b9:49:a9:78:5d:62:52:96:47:
37:f4:c3:8d:99:fb:e5:2f:8d:36:4f:8c:e5:81:d0:
80:2f:f4:57:63:3d:0f:a3:46:88:9a:98:e4:a2:f5:
5f:30:1d:39:30:61:1c:3e:28:5f:7e:7c:32:54:44:
f0:62:3b:02:4a:e9:8e:be:0e:4f:74:76:60:d1:42:
c8:cb:aa:76:9f:51:a3:48:24:9b:b0:7e:54:ad:7e:
03:c5:7c:77:76:7f:9a:38:08:69:4a:e8:b5:54:e3:
ec:2d:79:0e:c5:7a:0b:df:e8:f9:75:8c:3b:60:fe:
96:1d:03:d3:01:41:17:28:9b:0d:b0:07:bb:4f:f6:
b6:5c:7f:90:e9:5a:3b:29:f9:35:86:41:ea:3b:7e:
1b:21:45:e2:30:df:8c:e9:d5:6f:3a:26:05:ed:2a:
b5:a8:17:db:3e:46:77:6d:5e:37:b2:ea:30:0f:fb:
56:40:4a:c1:d0:9c:bd:70:06:5e:ea:2d:4b:7e:ed:
bb:8c:51:0e:4f:25:7f:72:ed:00:db:31:27:41:0b:
62:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:57:C4:06:0E:3C:87:4B:86:2B:05:69:8C:9D:11:08:E3:80:51:E0
X509v3 Authority Key Identifier:
keyid:41:27:B0:C0:FE:7C:08:93:5E:25:87:13:FC:F9:0F:E9:58:EE:03:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:81:85:0a:75:1d:75:4b:4c:79:fc:72:ea:9c:cf:89:bb:65:
77:a6:fa:4a:6a:70:a7:92:04:99:a2:2c:39:33:78:44:e3:3f:
62:33:8b:41:06:0a:82:65:cf:b9:c7:3c:bb:ae:38:dc:53:75:
70:74:05:09:5c:11:df:8d:76:27:b6:44:ed:a9:f9:04:c4:80:
63:2f:68:23:cd:30:f1:1b:ed:cd:12:68:cf:02:8f:ed:79:0f:
fa:fd:9c:8d:13:37:a2:64:32:6d:0a:42:92:18:f9:f4:fa:fe:
2e:93:19:85:7b:f6:52:0e:1e:93:16:6e:42:2b:c6:90:48:6c:
0e:c6:5a:4b:78:3a:ed:b3:9b:c4:54:f7:f8:44:e9:67:43:33:
3d:4f:df:dd:be:e2:e2:cc:b3:2d:f7:7a:f9:ef:7e:9c:57:cc:
7c:18:e7:dd:36:5e:02:70:3d:2a:8f:3c:4e:76:a4:28:0f:a2:
3b:ac:da:67:14:fb:7d:be:33:bf:de:e4:39:f8:4e:ae:7d:07:
b6:e1:15:48:57:ed:9c:c9:c9:ce:f3:ba:6f:cf:8e:f5:9f:2e:
c6:85:bf:9c:a9:e2:0f:4f:66:b7:ae:51:09:76:89:71:16:a9:
6b:1d:bd:29:89:da:e2:be:16:8d:4a:65:af:2b:07:b9:70:55:
fb:02:ff:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:52:28 2024 by rpki-client on console-fra.rpki-client.org