Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft
File: Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft (raw, json)
Hash identifier: M/wGpfbQnhV9HvJAR1+auK4uckeaSNfiFgTIT/WYzII=
Subject key identifier: 5B:75:F1:54:EF:E6:8C:B5:A1:A0:BE:AF:26:80:1C:E2:EB:4A:9F:A8
Authority key identifier: 42:8E:82:88:29:84:6F:63:46:5A:37:44:7E:CE:3A:74:6A:48:DD:6C
Certificate issuer: /CN=428e828829846f63465a37447ece3a746a48dd6c
Certificate serial: 019356F6FBE17F6DFF05F28E3FEA32EE7D3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft
Manifest number: 1370
Signing time: Sat 23 Nov 2024 03:00:47 +0000
Manifest this update: Sat 23 Nov 2024 03:00:47 +0000
Manifest next update: Sun 24 Nov 2024 03:00:47 +0000
Files and hashes: 1: 2gbqNR-Mv2mEnzK22M-CQ8WoNi4.roa (hash: FS8biBetAnY548ABb+Jx2ElN1VjFbmeF9j+zuU63w4k=)
2: Qo6CiCmEb2NGWjdEfs46dGpI3Ww.crl (hash: LIazVzGxnZFxo44dFR7XUvORlfCj3fmNjrXAgvP9wU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f6:fb:e1:7f:6d:ff:05:f2:8e:3f:ea:32:ee:7d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=428e828829846f63465a37447ece3a746a48dd6c
Validity
Not Before: Nov 23 03:00:47 2024 GMT
Not After : Nov 24 03:00:47 2024 GMT
Subject: CN=5b75f154efe68cb5a1a0beaf26801ce2eb4a9fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ed:91:7c:07:5f:f2:bc:64:5d:df:95:60:64:
00:be:5f:14:a6:4c:59:02:8e:de:3c:3d:2b:0d:17:
71:51:ed:e5:ae:c6:a1:4b:dd:e5:9a:55:69:6b:0f:
8e:2f:7f:d7:d7:1d:b5:56:1c:cb:5f:fb:6d:7e:01:
9c:9e:f4:c4:ca:c5:ba:35:24:98:b4:82:2d:36:5a:
a6:cc:70:f0:00:99:53:0a:38:59:a1:a7:29:e1:87:
8b:ab:58:a2:a3:5d:d0:10:6a:90:90:29:96:19:7c:
04:5d:36:0c:7f:6c:e9:2b:8d:f3:c9:78:60:e8:13:
f2:15:26:52:fe:13:7d:ae:ab:01:0c:b5:f9:a1:96:
53:27:f2:56:9f:aa:f2:fe:5d:c6:25:8a:98:50:93:
1b:bf:2b:79:09:1a:38:1e:63:16:ec:60:24:4f:4d:
d4:ab:b0:1d:b8:22:02:33:7a:d2:ff:c7:99:22:04:
e6:75:a6:91:fd:21:ec:39:41:85:23:b0:fb:d5:d4:
67:18:a7:3c:c6:b5:cd:f0:7f:b8:93:30:75:09:26:
9d:8a:89:9c:c7:c0:23:e8:ea:ca:c5:f7:c1:68:d9:
1e:ae:bb:75:0a:9e:55:12:6b:b3:5b:d1:34:31:ac:
75:37:39:df:2b:61:68:c5:dd:74:b6:d4:8e:ed:21:
1c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:75:F1:54:EF:E6:8C:B5:A1:A0:BE:AF:26:80:1C:E2:EB:4A:9F:A8
X509v3 Authority Key Identifier:
keyid:42:8E:82:88:29:84:6F:63:46:5A:37:44:7E:CE:3A:74:6A:48:DD:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:65:a2:1f:e4:30:4b:26:0c:53:e1:40:38:60:a9:8a:3b:d0:
22:27:dc:33:1a:87:25:d9:ee:2e:fc:29:10:b2:e9:07:53:b8:
1a:1d:1c:c3:ce:db:fc:da:18:5c:54:00:21:8f:05:81:1c:e6:
c0:c7:46:2c:c5:17:e5:e0:d1:00:9e:70:56:64:b0:9a:66:c7:
e4:04:9b:3e:3b:6e:27:e7:e7:d4:74:5e:83:1a:fc:3a:6f:d1:
73:47:54:c9:2b:4b:7f:5b:f1:73:c4:31:b9:55:8d:ff:67:9e:
e8:ee:5d:3a:44:b2:70:15:ac:46:c8:22:1b:e8:97:4f:be:ae:
03:21:87:56:83:62:a8:ba:76:5b:fc:91:88:36:8c:79:02:13:
5c:e7:15:a8:70:c0:1c:96:d7:7a:50:59:be:a7:87:d6:fa:55:
3d:c2:71:98:1c:15:ee:3f:da:69:6f:f7:f9:99:6f:84:cc:ad:
81:f1:9a:a6:d1:97:ba:61:05:42:ca:a6:52:85:df:19:d5:79:
64:f2:ff:38:cc:5c:8f:64:c7:d6:2c:31:19:9c:5a:7d:5a:21:
4b:0b:cc:95:67:61:da:0d:3e:4c:8a:1b:10:6c:0b:1a:a6:55:
12:27:90:0a:74:35:7d:ee:de:99:73:8a:5c:cc:0b:a9:4c:93:
d1:90:e1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:44:41 2024 by rpki-client on console-ams.rpki-client.org