Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
File: qnNO9a4hwOiX-hhkRxhOya1K4p0.mft (raw, json)
Hash identifier: Uw4u7S7cpg0z8ALgWqC91xzd2Y3NdG2pRnf3sEPajYE=
Subject key identifier: F3:AB:B8:B3:54:22:18:24:68:2B:3C:6F:87:65:B0:04:17:BF:AC:20
Authority key identifier: AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D
Certificate issuer: /CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d
Certificate serial: 0193579BD0107FB4518E50F75E091519CF25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
Manifest number: 0523
Signing time: Sat 23 Nov 2024 06:00:49 +0000
Manifest this update: Sat 23 Nov 2024 06:00:49 +0000
Manifest next update: Sun 24 Nov 2024 06:00:49 +0000
Files and hashes: 1: 8ApQZDMdtFxBTaYrM5TULQtJZ0g.roa (hash: TsmvULY4N/hxVMA7fXd/fsafpz3QsGezNU+SV5KDfDo=)
2: qnNO9a4hwOiX-hhkRxhOya1K4p0.crl (hash: YoqMYfUDSP7w714bUzvxn+3YGOhd9iR1PV5GT2fhaZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 00:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:d0:10:7f:b4:51:8e:50:f7:5e:09:15:19:cf:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d
Validity
Not Before: Nov 23 06:00:49 2024 GMT
Not After : Nov 24 06:00:49 2024 GMT
Subject: CN=f3abb8b354221824682b3c6f8765b00417bfac20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9c:38:5d:5a:f6:1e:ae:67:c7:e1:a4:31:22:
32:0d:47:e1:06:cb:7a:eb:8f:3c:3f:43:cf:0e:0f:
fc:c3:12:fc:8d:6f:24:f6:bd:7c:7a:29:b7:13:49:
f4:f7:03:d2:a2:32:6f:2b:7d:35:41:0e:b6:12:05:
93:00:d2:a7:f2:f3:56:d8:54:2a:05:c4:ea:94:6a:
cf:aa:0c:3f:6f:f0:84:89:89:10:c9:8e:9b:13:87:
5b:09:a0:bb:ef:b2:b2:e1:d4:d1:ad:66:d3:51:40:
e0:71:10:18:ae:25:07:51:79:17:4d:64:93:7d:5d:
cd:bc:9d:46:e4:b1:8e:b5:f9:b9:de:a6:88:70:ff:
c3:5a:1a:af:30:4a:68:f7:fa:7f:71:0d:df:a1:e8:
53:5e:7d:1a:85:18:86:5b:ba:82:da:94:07:1d:f1:
eb:23:da:7d:c1:a9:02:8e:ad:f3:76:1c:90:4e:d7:
66:2b:ba:9c:0a:9b:c9:b3:97:31:b5:bf:e5:60:9a:
db:c0:e8:27:e2:1b:10:14:05:16:8f:8a:ca:56:c7:
12:9b:08:7b:7d:b0:01:61:16:7d:3b:c4:51:73:f8:
90:20:ca:30:19:cc:5a:cc:f7:9d:71:ed:4d:1e:57:
11:7b:8b:43:00:73:c3:d1:d7:6a:c6:b4:50:d6:c9:
e0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AB:B8:B3:54:22:18:24:68:2B:3C:6F:87:65:B0:04:17:BF:AC:20
X509v3 Authority Key Identifier:
keyid:AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:88:7a:b7:ca:86:05:94:70:79:f3:c8:28:3b:f4:d1:a9:d0:
21:f8:d4:2a:6b:eb:f4:0d:f8:45:63:84:bf:f7:ac:40:9b:96:
14:1f:51:73:08:c7:4a:a5:9e:92:fb:e1:10:71:25:75:44:56:
8a:e6:61:0a:d6:aa:8e:80:85:e4:70:ea:58:62:5a:62:8a:1c:
9e:2b:ad:0e:29:50:8b:80:9a:84:c9:c3:ca:31:5d:f4:f4:71:
39:e5:77:61:49:29:6a:a1:e9:81:3e:fb:15:a1:f4:4b:95:b4:
7c:c0:1b:9c:4d:b5:8c:a5:03:55:6c:3e:78:a4:fc:cf:21:3a:
56:49:55:8e:4d:0b:0b:20:0f:37:8d:e7:8a:79:a2:31:20:58:
ff:0a:8a:eb:10:e1:0c:7c:db:72:23:1b:99:36:f5:b6:6c:2a:
ad:9f:29:19:bd:d7:9e:f5:36:17:59:5e:7a:be:b3:dd:34:5e:
01:3b:e5:34:d2:1e:d4:ad:27:d3:22:8b:8e:73:ea:cc:93:58:
10:57:23:eb:78:98:66:85:0f:3d:c1:d5:6c:77:81:09:61:05:
8b:24:be:fc:5a:54:12:58:74:95:e0:dc:e1:ea:ca:24:38:b8:
b3:d5:79:76:8f:1d:4b:62:a9:cb:c1:3b:24:a0:af:70:f7:0f:
8f:16:78:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:49:58 2024 by rpki-client on console-ams.rpki-client.org