Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
File: QEPj9wJFibliregc9EVjBvTTXmg.mft (raw, json)
Hash identifier: UEHn4ARk1VKxVEcPcHIUTbJD1eax9SCLrdA9nPv3rF8=
Subject key identifier: 18:5E:D6:14:1C:1F:8B:41:E7:F3:6B:0C:DF:CC:DC:37:E1:6B:05:3A
Authority key identifier: 40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68
Certificate issuer: /CN=4043e3f7024589b962ade81cf4456306f4d35e68
Certificate serial: 01935764971677ECC3CC9BD56A81A07A6540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
Manifest number: 1058
Signing time: Sat 23 Nov 2024 05:00:30 +0000
Manifest this update: Sat 23 Nov 2024 05:00:30 +0000
Manifest next update: Sun 24 Nov 2024 05:00:30 +0000
Files and hashes: 1: 7mEjwWEGrPBO3pv5VH9R-nutWi4.roa (hash: L0BorLf90+5azZg/RGpSopugBH4XQBrUdlgrtEG2or8=)
2: QEPj9wJFibliregc9EVjBvTTXmg.crl (hash: pJRi639wgGOaw0GmPcIF1kbbXvtyt66XGDE/k7kvBgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:97:16:77:ec:c3:cc:9b:d5:6a:81:a0:7a:65:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4043e3f7024589b962ade81cf4456306f4d35e68
Validity
Not Before: Nov 23 05:00:30 2024 GMT
Not After : Nov 24 05:00:30 2024 GMT
Subject: CN=185ed6141c1f8b41e7f36b0cdfccdc37e16b053a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9e:90:93:59:8b:da:e3:33:c8:af:49:fd:48:
57:d8:1f:bd:f6:9a:2a:d0:fc:45:1e:46:6f:8b:c1:
1c:df:7e:8d:9b:0d:77:cc:38:f0:d1:53:64:bf:b1:
33:cd:f4:80:e8:2b:c6:45:ac:ab:bb:47:8d:2f:42:
76:59:39:98:94:dc:42:f4:50:a1:4a:e6:f7:b2:c7:
69:d5:0b:3d:5a:53:24:9a:0f:2a:1b:d9:d3:fe:d7:
e3:1f:49:3d:20:c1:1e:f0:2e:d1:6a:5f:72:34:59:
02:12:04:3d:8e:09:83:51:8e:11:a6:56:f4:bf:90:
b9:0c:ac:d1:e8:2d:ee:93:8f:8f:0e:ec:a4:96:43:
c0:9c:ed:3a:7e:d7:1a:b8:42:6e:ce:e7:be:82:0a:
f8:fd:72:7b:1a:3f:68:70:b6:d8:c4:18:77:7b:c2:
80:5d:6c:21:37:9c:31:20:f9:ff:8b:01:6c:ca:30:
dc:5f:4e:53:44:cd:09:5e:8c:52:98:b8:e9:66:45:
59:9b:88:8a:72:f2:5a:f7:cf:15:75:b4:31:65:99:
e4:ba:89:59:ef:c1:6d:8f:96:5b:4b:99:12:ee:82:
d5:46:17:9b:7e:92:4a:25:5f:1c:2f:59:f3:42:9e:
d7:47:fb:73:1f:ad:07:a7:0b:76:a5:51:4f:83:a4:
36:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5E:D6:14:1C:1F:8B:41:E7:F3:6B:0C:DF:CC:DC:37:E1:6B:05:3A
X509v3 Authority Key Identifier:
keyid:40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:b2:09:6d:7a:4b:14:da:6e:a2:3a:4b:6f:5f:80:a4:37:4a:
aa:7e:e4:4e:0f:4e:01:4a:98:1f:f8:f9:51:1d:01:95:26:77:
17:11:8c:a9:e9:b9:a1:61:cf:5b:93:59:3b:21:5d:40:4d:c0:
82:5e:ee:36:4c:0f:b9:40:ca:55:8f:05:02:6f:5b:38:07:1d:
41:e6:37:b4:3a:3f:60:74:e5:6b:4f:19:aa:a4:db:11:14:3e:
09:04:0f:a0:34:e4:b4:9d:1b:4a:b1:3b:e1:e5:d2:39:c2:dc:
9b:1c:e4:9f:1d:fd:b3:96:56:96:6d:13:21:1c:a8:ea:e4:ed:
a8:bd:6a:5b:f7:35:4d:04:8e:66:34:9f:f5:d3:15:58:ba:8d:
7d:e9:74:75:26:fd:ae:3c:a0:67:a2:ae:0a:c3:2e:c2:6d:2a:
4a:04:ea:0d:4f:48:b9:7a:12:db:ef:57:92:8d:21:2c:7f:39:
95:50:45:9b:2d:89:61:21:e8:1b:a0:4b:88:57:ab:39:a2:4b:
85:06:ff:75:69:68:39:1f:0b:5a:b8:75:83:53:5e:c7:5d:45:
82:41:85:26:c1:a2:17:3c:d5:40:2c:77:a3:8f:7b:d8:04:71:
55:16:22:84:f9:82:91:b5:d4:45:23:28:95:35:03:0a:14:bc:
b1:41:13:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:23:06 2024 by rpki-client on console-fra.rpki-client.org