Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
File: QGqSJQwoWA8q1MwcNXsColp5DPc.mft (raw, json)
Hash identifier: GM8b3zEvWrZoNVa55UZw7MUo9C2aeT2NI9X2t2LcprU=
Subject key identifier: 0A:3F:57:07:2D:5F:DD:67:E0:B0:BD:D1:8E:D6:48:1A:42:4D:74:CE
Authority key identifier: 40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
Certificate issuer: /CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Certificate serial: 019352077FDCC16A7170F5A9BD8518499C49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
Manifest number: 1370
Signing time: Fri 22 Nov 2024 04:00:43 +0000
Manifest this update: Fri 22 Nov 2024 04:00:43 +0000
Manifest next update: Sat 23 Nov 2024 04:00:43 +0000
Files and hashes: 1: I7TIQfZjcET3_IXBNWfMugo_8Ko.roa (hash: fJIDpwLz1vR/BkbFR4lfQzIhg6KBo5jc0VH2igMoDUE=)
2: QGqSJQwoWA8q1MwcNXsColp5DPc.crl (hash: FH1V9vXqHnnkJ9FZeN37TM1JADXNF06ZbtCeMPZlZCQ=)
3: _NPKQ-d8O2sOenTGpK3-zkJsgkk.roa (hash: nVLB4c0OHi4POyk8ZD7zhvOwgivZJTbLNxqJTiZC+Pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:07:7f:dc:c1:6a:71:70:f5:a9:bd:85:18:49:9c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Validity
Not Before: Nov 22 04:00:43 2024 GMT
Not After : Nov 23 04:00:43 2024 GMT
Subject: CN=0a3f57072d5fdd67e0b0bdd18ed6481a424d74ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a1:e3:be:b9:7b:d3:3d:4c:f2:c2:8e:81:fd:
7a:89:7a:52:52:f6:bf:7e:28:94:f2:f1:a8:b6:65:
59:6d:fa:af:aa:8d:b0:df:11:0b:ed:56:5c:4c:a7:
2d:58:ce:d3:cf:71:41:45:37:2a:cb:fa:f5:7c:8d:
ff:82:3f:fc:10:87:64:7c:e7:a3:3a:d1:fc:ce:4d:
68:e7:73:91:5d:8d:c6:16:b1:92:f9:3a:23:8d:d1:
39:6b:c3:ca:f3:56:05:55:8f:06:6f:14:2d:f0:1c:
5d:54:4f:82:8e:e4:e1:8b:12:72:1b:55:d9:93:9f:
48:63:b4:10:ea:f6:c0:3a:d6:72:2b:51:86:02:8c:
2d:e0:25:40:a1:a7:4e:54:74:7c:18:0a:21:31:f2:
c5:80:d8:98:ea:19:20:ee:98:37:d2:be:60:5c:b2:
1b:ae:80:83:e6:37:22:ce:53:d8:31:60:61:06:3c:
a4:43:ff:a0:83:4e:18:cb:bd:58:ac:5b:6a:ab:63:
41:18:7a:5b:d9:36:45:fb:1d:d7:3d:7b:d8:1f:1d:
5c:2c:3d:b7:19:b3:ab:fc:f4:00:5f:0c:7a:a9:c4:
02:47:37:d3:e7:e9:4f:68:81:f8:d3:54:81:4b:d8:
bb:68:2c:9b:84:71:7f:a7:a6:32:4c:f8:70:34:33:
e3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3F:57:07:2D:5F:DD:67:E0:B0:BD:D1:8E:D6:48:1A:42:4D:74:CE
X509v3 Authority Key Identifier:
keyid:40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:33:68:5a:a3:ff:ac:4d:56:a7:58:1b:50:10:ab:b9:c4:65:
40:28:d9:7b:47:42:ba:38:59:73:f0:ed:0c:d0:f8:3d:10:86:
3a:18:54:75:52:e8:69:67:0b:2e:0f:8a:08:da:ad:3f:00:7e:
3f:0d:38:8a:32:04:e0:44:06:6d:4a:9d:76:b3:8a:93:06:7a:
9e:9b:2e:a0:ae:cd:af:dc:4c:1b:a2:b4:66:ac:cb:9d:0e:f7:
c8:90:29:70:7e:71:07:68:8f:c6:c9:b3:05:aa:af:31:ec:8e:
29:e8:bd:13:8f:d0:03:a0:40:14:1c:23:43:01:c5:e6:c7:b2:
bb:d1:57:cf:d7:8e:0e:a9:32:e1:78:ea:97:6b:85:5b:7a:ea:
b8:d8:14:bd:1c:1d:4f:ac:3b:5c:c4:3b:d7:d0:3b:0c:ed:f5:
a0:34:57:a4:1f:81:69:3c:0c:5f:9f:38:03:97:47:a0:c6:24:
71:7d:2e:3a:2c:c1:f2:1b:1c:5b:f4:ec:42:10:21:6f:56:9a:
10:e1:47:cc:a5:ba:bd:32:4b:d1:46:43:38:88:98:8c:34:0e:
27:c7:92:d1:f1:d4:40:8d:9e:74:b1:31:3a:b2:c6:10:f2:3d:
ed:fd:e0:08:3a:70:5b:01:c2:27:d9:33:5a:b5:e7:14:62:c8:
97:97:be:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:52:42 2024 by rpki-client on console-fra.rpki-client.org