Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
File: qh3FCktSbfGOiwplZde51Yp10xU.mft (raw, json)
Hash identifier: 6Bdc2+g5INDAB02uysoR3mHlRixjGf5LjUA/Laz4YPA=
Subject key identifier: 3E:E4:B3:E6:FD:4E:F6:FC:AB:A3:A8:87:5B:06:8F:99:57:DD:0A:7C
Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Certificate serial: 019355E4011BCC5F61D633B5184887674676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
Manifest number: 137B
Signing time: Fri 22 Nov 2024 22:00:25 +0000
Manifest this update: Fri 22 Nov 2024 22:00:25 +0000
Manifest next update: Sat 23 Nov 2024 22:00:25 +0000
Files and hashes: 1: 6u7mJhyEhzQGCwV-nWAvmQQG-tk.roa (hash: NIovG29M2WeFvvydIUSMCZ/WG4Nt/d9l7LvOiRxpuhU=)
2: 8p4m40RjEEBKt_9L5DN5oCjIiac.roa (hash: Al2NCe+Yyy/mQ/rEwrK2ErQKuyy4RN5pzhL1/BqHB1Q=)
3: _rX0tIrxpOuGMxrlR9lDfUKogVE.roa (hash: oTCgBiCOrIMtosFoJWalGiE/W/HZFO72CWJ5h2cGwHM=)
4: jhN0kBLONpdLYJZP1zZUeD-Wgis.roa (hash: MOoXaEhocVFbe9Ji9PqhifjVWoFR8im5bYeMnd9WwKA=)
5: lVveqg52XXsQdLEOzgO3MiUu4-0.roa (hash: wz17knblgENPIwrHtkXQ82HS2sqaXWLgfZE+RjyNqHI=)
6: qh3FCktSbfGOiwplZde51Yp10xU.crl (hash: MTFwZe4KEAZ0BM05to1xlyzzY487O4ttZl9pvFjX2ic=)
7: qoEqCTm9UMW5_GFqKvbSmhxazkw.roa (hash: y0aHX+jCu52a/8bRb9CeMcUlGsM18j5t97MT8kd/pZg=)
8: u-kVZEk-sczKugzSQ4EDyFq-PjQ.roa (hash: 61gtGulcAxoZaiVu3TrVc3E7DkA3q5L7aLGjDjyN3y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:e4:01:1b:cc:5f:61:d6:33:b5:18:48:87:67:46:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Validity
Not Before: Nov 22 22:00:25 2024 GMT
Not After : Nov 23 22:00:25 2024 GMT
Subject: CN=3ee4b3e6fd4ef6fcaba3a8875b068f9957dd0a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:43:11:74:48:e7:fe:27:ee:a2:b7:67:b4:d2:
fc:c2:c3:9e:7c:11:53:59:89:f7:17:1e:a5:4b:6f:
ae:21:a6:6f:2f:59:0a:68:9f:1e:c1:9e:d4:22:31:
7e:99:8d:1c:3d:21:b8:bc:5e:32:8c:a9:8a:c3:ea:
a3:5a:9a:10:85:24:89:aa:21:23:07:23:e6:48:7c:
7a:4d:3c:64:7f:5f:f6:5d:a9:85:3c:0f:17:84:4d:
20:ba:01:ad:4f:17:ff:04:ef:d3:6a:bc:06:d6:6d:
a9:fd:e2:77:ec:1d:16:b5:80:38:b2:48:3d:be:c9:
6e:14:c8:70:01:31:b7:8e:3d:90:59:1d:50:49:4a:
08:83:da:d6:ef:85:af:dd:30:42:d3:3b:7e:16:3a:
76:3a:e8:e0:ec:b9:c9:97:8d:72:3e:75:c6:77:b9:
cf:bb:08:eb:41:59:d5:06:0f:fb:b7:bc:ab:bc:59:
34:a1:58:c9:f1:2d:f2:f4:cb:34:4f:6e:b8:35:5f:
85:50:83:a2:a3:74:09:c4:3c:3d:33:1b:4f:11:a6:
91:28:cf:1e:38:21:fc:83:91:01:46:cb:44:91:37:
c1:2e:90:1e:0f:7f:98:df:7d:c8:b9:49:4e:51:24:
68:fa:10:fc:18:38:c4:9c:d9:da:dd:19:5a:69:f5:
15:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E4:B3:E6:FD:4E:F6:FC:AB:A3:A8:87:5B:06:8F:99:57:DD:0A:7C
X509v3 Authority Key Identifier:
keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:77:d8:63:60:0c:72:37:5b:63:fa:90:32:c4:39:d7:5a:c5:
6c:6f:bc:68:9a:42:73:d1:e8:27:0d:a0:08:41:7d:76:f1:f6:
eb:6a:d3:28:a5:78:c8:f0:44:5a:d2:79:89:dc:b6:12:84:71:
1a:3f:2f:08:25:20:cc:4d:a2:4d:05:53:81:e5:a1:9d:90:31:
ba:d2:ea:2c:b1:37:c4:97:96:2f:26:55:bc:48:85:39:69:d0:
8d:37:44:a8:b9:d5:b0:f1:1a:6c:7f:bf:e2:3d:7f:52:2c:23:
2e:e9:db:cd:46:23:39:81:af:21:c3:4d:43:72:1e:72:08:96:
cf:90:2b:78:fa:c2:e1:5c:cf:f2:3f:86:a4:d5:19:72:bb:ff:
39:f9:0e:ae:09:88:8c:e2:de:ad:85:0c:73:ae:02:78:3a:8b:
e7:af:c6:d5:67:07:75:e9:00:37:c3:eb:37:f2:d1:09:ae:fe:
26:31:f7:35:a8:8b:59:bc:9c:60:ba:7f:1a:fb:e1:7f:88:ef:
14:ad:ae:12:e0:bf:67:a7:d3:f9:67:40:cf:a4:e8:01:4a:34:
70:4e:96:12:1c:4d:cb:89:d3:a3:35:9f:17:9c:cc:e0:80:1d:
1c:03:d6:e6:f6:15:43:63:fa:0a:e9:79:09:61:dd:8c:cb:42:
3b:73:72:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:20:18 2024 by rpki-client on console-ams.rpki-client.org