Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
File: QXQcBdStftaQ5XHvXtD4dSLaR9c.mft (raw, json)
Hash identifier: NrQIGw1Hmt7JC5rrMIQRymaI7Q7vJekBiRIGd0dtajw=
Subject key identifier: 85:57:14:3D:1E:F6:69:C3:5D:F9:66:66:B6:E5:5F:D9:79:A8:F6:EA
Authority key identifier: 41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
Certificate issuer: /CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Certificate serial: 019358E50EDB495E4F0B37D8DBA1543B7494
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
Manifest number: 0F17
Signing time: Sat 23 Nov 2024 12:00:26 +0000
Manifest this update: Sat 23 Nov 2024 12:00:26 +0000
Manifest next update: Sun 24 Nov 2024 12:00:26 +0000
Files and hashes: 1: QXQcBdStftaQ5XHvXtD4dSLaR9c.crl (hash: kC+VVIFq8sARvmytG6lB8Cnt2Fdtz651KKDR6UIaiVk=)
2: RXHk3atO2mRr6pCxiwqqgXlyQgU.roa (hash: KKaz7TnoNn3C+WRSPhhEKu2mI0zNIxrn8yLpEZ0waWg=)
3: qDhIND7RidKRCSjSjL0rFVBO-qk.roa (hash: vC2+1i58Yb7/wTnjk82ttLyMmP6KcnAObkoHEASApng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:e5:0e:db:49:5e:4f:0b:37:d8:db:a1:54:3b:74:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Validity
Not Before: Nov 23 12:00:26 2024 GMT
Not After : Nov 24 12:00:26 2024 GMT
Subject: CN=8557143d1ef669c35df96666b6e55fd979a8f6ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:46:d8:23:f7:22:f8:07:c9:b1:2c:be:cd:a5:
c4:a6:2e:0d:d8:42:cd:0c:d6:03:5c:2d:83:19:d3:
7b:9e:02:46:12:fc:7b:bc:bf:74:81:a1:dc:80:57:
3b:5d:fc:e5:a6:bc:cc:d2:c3:d4:4f:52:70:d6:16:
d3:bb:2c:80:57:53:1d:90:24:90:ac:52:39:b2:17:
85:f4:05:f8:d8:1f:f4:b1:4b:8f:4d:98:e8:e7:c1:
1e:bf:64:f4:98:86:a8:7c:49:99:72:23:d6:ad:03:
8a:33:cb:f4:f4:b2:87:1c:71:a8:d6:e5:09:23:d7:
d0:45:f3:d2:0a:76:cc:75:c5:49:6e:30:4d:5a:36:
38:58:ab:57:13:9a:a1:9f:27:71:52:17:3c:5b:a4:
60:6c:a6:e5:a5:68:c2:b6:8f:6f:8d:ee:67:c7:3a:
45:98:ed:c8:a0:9c:05:89:ec:cf:b1:00:20:9e:fb:
6a:d9:88:1a:42:5d:10:7d:d9:8e:5c:b4:fb:fa:72:
2a:b7:f9:f8:ae:87:e2:1d:f3:21:ee:ba:31:cd:c4:
a1:af:c3:f8:e6:14:b8:7b:39:66:40:46:af:01:33:
31:03:03:83:bd:d7:5f:f3:34:b1:f2:81:6f:38:cc:
ad:80:df:02:5c:9c:f3:31:24:0d:4d:a5:4d:d0:7b:
b2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:57:14:3D:1E:F6:69:C3:5D:F9:66:66:B6:E5:5F:D9:79:A8:F6:EA
X509v3 Authority Key Identifier:
keyid:41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:1a:98:80:7a:a4:c4:03:4d:3e:cc:ab:00:c3:b8:61:fa:6a:
b0:29:0e:39:cc:73:a6:91:bd:67:30:b6:61:b0:1e:b7:de:22:
33:26:6c:85:90:ba:e7:23:77:14:eb:0e:e3:eb:62:a0:2f:69:
5b:f2:3b:c0:eb:41:23:a9:4c:7f:c5:af:bd:8d:5c:b5:5f:17:
df:9c:12:58:9b:dc:c8:ee:db:14:1f:55:9f:6f:97:54:4f:ab:
ca:08:fb:66:7d:15:2a:27:58:e0:ee:16:18:bc:d4:1a:10:e6:
42:49:b1:3b:db:5b:0d:33:d2:e0:4d:62:29:45:9c:76:f0:a3:
30:f8:b5:bf:6c:7a:a4:2a:9b:a4:a9:94:4e:a3:88:ba:4a:79:
a3:85:db:c9:c5:c1:27:d2:b9:68:27:29:0b:59:a7:89:c0:57:
b9:cd:67:11:86:7f:fe:c6:7b:e1:00:51:b4:b1:44:33:ec:c6:
e1:43:6c:2b:4f:a7:d9:db:2e:a2:ca:e2:c7:a1:7c:f2:26:aa:
43:22:4e:78:73:8c:b5:e3:ec:a5:d2:7e:cb:a6:44:ea:ef:6a:
f6:f3:06:ec:03:be:df:f2:47:9c:fc:20:90:5e:88:af:9f:15:
82:98:05:f5:13:b3:af:2f:07:e1:b0:8c:2a:53:cd:34:d0:a8:
48:ed:e9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:16:34 2024 by rpki-client on console-fra.rpki-client.org