Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
File: qJhJa40d2CW0hwOPuHyhmbE7k98.mft (raw, json)
Hash identifier: OZVNjLIf6a5d8JV90h9VqcO7368aVXVf3Yin6+Nq+nw=
Subject key identifier: 93:10:8C:F4:63:01:35:23:D0:57:20:D7:A1:F2:3B:78:30:91:04:45
Authority key identifier: A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF
Certificate issuer: /CN=a898496b8d1dd825b487038fb87ca199b13b93df
Certificate serial: 019358AE025E2E85E3CE63BD226F6349E66F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
Manifest number: 107F
Signing time: Sat 23 Nov 2024 11:00:18 +0000
Manifest this update: Sat 23 Nov 2024 11:00:18 +0000
Manifest next update: Sun 24 Nov 2024 11:00:18 +0000
Files and hashes: 1: 21v58EpJxaUPzR-CRZJW-dpIuOg.roa (hash: RsvgQs+wnAX2kAkh/2MDzUzyL798yaBsHBO0KwCazOo=)
2: qJhJa40d2CW0hwOPuHyhmbE7k98.crl (hash: TR2JBIBqpljNGsFK+/Hj3Y8qFTb3NaAUMbv/3RVdZLY=)
3: w2m972IFHtKEUt0oSW19Tc8ZJhA.roa (hash: Wr3HbgKyKcRU9MvKghOJeetZfXQqrV+TDjaQZtWNKf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 11:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:ae:02:5e:2e:85:e3:ce:63:bd:22:6f:63:49:e6:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a898496b8d1dd825b487038fb87ca199b13b93df
Validity
Not Before: Nov 23 11:00:18 2024 GMT
Not After : Nov 24 11:00:18 2024 GMT
Subject: CN=93108cf463013523d05720d7a1f23b7830910445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e5:40:e0:f7:08:47:4c:91:68:32:6a:64:81:
6b:82:1c:d5:6e:3a:c4:5c:b6:88:25:ec:64:95:2e:
26:7c:0f:16:13:e5:55:35:d6:74:53:85:08:8e:28:
36:5d:ab:a6:04:4b:30:fe:82:f0:a6:c2:f5:8c:0a:
96:7c:09:8c:18:db:ab:21:a6:9c:da:a9:b2:cc:e3:
1b:59:2c:35:0d:8b:57:0c:6b:bb:a5:eb:5a:3c:99:
2d:cc:52:70:04:d5:23:39:02:1a:43:67:9a:8f:34:
51:8d:9a:63:86:4e:49:60:dc:e7:9c:e2:9a:85:0e:
09:fa:3c:5d:3b:27:16:ee:4d:3d:8b:7d:24:64:62:
d5:8b:73:ba:f3:57:35:d8:eb:f2:07:9f:68:86:cb:
4c:29:6d:86:b2:98:ab:46:3d:a1:17:49:ba:ef:85:
ac:51:d4:42:a9:02:7b:37:81:91:e0:72:a7:7d:af:
08:27:59:ef:e9:b2:8b:0a:69:61:4e:a6:3f:55:7d:
09:f1:59:e6:86:94:87:ef:3b:f8:38:10:f5:3e:8e:
4d:9b:39:d7:01:37:a2:72:3c:0b:d1:a1:7c:cf:04:
d0:3e:3b:83:46:a6:92:2d:ac:dd:3f:02:b3:8e:a8:
4a:7c:10:60:ea:0e:27:0f:56:42:97:cc:00:77:81:
ca:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:10:8C:F4:63:01:35:23:D0:57:20:D7:A1:F2:3B:78:30:91:04:45
X509v3 Authority Key Identifier:
keyid:A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:e1:b4:38:4f:e8:b1:c0:3a:ef:91:eb:f5:e4:f2:b0:b6:43:
06:39:17:21:94:0d:ea:ef:cb:0f:f0:10:4a:05:df:41:fc:0f:
89:b7:e0:9a:41:dc:bc:fa:83:c0:6e:96:97:be:89:0d:9d:0e:
f5:a4:83:8a:e6:dd:c3:87:1f:7e:03:d4:b1:e0:eb:f2:e2:68:
5a:d7:00:ed:ac:c8:cc:f5:7b:1c:06:f3:5e:2e:18:29:d0:e7:
18:41:78:b6:b4:4d:31:35:f4:8b:49:c4:38:00:16:94:2b:15:
97:3a:f8:81:4a:08:20:a8:19:2c:be:bf:2e:04:b9:44:7c:df:
1d:ca:40:aa:43:46:f8:01:cf:62:71:b7:dc:18:e9:a1:06:c3:
10:ae:4c:0e:c0:00:24:04:fb:63:8d:06:fb:d6:22:27:df:87:
ed:7a:f5:d4:e2:12:59:0c:a6:5e:4c:2d:3f:0b:e1:ae:df:2e:
54:8c:b0:26:a9:7d:c1:29:c4:2c:38:5c:5b:30:6d:09:e6:50:
58:50:e8:27:ac:80:cf:11:10:1c:fc:8f:2b:9b:12:3c:18:f4:
aa:ce:cc:e8:50:80:10:79:64:e4:f1:60:98:ce:d0:e0:c2:57:
ca:a3:b4:4d:3b:34:8e:a8:2c:d4:80:07:e7:df:d9:73:6f:b8:
a2:91:74:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:18:13 2024 by rpki-client on console-fra.rpki-client.org