Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
File: qEOOrPTQZOh6drtGLTtLLMOFikw.mft (raw, json)
Hash identifier: lAtkXufuV1lWF7L24qXK322aKnccInBbPc8dd+X1ocQ=
Subject key identifier: BA:33:23:A8:79:40:37:28:DF:17:69:D6:5B:FB:3C:EA:E2:F6:79:80
Authority key identifier: A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
Certificate issuer: /CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Certificate serial: 0193579B8D4AB83E2BA12F6154272AA2658A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
Manifest number: 0AEC
Signing time: Sat 23 Nov 2024 06:00:32 +0000
Manifest this update: Sat 23 Nov 2024 06:00:32 +0000
Manifest next update: Sun 24 Nov 2024 06:00:32 +0000
Files and hashes: 1: RsXLwSguKojONcHfCGccX4tqFJ4.roa (hash: oYMiwpGVJvDpDBoi8PPduIYiD6phYaEZoF1lExjQiTU=)
2: _NB8dtkURWlVI-juyNbqoV0rHes.roa (hash: 6QXeEGt/OzicLqIqUdo3adTcXSxtmizDbLavyKV/gVA=)
3: qEOOrPTQZOh6drtGLTtLLMOFikw.crl (hash: Uh78RNg2pALq7AhbdfSvA/BhC5Rv9OkZB9VhIi1JVZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:8d:4a:b8:3e:2b:a1:2f:61:54:27:2a:a2:65:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Validity
Not Before: Nov 23 06:00:32 2024 GMT
Not After : Nov 24 06:00:32 2024 GMT
Subject: CN=ba3323a879403728df1769d65bfb3ceae2f67980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1b:f1:f1:55:cb:3a:e7:10:7c:f7:55:00:72:
9a:f1:b6:84:f1:be:76:01:8f:ca:0b:45:a9:56:e4:
6e:70:80:b4:05:e8:8b:d6:b9:e2:24:3f:25:be:7d:
82:46:77:99:0d:ff:99:8a:7c:ff:a0:57:a5:04:35:
2c:b3:b1:06:31:77:a0:dd:ee:2e:e7:50:cc:e7:f6:
c3:42:75:2a:1d:6f:a9:2d:f7:61:af:8a:76:b9:41:
98:ac:c3:df:3e:2c:5b:e4:30:76:b6:58:a7:db:6e:
a0:59:ca:3f:a1:5b:ea:0a:19:be:21:1a:02:e0:06:
93:08:30:ef:e9:3d:18:af:73:4d:9f:d3:67:5e:53:
5a:cc:ef:9b:9e:92:f7:8d:5e:bf:c4:ab:d0:1f:8d:
cc:09:9e:10:0b:36:e0:47:28:85:ac:2e:a5:5c:e9:
c3:3f:a4:6d:91:08:4d:15:62:2e:e0:19:b8:7b:9f:
5f:22:20:cd:f8:0b:07:3b:37:cf:2f:b3:b9:53:7d:
26:99:a6:33:39:27:d9:b9:c7:66:ba:7c:3b:a7:28:
0f:c9:25:8c:93:1c:e1:fd:7b:01:75:d2:c5:3e:d4:
b8:9d:57:e5:d6:16:a1:13:14:c9:5d:2f:35:ad:1d:
80:93:be:79:1e:71:f4:af:4e:6d:53:37:c0:bc:db:
d5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:33:23:A8:79:40:37:28:DF:17:69:D6:5B:FB:3C:EA:E2:F6:79:80
X509v3 Authority Key Identifier:
keyid:A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:3c:bc:6c:c0:fc:2d:b1:cd:0a:ef:4b:37:6f:c1:c9:0c:77:
17:94:a7:25:6b:78:b5:c9:ba:5c:18:55:d5:14:4b:7a:85:e8:
84:e3:15:cb:4f:87:bb:30:d6:b6:c5:da:c4:16:77:d8:a4:09:
2b:d6:dd:25:8d:6f:a8:e5:ac:9f:33:c3:63:55:82:82:36:78:
7b:e0:a0:d7:55:20:31:c5:cc:07:e4:83:59:9b:09:4d:37:5f:
72:ec:41:70:fb:35:0c:4b:96:c9:2e:d1:b1:83:ac:e6:78:b4:
b6:dc:4e:de:16:45:ae:64:ce:59:58:77:2b:19:fe:28:c0:51:
e2:b0:67:3d:a6:4d:57:fc:0d:42:5c:38:6a:b4:f9:63:dd:76:
3e:9f:11:cf:7d:6e:a8:05:12:9d:94:e2:0a:7e:9d:d3:7d:ef:
45:a2:7a:97:90:8f:0f:3a:20:d9:36:e6:22:c1:ac:0b:1c:cd:
69:ec:91:da:f3:17:59:19:0e:be:2c:bb:0c:08:cc:8e:e9:fb:
f4:f0:d9:fe:a7:42:32:4e:91:54:6e:e7:70:15:8f:84:ee:b2:
fd:db:07:33:80:6f:15:7d:bb:d5:9f:24:b1:2a:16:75:05:21:
7e:70:a9:c9:dd:6e:2e:f7:9d:38:85:ae:b0:9d:11:f3:13:fe:
4e:6f:58:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:14:00 2024 by rpki-client on console-fra.rpki-client.org