Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
File: QHznj0rDupAqDDjcAaDF8hJlGbA.mft (raw, json)
Hash identifier: z960Lo9pwZ4O52HBU+5UOtMzriJ8O0eNwWOjzweoeVE=
Subject key identifier: A3:62:9A:34:0D:A3:06:FB:C6:46:99:10:83:9F:5E:3F:66:3A:CF:1A
Authority key identifier: 40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0
Certificate issuer: /CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0
Certificate serial: 01935350EA5AFE1B4EFA8BB705DB943B283D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
Manifest number: 07DD
Signing time: Fri 22 Nov 2024 10:00:32 +0000
Manifest this update: Fri 22 Nov 2024 10:00:32 +0000
Manifest next update: Sat 23 Nov 2024 10:00:32 +0000
Files and hashes: 1: Q4-YHrSDebCXdOEMOd2_iFai00Q.roa (hash: 3O/GZxGnNKQIF2aryC1DZ23ufuBb0iZm9g4HaYYVvOs=)
2: QHznj0rDupAqDDjcAaDF8hJlGbA.crl (hash: cR1OxVuTYhUXcM/eNQoEfOsI9+MVt11B8NgyuIU53aE=)
3: eUumkvwZMIoQ7bC4unqWk005_cs.roa (hash: bc6Wyi7aRXhU3AiJklD7d9+BcehMtEaY1/gIK8Zm5GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:50:ea:5a:fe:1b:4e:fa:8b:b7:05:db:94:3b:28:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0
Validity
Not Before: Nov 22 10:00:32 2024 GMT
Not After : Nov 23 10:00:32 2024 GMT
Subject: CN=a3629a340da306fbc6469910839f5e3f663acf1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:77:b2:5b:de:30:a5:82:6e:8e:cf:61:5a:1e:
39:a6:8f:08:64:f2:54:35:f1:0e:fb:a0:f6:37:38:
fc:eb:fa:33:cc:ee:a2:ad:61:13:ab:07:41:42:00:
7b:6d:94:a7:0d:f0:1a:53:a9:cc:f8:59:c5:54:3e:
f6:8b:51:a0:ab:87:1c:7c:21:7b:0e:f8:7e:67:3d:
20:45:06:21:aa:71:95:68:7a:fc:f6:dc:e0:fc:07:
50:36:aa:3f:03:e7:bb:89:21:4b:de:da:84:a5:ad:
32:91:86:11:af:54:81:1d:62:a4:34:da:c5:37:c4:
d8:9e:34:fe:44:47:ba:40:b7:b0:80:3b:09:a3:09:
42:af:cb:a2:30:88:a2:58:09:7a:00:11:fc:4f:97:
97:39:97:5b:87:73:b3:e3:fe:ab:55:aa:c6:4f:c9:
fe:8c:81:ea:b0:cd:f3:45:b9:57:31:65:58:d9:fc:
80:b0:0c:ab:f1:b4:29:f6:51:bf:b5:9e:ad:46:b4:
1a:06:fd:c5:e0:ef:a9:59:2d:25:6d:77:c2:66:84:
6b:b7:1e:20:b3:08:4e:b1:85:49:b2:ca:e8:6a:72:
0a:8b:30:3f:41:ed:f0:63:d0:89:37:c9:91:d3:68:
85:57:8e:47:58:5e:7a:2b:5a:c2:00:ce:e8:2f:01:
e3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:62:9A:34:0D:A3:06:FB:C6:46:99:10:83:9F:5E:3F:66:3A:CF:1A
X509v3 Authority Key Identifier:
keyid:40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:34:8f:34:17:a5:09:de:0a:13:63:94:0a:5c:52:6b:c0:b1:
41:c7:5a:83:bb:a5:b4:13:9c:a1:54:a9:55:cc:49:db:64:29:
76:d7:80:55:21:61:59:63:d8:e2:ff:3d:4b:5c:58:cb:3e:41:
d6:d1:ac:98:36:97:d2:57:15:f8:6e:f4:54:da:90:76:1d:75:
26:e5:74:3d:69:8f:f8:39:ae:ba:94:53:dc:2b:c4:0d:f6:c9:
a1:c0:d0:dd:6a:51:91:c9:5d:10:88:85:c1:6c:c5:13:35:35:
e9:77:53:0c:91:70:23:df:90:37:fb:57:c5:4f:ef:8b:f3:fb:
d0:ac:b9:0e:ef:f3:e6:d3:06:99:ec:14:b6:86:1d:8f:29:7f:
4c:61:6a:e1:36:07:44:af:6d:ae:57:a6:ed:b8:43:9d:ec:ea:
11:8c:0a:ed:66:84:29:6f:f0:23:f1:c1:80:0a:37:12:56:c9:
f4:2d:3f:7a:7d:06:fd:4f:e1:bf:b3:24:ef:57:6f:6d:22:89:
33:3c:b2:b2:3a:cc:83:ea:64:4a:53:5e:b2:e9:8d:00:88:28:
3d:f5:da:09:c8:7a:37:d9:4f:74:e4:63:49:2f:82:d5:18:70:
48:68:54:ed:10:94:2d:9c:92:0d:6d:d9:64:d5:b3:fc:f8:4e:
3b:f0:07:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:57:33 2024 by rpki-client on console-ams.rpki-client.org