Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
File: q838GnxSDPjRdykgjoXosZfErf8.mft (raw, json)
Hash identifier: evRQPni4xVnPviVrFSRq9FOOox0l3Qdn7ZKUKLETuDA=
Subject key identifier: F7:C5:70:77:13:B8:AD:61:EA:DA:EE:F2:CF:5F:05:55:DB:0B:31:48
Authority key identifier: AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
Certificate issuer: /CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Certificate serial: 0193628D64F171F971D5485BCE8B6D8FDC0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
Manifest number: 09A9
Signing time: Mon 25 Nov 2024 09:00:53 +0000
Manifest this update: Mon 25 Nov 2024 09:00:53 +0000
Manifest next update: Tue 26 Nov 2024 09:00:53 +0000
Files and hashes: 1: 6wWoZs5RLt_I2DhhrLEGczBEMzU.roa (hash: a9vG/goMYlc30oktf27BvAO4drB2ejkVF+THKX94kk0=)
2: G6gmIKJUhjkzi0z6OAdoJs844rY.roa (hash: c72HnbHzYZYTcnx4gTtQvMyKtw/dk3aTMnP9ypJnWbk=)
3: q838GnxSDPjRdykgjoXosZfErf8.crl (hash: Yz0G4DQuZpHwCEsOUcuTLfw79OvnmFz0YMYao0WkcEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:62:8d:64:f1:71:f9:71:d5:48:5b:ce:8b:6d:8f:dc:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Validity
Not Before: Nov 25 09:00:53 2024 GMT
Not After : Nov 26 09:00:53 2024 GMT
Subject: CN=f7c5707713b8ad61eadaeef2cf5f0555db0b3148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:54:cc:20:68:5b:5f:04:da:6f:1f:83:61:e3:
f0:54:b2:eb:d2:ba:4d:67:ba:a6:62:7d:62:c0:15:
46:bf:5d:11:d1:b5:32:7d:25:63:2c:42:29:2d:cd:
83:2d:0b:bb:18:32:4d:0f:78:73:e3:ee:09:43:2f:
ae:6e:9d:af:83:5e:a3:8f:43:d4:e7:3c:d2:93:a7:
9c:6f:d7:5b:06:2f:73:41:60:3c:93:14:fe:1a:7d:
0a:31:05:0f:31:3c:53:f2:ae:70:c4:9c:a0:f8:0d:
c3:81:da:fa:ed:96:8b:44:90:7b:69:0b:44:34:f0:
42:d8:3b:2a:c5:52:70:6b:89:52:0f:29:6a:75:f1:
dd:1b:2c:df:0f:ec:bd:8a:ab:c4:a5:0c:98:82:2e:
78:80:b9:c8:54:98:38:cd:cf:9f:56:ac:2e:50:82:
cc:a8:66:0f:1c:ae:b7:bb:1f:53:aa:0b:1e:24:0d:
08:00:5d:4a:31:4d:ed:aa:05:66:95:9e:e8:fb:1a:
a5:53:7b:05:b7:21:00:7d:e8:74:94:16:df:ef:ac:
01:5f:e2:f4:19:ff:3f:59:05:fd:7a:89:c0:7d:76:
03:43:cf:5c:9a:d5:62:5e:3e:94:9b:66:bf:6e:67:
a6:1e:f1:56:64:46:01:c0:76:f8:20:75:a3:23:07:
86:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C5:70:77:13:B8:AD:61:EA:DA:EE:F2:CF:5F:05:55:DB:0B:31:48
X509v3 Authority Key Identifier:
keyid:AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:61:8d:46:db:b7:9b:02:ec:51:ba:cf:70:ba:66:55:d2:69:
61:e6:61:11:bd:89:b0:0e:b8:71:42:17:8f:15:56:33:2c:62:
89:c7:44:b0:15:82:11:1e:a8:15:3f:60:af:d8:3e:69:f9:77:
0e:bf:88:20:f2:4a:73:0d:f6:15:ff:b4:99:0a:52:30:56:18:
a1:81:d6:1d:52:8f:b8:b4:cb:22:0c:fe:23:1e:ee:73:c0:6a:
52:fd:08:90:80:89:3b:bd:85:b7:ed:11:81:a9:45:de:4c:79:
3e:ef:d8:57:a3:ae:f2:47:fa:2d:61:ce:7b:6a:a0:da:ed:c6:
93:f9:20:75:b4:65:dd:f4:f5:71:1c:4a:35:42:f0:6c:c1:53:
15:e1:33:e5:ad:26:eb:a2:7a:b3:be:c9:67:5f:c9:c7:c0:04:
8e:41:61:65:e6:1a:b5:be:55:8b:91:b3:60:db:50:a8:0c:1d:
3f:de:cf:23:0f:e9:f0:f6:73:82:0b:85:e8:29:90:d8:fa:5f:
60:69:d4:f8:90:45:61:df:82:ab:69:0e:1e:93:53:9d:0e:c2:
27:ec:c4:1e:d2:a0:31:9a:3a:d1:06:bf:25:e7:36:7a:12:a3:
19:d5:36:a0:2d:76:2e:58:9f:96:71:c1:4f:bf:cc:9c:06:5a:
24:df:84:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 11:43:40 2024 by rpki-client on console-fra.rpki-client.org