Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
File: QcjQJBEIsB9etwj-i7uEfVOjDxY.mft (raw, json)
Hash identifier: tPmDhWzXtWREQKctfOkoJ0q49UvEmxErfdYSw1HP2Xo=
Subject key identifier: 5C:6E:B8:AD:61:FF:65:66:DA:FE:7B:C4:F5:44:4D:E5:9A:78:77:C9
Authority key identifier: 41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
Certificate issuer: /CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Certificate serial: 01935A66A45ED39085C1FD847F4793B30C70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 19:01:36 +0000
Manifest this update: Sat 23 Nov 2024 19:01:36 +0000
Manifest next update: Sun 24 Nov 2024 19:01:36 +0000
Files and hashes: 1: J5MRXSYfa9QtIaMfbm2oxEi-b7w.roa (hash: Lm+QYBtFZcYU19tcNQwvBFCcfgt11gPEP9r3rewXPqw=)
2: QcjQJBEIsB9etwj-i7uEfVOjDxY.crl (hash: 4crVHxdr+158FzR4IsK0Rspx/ie5RStiaVhZibCJAZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5a:66:a4:5e:d3:90:85:c1:fd:84:7f:47:93:b3:0c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Validity
Not Before: Nov 23 19:01:36 2024 GMT
Not After : Nov 24 19:01:36 2024 GMT
Subject: CN=5c6eb8ad61ff6566dafe7bc4f5444de59a7877c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3c:7e:94:1d:91:3d:ea:0a:64:37:0e:61:7c:
4f:ba:d6:6b:ea:01:f4:ce:b2:06:26:a6:3c:3b:20:
ca:16:ea:e2:c6:b0:e1:36:a9:0c:d9:b6:50:87:a6:
2a:b6:6d:81:08:db:9a:04:45:33:ea:1e:f4:7b:74:
68:ba:df:1f:c9:5d:df:71:39:1a:c7:eb:2c:9f:e7:
25:05:f0:59:6c:df:eb:4a:97:5d:f5:49:24:15:09:
f2:70:1c:73:9b:74:80:b1:97:60:c7:a5:3d:91:b8:
53:ba:a5:f6:64:1d:17:42:5b:d3:d9:d0:cd:65:38:
a7:bf:ce:0c:f3:0d:78:14:70:3a:a6:4e:fe:f9:5b:
db:8d:e5:ae:fd:15:87:6a:03:ea:60:8c:13:39:0b:
ea:ee:fd:90:6c:1a:49:f9:c7:72:29:c1:bd:d8:1e:
e9:6d:7f:d4:0e:af:23:73:9f:eb:4e:f8:a9:6b:47:
ce:60:5f:de:da:a6:e0:43:8d:8c:da:96:ae:c1:f9:
16:b8:6e:d1:d9:e6:70:be:c4:82:56:d6:99:64:ed:
3d:2e:f2:81:cc:3e:a7:25:d1:d4:65:d1:9b:f4:6d:
ee:e0:3f:bb:64:01:b8:3b:5c:fe:9f:ec:42:81:d2:
dc:6b:b3:e2:e3:23:13:15:a3:d5:c9:96:07:c0:d5:
a1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6E:B8:AD:61:FF:65:66:DA:FE:7B:C4:F5:44:4D:E5:9A:78:77:C9
X509v3 Authority Key Identifier:
keyid:41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e7:ac:46:13:be:1b:de:2b:e2:04:52:83:3c:37:b7:a9:fe:
70:b3:79:7d:51:8a:60:65:47:af:1b:46:9b:26:ae:a1:ce:00:
ca:92:32:be:7c:f8:03:31:08:d3:fe:39:de:b2:7e:fe:31:9e:
7f:0e:0c:8b:74:2a:5d:c3:b5:a6:26:dc:44:4d:ef:18:d8:c3:
f4:e7:85:da:c0:9c:5c:c7:22:d8:b2:98:c3:0e:2a:06:aa:01:
c7:87:de:8b:9f:b9:90:7d:9f:06:ca:48:27:bf:b6:bc:e0:b2:
58:be:3f:ed:fa:ef:99:84:f3:db:bb:ff:eb:66:8c:bb:90:f7:
a0:31:af:a4:41:ce:85:49:5b:b3:2d:cc:1e:74:a7:fd:a7:f2:
1e:58:8e:dc:08:28:c4:d9:76:71:46:d7:d5:41:17:4d:dd:78:
8a:17:75:60:ff:9f:2d:14:ff:2f:ca:d5:8d:f5:cb:14:9f:a7:
d1:97:28:a7:33:8c:82:d9:1d:dd:ab:3a:a9:02:9c:4d:cd:13:
dc:66:b4:0a:e1:e4:1b:7f:ec:a8:7f:36:96:fc:cb:be:a4:f1:
dc:23:0a:1c:71:3e:46:19:12:24:22:70:e6:cd:08:00:99:14:
ec:84:ea:69:be:69:0c:46:4c:10:ea:51:c5:85:5a:77:fa:31:
22:56:9c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:53:09 2024 by rpki-client on console-ams.rpki-client.org