Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
File: Q68umH0rY63apa3BePMekNh2qqc.mft (raw, json)
Hash identifier: EVwZIaHSmQebnI0pe0wjhd2lUFj2iqxhZrJGvZL77Y8=
Subject key identifier: B8:0B:07:8F:1C:F6:8B:5D:2E:8B:5A:79:20:96:7A:7E:81:CA:B0:90
Authority key identifier: 43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
Certificate issuer: /CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Certificate serial: 019352072384341039A87A424EF220AB58A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
Manifest number: 136E
Signing time: Fri 22 Nov 2024 04:00:19 +0000
Manifest this update: Fri 22 Nov 2024 04:00:19 +0000
Manifest next update: Sat 23 Nov 2024 04:00:19 +0000
Files and hashes: 1: EdjUYCXOeI4a_5PgHRXQ0uAIKlc.roa (hash: SE6pa7nS7Q0NNF28gzcOeP6TPFsXJ42FwbMcF8BDC+Q=)
2: InUkjDoTPtDZuNA2uBiYGNo3WP4.roa (hash: ybhVuVDa6fONdegLODv4tBraCDjeSBdrzz2ben4UE7w=)
3: Q68umH0rY63apa3BePMekNh2qqc.crl (hash: GmOXBfQYaBvmCnrtbUG6VUgTuLsSF6UV7JrLBMH3WT4=)
4: WSiXGl0rnUXoY4JIZnpBwmNR9Cs.roa (hash: oII2Mov7V296ekHinkt1Ul5VG4cAviAily1Uj7GAJUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:07:23:84:34:10:39:a8:7a:42:4e:f2:20:ab:58:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Validity
Not Before: Nov 22 04:00:19 2024 GMT
Not After : Nov 23 04:00:19 2024 GMT
Subject: CN=b80b078f1cf68b5d2e8b5a7920967a7e81cab090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:57:12:01:0a:66:a0:17:c3:4b:ab:94:2f:5f:
71:1b:94:54:f3:d0:31:77:e3:97:76:20:0b:7d:c4:
35:92:02:6b:da:4a:a5:71:9b:bc:e5:5d:ee:9c:ee:
aa:bb:86:98:49:62:e8:cf:77:de:09:44:dc:f7:57:
35:ae:f2:97:a2:ab:4f:4a:d1:f4:68:2e:27:6e:d9:
f8:d8:fd:6a:74:a1:5e:16:29:03:c7:95:d7:14:0e:
52:06:6c:ff:7c:e7:c4:c8:f1:7e:3e:c7:11:ee:97:
0d:ac:5e:0e:6b:14:a8:b2:31:07:ed:3c:27:97:85:
18:36:4a:d5:ea:73:5d:98:a4:27:22:ea:58:e2:94:
12:70:19:0e:19:ef:69:4a:f4:60:ad:dc:0d:38:68:
41:07:d7:e1:c3:0e:10:67:10:74:67:7d:27:6d:52:
68:5e:a3:c9:22:98:5b:58:ba:dc:3f:eb:86:2e:5f:
2f:fc:ec:d7:5f:ca:a6:3b:d3:b2:92:0d:97:fb:8b:
d7:bb:44:e3:c0:a7:2a:b6:e1:be:62:ca:d0:b0:90:
d4:8f:2c:1a:17:c7:6c:b4:8c:08:76:80:72:2a:44:
fd:21:a9:ac:d5:42:8a:e9:c6:75:ff:df:33:75:60:
ce:a3:81:10:cd:e2:b5:1e:b0:b9:8d:89:07:8b:aa:
a8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0B:07:8F:1C:F6:8B:5D:2E:8B:5A:79:20:96:7A:7E:81:CA:B0:90
X509v3 Authority Key Identifier:
keyid:43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:83:ad:29:c2:d5:02:9a:b7:4c:4e:b5:0b:f1:66:d1:c3:64:
e2:d5:cd:de:d1:3b:5f:3c:39:34:0b:8d:61:4c:2a:c0:d4:5f:
b4:e7:76:69:65:91:49:f8:1d:22:84:f7:4f:83:6e:a7:58:3a:
79:ae:6a:84:34:85:a5:61:21:76:6b:6f:d1:77:32:4e:56:8e:
5d:02:ff:86:3b:99:c1:6f:0f:52:dc:4d:43:36:60:8f:b1:41:
56:0f:58:23:1f:f5:e8:54:9a:49:cf:0d:21:e8:f2:fc:04:56:
6c:5d:b7:47:ec:94:d6:05:90:d7:ea:a2:7a:c3:fa:38:ff:f8:
c5:7a:a1:61:0a:cf:63:04:22:f3:5e:ac:ad:cf:18:7a:a4:e2:
f9:09:93:80:a1:f8:cb:16:cc:16:70:b4:7b:bf:72:d4:2e:50:
ce:c0:0f:35:c1:7e:9f:9f:aa:ef:b3:75:8c:94:99:f7:13:e7:
9a:24:3d:b2:9b:f2:12:9c:2e:36:3a:9a:57:a5:62:e2:24:ce:
e0:c7:ba:b4:1a:f1:b6:c4:3c:a8:e4:c5:89:07:05:2d:a0:3b:
6b:63:2e:ae:a7:ee:c3:77:ff:07:1d:4e:6c:04:53:d0:34:e5:
43:9e:42:58:f9:c7:73:79:31:29:04:9b:c8:c3:3a:3d:a4:18:
04:3e:e2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:40:46 2024 by rpki-client on console-ams.rpki-client.org