Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
File: Q-BF0CHUiuhhoM5n040VoGdlOjE.mft (raw, json)
Hash identifier: ciPkoujlm8hoEcAs+71v7p2LF1/YeXY+k5e8N3i5YVs=
Subject key identifier: F2:AB:47:0A:08:74:52:0F:6E:67:B4:42:B1:79:F2:66:7D:27:A1:E8
Authority key identifier: 43:E0:45:D0:21:D4:8A:E8:61:A0:CE:67:D3:8D:15:A0:67:65:3A:31
Certificate issuer: /CN=43e045d021d48ae861a0ce67d38d15a067653a31
Certificate serial: 019369D8FD499D1DCEC2CFC59A472DFD1F53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
Manifest number: 0968
Signing time: Tue 26 Nov 2024 19:00:48 +0000
Manifest this update: Tue 26 Nov 2024 19:00:48 +0000
Manifest next update: Wed 27 Nov 2024 19:00:48 +0000
Files and hashes: 1: Q-BF0CHUiuhhoM5n040VoGdlOjE.crl (hash: /UqBJ/AbHWsTTDzRoWzQr6WHDhSBrXoJLlcO8YR2lbU=)
2: R3QTdnatKdc8-oTybvzNU0gvSTc.roa (hash: 10gcxEBffX5nHqQHALnpNzmts+oPjMP0GZ/awZe0lTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:d8:fd:49:9d:1d:ce:c2:cf:c5:9a:47:2d:fd:1f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43e045d021d48ae861a0ce67d38d15a067653a31
Validity
Not Before: Nov 26 19:00:48 2024 GMT
Not After : Nov 27 19:00:48 2024 GMT
Subject: CN=f2ab470a0874520f6e67b442b179f2667d27a1e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a9:35:6b:3c:12:62:ac:01:23:15:b4:e6:5d:
9f:72:0e:1c:6f:1f:71:40:b7:95:f0:aa:b2:62:eb:
e6:49:39:eb:19:be:cf:2e:26:1a:36:a6:16:db:94:
f3:4a:d1:c7:26:67:b1:34:dd:c2:47:d9:8f:57:bd:
6a:9c:45:a7:7e:37:e3:e4:90:10:83:82:15:4b:dd:
f8:c3:0d:e7:39:29:fb:49:3e:dc:35:ee:fd:eb:33:
19:86:05:e9:1d:90:92:38:76:e6:d7:c6:ee:a8:29:
a0:d4:b1:b6:70:45:b4:5f:d4:25:25:71:27:f4:8b:
55:09:fc:2d:9c:9f:58:3c:ad:d7:0a:10:ac:9a:0b:
01:6c:f1:49:1e:9e:95:c2:de:a4:cc:b3:f6:e5:51:
95:be:20:85:07:74:d1:3d:7c:81:16:3f:89:5f:2c:
23:55:48:b0:fe:17:96:34:b9:37:44:5f:0c:ad:76:
6c:05:5f:98:bf:62:12:2c:4d:85:38:75:9c:b8:13:
17:f1:8f:72:b1:f5:62:dc:51:32:fc:d7:b9:f3:60:
40:be:5b:b5:5e:54:b2:4f:6f:43:19:16:97:70:66:
9c:cd:7d:69:53:a3:d3:7e:fa:38:b4:57:f6:8f:92:
ee:62:53:d9:32:b2:0d:67:9b:4d:d3:28:72:0d:3b:
35:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AB:47:0A:08:74:52:0F:6E:67:B4:42:B1:79:F2:66:7D:27:A1:E8
X509v3 Authority Key Identifier:
keyid:43:E0:45:D0:21:D4:8A:E8:61:A0:CE:67:D3:8D:15:A0:67:65:3A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:13:31:a3:7b:c9:69:56:c0:06:e1:ac:5e:0e:cc:6d:24:9f:
34:ba:5e:c0:0f:53:c2:a8:de:59:ef:b9:a8:25:28:90:92:bc:
7b:b0:73:0a:2b:0e:c9:00:69:18:f5:bc:9a:f0:f5:7f:e6:11:
83:f7:5b:ad:4b:11:5c:4d:17:aa:6d:a6:a9:90:15:4b:ac:f3:
6a:c5:c8:f0:07:42:c4:30:03:20:51:72:02:d3:a0:b9:b4:a7:
d8:73:d1:10:9a:22:d1:3e:71:fc:78:f8:5b:31:03:48:c7:85:
e4:ee:6a:a3:00:84:2e:dc:33:7d:db:b4:2a:d9:f5:90:44:2e:
bb:22:5a:15:da:87:23:01:d7:31:52:02:c3:34:b1:3e:89:5a:
03:4a:11:51:05:37:63:60:ac:c3:71:c6:de:57:a8:60:c7:4b:
dd:76:92:f7:05:fc:05:32:54:4d:59:18:b9:20:af:62:29:12:
35:32:6b:be:10:31:b4:e9:6d:fb:f7:4d:da:e7:31:69:9f:fb:
1e:ad:4b:1e:17:7c:a9:c5:8c:d5:63:51:6a:96:39:81:90:e8:
09:13:7a:46:93:a4:14:a4:16:77:7b:f9:3c:c8:5d:d9:79:0c:
29:3f:6c:2d:0b:8e:a3:cb:c9:4c:bb:df:21:09:6f:72:65:80:
f0:3d:42:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:59:50 2024 by rpki-client on console-fra.rpki-client.org