Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.mft
File: qjHuUSwaViq56UEKgx9y_UMYiS4.mft (raw, json)
Hash identifier: pSjnx9i4MTukLrge8c0+yKW2sUb9UOcglUzzG8cTS4I=
Subject key identifier: 38:A8:17:4F:57:AE:FA:72:8D:9A:0E:62:AF:40:45:13:11:EC:FA:8F
Authority key identifier: AA:31:EE:51:2C:1A:56:2A:B9:E9:41:0A:83:1F:72:FD:43:18:89:2E
Certificate issuer: /CN=aa31ee512c1a562ab9e9410a831f72fd4318892e
Certificate serial: 019367EB1CEEBECDEF2DEA4CD45399B7109C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjHuUSwaViq56UEKgx9y_UMYiS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.mft
Manifest number: 0653
Signing time: Tue 26 Nov 2024 10:01:21 +0000
Manifest this update: Tue 26 Nov 2024 10:01:21 +0000
Manifest next update: Wed 27 Nov 2024 10:01:21 +0000
Files and hashes: 1: HhawQSpCA1Qu6lmBsKMxsEmab30.roa (hash: I08bPcEUFSnzt9C/+8keU57kDAZLLlmDNMI0zvaFHGo=)
2: qjHuUSwaViq56UEKgx9y_UMYiS4.crl (hash: H7sf2eBWbtpW/dNZ6zOjJhSaR5lAAcesJcCH2ZxZMac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjHuUSwaViq56UEKgx9y_UMYiS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:67:eb:1c:ee:be:cd:ef:2d:ea:4c:d4:53:99:b7:10:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa31ee512c1a562ab9e9410a831f72fd4318892e
Validity
Not Before: Nov 26 10:01:21 2024 GMT
Not After : Nov 27 10:01:21 2024 GMT
Subject: CN=38a8174f57aefa728d9a0e62af40451311ecfa8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4f:5e:43:4f:26:5b:53:49:86:dd:0e:52:9e:
0e:eb:9d:1e:0b:f3:9d:32:6a:a3:69:00:e3:8a:ae:
e6:c1:ce:e4:ab:b2:a5:a1:02:6f:d5:e3:07:30:d4:
69:0c:8e:fe:10:cc:ee:00:56:f0:93:ef:48:e1:fe:
f3:6a:1b:af:b7:4a:49:7d:50:e9:46:2f:fa:5f:8e:
9c:44:7e:3e:9d:97:0b:e7:3d:1a:5b:d0:4e:93:94:
85:48:fe:7e:99:8d:0b:bb:1b:a9:7d:a3:ab:70:f7:
28:37:95:14:3c:15:a7:6e:8b:54:b2:2d:5c:4b:18:
7e:b5:91:b8:27:51:7d:21:c3:2a:c5:98:7f:ec:30:
56:51:44:12:9f:43:df:b4:27:76:ee:3e:ea:4f:76:
99:ba:6c:74:11:3d:0d:f5:6c:56:6e:c7:8e:b9:c5:
f2:57:2c:ae:df:84:b3:bd:75:36:cc:fd:90:3a:36:
92:5a:aa:6a:50:67:b9:b7:af:7e:8a:56:3e:42:6e:
f7:a5:bd:44:67:fd:a2:e5:4e:ce:6f:62:1e:29:cb:
cf:1d:80:8d:0a:f3:9c:38:06:8d:6f:1c:7c:0c:7f:
a2:20:ce:ed:cc:93:4f:2d:2b:0d:42:d7:18:43:ee:
80:0e:1b:98:c2:7b:21:d8:1e:8d:a3:6e:1a:1e:0d:
e8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A8:17:4F:57:AE:FA:72:8D:9A:0E:62:AF:40:45:13:11:EC:FA:8F
X509v3 Authority Key Identifier:
keyid:AA:31:EE:51:2C:1A:56:2A:B9:E9:41:0A:83:1F:72:FD:43:18:89:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjHuUSwaViq56UEKgx9y_UMYiS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e8:63:0d:72:5f:d0:6c:bf:da:e0:90:c5:77:3b:07:61:7f:
a8:d9:1b:f1:97:92:05:79:f9:95:0b:e9:90:3e:3e:d8:49:30:
0e:a1:ff:40:84:7c:4b:c4:7f:f8:ef:3e:b5:65:eb:8c:75:71:
5c:ec:dc:06:3f:a6:43:4a:5f:21:d9:30:cc:21:7d:ac:78:2c:
a9:bc:9e:9e:c7:ed:d1:47:52:15:f0:bd:c2:db:70:02:4b:30:
6c:a4:28:80:0a:1e:d5:85:3c:01:78:6f:bc:e5:bf:b7:8f:66:
b9:39:90:bc:a9:17:af:67:42:60:a7:d7:e5:84:6f:82:f2:8b:
8b:54:6e:14:72:cc:6d:2a:c5:2f:8a:68:4e:1d:b5:7c:37:97:
24:8f:54:2b:4c:32:ef:1f:ee:94:9f:d0:22:04:d8:fe:d9:99:
6d:d4:34:62:25:aa:95:98:f1:4b:d8:d9:65:c4:bc:96:3e:bf:
af:2c:db:03:c3:b9:79:5a:54:14:4a:80:b5:f9:b7:e5:0d:db:
55:81:1e:07:61:4a:37:ca:72:09:75:11:38:b7:50:41:98:45:
bd:c7:38:61:3a:69:87:fd:07:38:48:b6:a3:40:de:fc:b4:5a:
88:27:90:76:71:da:4b:e1:cb:07:61:02:bf:01:87:9b:58:34:
ee:48:f1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 20:12:42 2024 by rpki-client on console-ams.rpki-client.org