Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
File: qGBDVsdQGuIQSyzO087cXb3BFjs.mft (raw, json)
Hash identifier: TNRFDxBbXdc/4YINkq633Y49VKjjhOYl2Dx28vTp5qo=
Subject key identifier: B1:9A:0A:12:E7:D0:91:5E:93:23:68:EB:8D:93:32:50:59:8E:F4:86
Authority key identifier: A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
Certificate issuer: /CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Certificate serial: 01936A46D31432517A998277CB03E72228F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
Manifest number: 0438
Signing time: Tue 26 Nov 2024 21:00:46 +0000
Manifest this update: Tue 26 Nov 2024 21:00:46 +0000
Manifest next update: Wed 27 Nov 2024 21:00:46 +0000
Files and hashes: 1: klXM3DkdRnCi9p_j4cGDFzsFB70.roa (hash: eLSipvKdxW0lDPQGfLVk4QuD8CgikLgzCyl1VMgJr48=)
2: qGBDVsdQGuIQSyzO087cXb3BFjs.crl (hash: SjjglMhXp2LPSGgycR7Hbc7Vmp/cRvvMXztX+7SUrX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:46:d3:14:32:51:7a:99:82:77:cb:03:e7:22:28:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Validity
Not Before: Nov 26 21:00:46 2024 GMT
Not After : Nov 27 21:00:46 2024 GMT
Subject: CN=b19a0a12e7d0915e932368eb8d933250598ef486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:90:88:4f:67:99:8b:a0:e9:61:2a:9e:4a:f0:
c4:c4:70:47:a3:24:e1:a0:49:5f:37:1e:bd:6b:24:
9b:aa:89:ac:a6:de:ce:38:7b:34:80:c4:d6:e3:f1:
f2:21:c9:45:ef:c4:6f:6c:17:ea:d1:7e:89:49:ec:
34:52:d0:b1:a1:d7:f4:f6:b7:87:fd:9d:32:04:13:
d7:a4:55:00:9a:cc:d9:fa:7b:03:1c:88:7f:41:10:
a7:53:77:79:c2:06:46:45:58:f5:88:01:ec:fa:18:
1f:1d:81:ac:c2:96:d5:5c:0d:76:63:5c:40:75:9b:
88:95:5b:d4:03:98:3a:fa:de:f0:31:c7:8d:b7:f9:
ff:01:a8:a3:0e:32:ad:80:bd:eb:bb:7d:a6:9b:84:
fc:28:f2:e9:47:39:d7:dc:4f:b4:2a:b9:22:27:6d:
14:1d:53:f7:d0:51:22:6e:77:1c:a2:ae:9a:e3:d8:
61:fa:d9:32:24:d5:44:4c:cc:0a:61:76:a9:1a:8a:
ed:1b:92:63:70:f9:01:b3:a5:da:90:b7:59:9e:dd:
9d:47:1c:86:6b:13:33:c5:74:16:30:c4:88:2d:8a:
6c:1d:81:b6:76:2b:41:4e:07:3e:f1:e2:d7:ac:4e:
af:21:af:ae:3f:3b:f8:7d:95:97:5a:f5:ff:2d:88:
b5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:9A:0A:12:E7:D0:91:5E:93:23:68:EB:8D:93:32:50:59:8E:F4:86
X509v3 Authority Key Identifier:
keyid:A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:23:96:90:64:69:8e:e3:58:f0:49:c6:66:e3:5a:49:04:39:
45:e4:eb:16:4c:00:b8:06:27:42:a7:46:ec:56:50:14:66:86:
23:f3:20:79:ac:88:41:a1:f9:b5:d6:23:98:1c:51:d5:b7:cd:
07:b1:69:cf:c3:06:03:c8:d0:c2:c3:37:a6:91:42:9f:42:a1:
f7:9a:ec:aa:f6:02:58:61:49:af:af:80:99:70:95:8b:e4:a5:
3a:84:f6:05:38:37:22:36:74:e0:1f:9d:57:95:46:d9:04:07:
8d:c7:05:ca:35:73:69:99:cf:73:81:4e:f6:2d:2f:cb:bf:bd:
be:a5:7f:71:3d:f1:1a:69:50:50:b5:04:e8:60:98:95:1f:f7:
19:af:a1:6a:79:d5:38:63:65:e9:95:cb:83:e8:c9:5a:29:52:
b1:74:a1:41:71:fe:88:fc:28:69:da:01:4c:80:39:f9:8a:e1:
0d:6b:ae:95:9d:bc:18:7a:b6:bc:68:7e:e8:c0:7a:c8:b1:85:
84:e2:55:51:dc:04:ea:14:2a:e7:e5:91:39:4a:66:c5:db:ac:
91:f8:82:2e:16:aa:07:b8:ed:6e:c6:75:cb:7c:d5:4a:b9:ff:
6f:5f:a5:06:98:b2:51:62:9a:ed:01:6b:ce:ae:17:a0:c9:14:
65:43:b7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:36:08 2024 by rpki-client on console-ams.rpki-client.org