Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
File: QoWCG7eoRF779DPUwZiQp_qUn6g.mft (raw, json)
Hash identifier: J5CyqaEs4dmFfmbD6PzM0lg9boqabe20emcH1c9bx/4=
Subject key identifier: E8:1D:45:9D:B6:C6:18:AA:05:9D:A2:70:2E:FA:97:AD:80:B8:C3:E7
Authority key identifier: 42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8
Certificate issuer: /CN=4285821bb7a8445efbf433d4c19890a7fa949fa8
Certificate serial: 019352AE38939D4F91CB65410DE6141081A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
Manifest number: 0CEF
Signing time: Fri 22 Nov 2024 07:02:49 +0000
Manifest this update: Fri 22 Nov 2024 07:02:49 +0000
Manifest next update: Sat 23 Nov 2024 07:02:49 +0000
Files and hashes: 1: 1-iyBsl5rE9lpSKrl-SUfwo5NPhY.roa (hash: IXdsm4JyaQFJ2cJkNYafRmC3NYOOT1+6IGlaC79dMRk=)
2: 9xGmlnKe5FEYgC5wgJvBgSw24ng.roa (hash: mxmiZL2ldmNK4HRRQzQZGCgy3cigbZ9VKu8sz97PuAs=)
3: QoWCG7eoRF779DPUwZiQp_qUn6g.crl (hash: +NnULGArO5uiXZbI8/b2YVIvebe3fjppSPq0+BvesRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ae:38:93:9d:4f:91:cb:65:41:0d:e6:14:10:81:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4285821bb7a8445efbf433d4c19890a7fa949fa8
Validity
Not Before: Nov 22 07:02:49 2024 GMT
Not After : Nov 23 07:02:49 2024 GMT
Subject: CN=e81d459db6c618aa059da2702efa97ad80b8c3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e5:8f:e4:f1:c2:e5:3a:4a:c8:bb:ba:22:4b:
a1:09:5b:ed:84:07:5a:ad:c6:b1:ff:de:09:b4:2d:
31:9a:2d:10:d6:ba:cb:72:81:dc:ea:7b:b5:27:1f:
84:01:60:f4:1c:38:86:89:86:13:d0:c8:b8:c5:57:
ec:da:91:b7:f3:df:91:44:d6:d8:ec:4e:aa:a2:55:
6c:e7:8c:dc:70:c3:82:ad:4a:b8:c7:36:67:31:ca:
88:02:72:ab:7b:88:b4:c3:ef:df:f7:14:7e:21:26:
dc:89:f3:6f:13:28:e4:fb:81:34:51:1e:e8:36:13:
4b:17:56:d8:02:96:8b:54:ef:1e:63:dd:2b:6a:ff:
73:46:eb:d2:b2:d6:86:2a:79:1c:01:a4:f8:44:a1:
1d:72:d9:b6:8b:d8:38:9d:9f:55:77:90:54:2a:23:
8c:30:bd:dc:f6:9c:9e:38:1b:54:c4:9a:1a:58:53:
3b:67:aa:47:a8:42:1d:fd:6a:b1:a2:a2:41:1b:b8:
26:9f:b2:61:93:4e:44:15:c7:18:12:62:f7:09:45:
9b:3e:f6:e1:bc:69:d4:26:3f:39:ed:44:ea:62:56:
fb:89:8e:1a:dd:e9:f6:5e:4f:a4:56:3d:fc:4e:cb:
af:02:ae:b1:92:49:3e:4b:93:af:ef:b2:a7:be:29:
85:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1D:45:9D:B6:C6:18:AA:05:9D:A2:70:2E:FA:97:AD:80:B8:C3:E7
X509v3 Authority Key Identifier:
keyid:42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:fd:cf:ff:ab:2d:7f:69:ce:31:29:9a:bc:c6:f6:12:c4:a4:
f3:83:3a:ec:69:80:db:91:97:16:ca:1b:3f:a8:ad:46:2b:4e:
ca:84:fa:05:e2:70:85:03:b8:eb:4b:47:18:4d:dc:37:e3:47:
f2:34:05:dd:b4:48:a1:bd:b6:83:f0:13:29:8a:d1:01:f9:a2:
36:da:2f:c1:29:43:f3:c4:76:50:62:0e:d7:2d:a6:8f:c7:61:
2d:35:b5:89:7f:03:58:14:d5:be:e3:29:ab:99:be:35:05:6a:
68:a6:06:ef:84:ba:f3:6f:a5:55:ba:a5:8e:1a:39:47:9b:f6:
bb:d0:33:0d:36:b0:12:a6:33:43:00:6b:a6:70:85:c5:0e:de:
34:9a:d8:fe:45:6a:e3:70:59:12:d1:1f:b8:1a:34:60:63:db:
27:7b:d7:02:7a:0b:2f:04:32:30:aa:2e:92:f1:34:ef:c6:02:
b8:f5:62:0c:24:4d:08:e4:55:7e:8b:a6:de:17:cf:1c:76:c6:
d9:2c:c7:72:72:7b:ec:69:be:eb:59:ae:55:46:6c:7d:6e:d4:
14:75:c3:80:cc:5b:ff:e0:f8:61:f3:cd:ac:91:a6:c6:ff:9c:
4e:6a:12:94:fa:f0:ff:27:6b:71:09:71:dd:a0:7a:3e:7d:f9:
80:97:3e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:08:26 2024 by rpki-client on console-ams.rpki-client.org