Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
File: QSasSvr9JpiBwQrS7KL03vjtvSE.mft (raw, json)
Hash identifier: woMgvAI3gotqb1/AA0QKv9H6J16NoQUZWBDYnAMKlJA=
Subject key identifier: 82:1B:8B:C0:41:EA:90:E4:6F:55:1C:43:56:3C:54:31:D0:D7:6E:FA
Authority key identifier: 41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
Certificate issuer: /CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Certificate serial: 018F8937244AF2568FE906F5E52797514B96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
Manifest number: 117A
Signing time: Sat 18 May 2024 01:00:43 +0000
Manifest this update: Sat 18 May 2024 01:00:43 +0000
Manifest next update: Sun 19 May 2024 01:00:43 +0000
Files and hashes: 1: 2XleP-8zhAdOevspTHYR6YtVjLc.roa (hash: NfTUcQp7G95Emd1RuGScawkVYbk99a68/w+mwpUYhW0=)
2: 9Mtk1uJ0a9YiX8BApmGzUBSEBj8.roa (hash: +dc5ls7kwYUgRMXHZl2ciZfczbwNk7y3Elf2ME0MuTo=)
3: QSasSvr9JpiBwQrS7KL03vjtvSE.crl (hash: gGprc39SNq/QtElCaugpuZCGI4iCpVsjU5N8LMctcyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:89:37:24:4a:f2:56:8f:e9:06:f5:e5:27:97:51:4b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Validity
Not Before: May 18 01:00:43 2024 GMT
Not After : May 19 01:00:43 2024 GMT
Subject: CN=821b8bc041ea90e46f551c43563c5431d0d76efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3c:8d:70:13:19:f4:5e:ff:98:5d:8a:fd:e5:
8e:1e:1d:c1:ed:65:ff:1c:97:72:d5:63:d2:b7:53:
40:60:a9:43:c6:b3:85:5b:9c:72:1c:1a:39:d6:52:
3f:b7:3d:35:e4:ed:96:9c:4f:6d:e9:f7:71:fa:f4:
41:f3:90:fe:e4:dc:f6:de:28:9f:66:f9:a2:69:d1:
b2:33:3f:87:e5:dc:96:64:64:bf:57:0d:63:be:52:
ea:b8:7b:83:d1:0d:83:c5:fb:41:fe:f5:9d:3f:c0:
5a:cf:cd:43:60:50:8d:6b:77:e5:ed:3b:72:20:45:
68:15:e0:3b:de:27:39:7f:aa:76:aa:ca:10:11:c6:
a6:9e:56:d8:5e:f4:17:cb:09:27:35:c2:d6:8a:b9:
b1:80:62:2c:64:fc:49:d1:86:11:b8:15:f9:3e:27:
5d:b6:3b:cd:41:b7:c9:95:7c:be:ba:5c:51:a6:76:
d3:40:cc:7c:10:15:bd:61:9c:90:a1:e0:40:d7:f3:
48:24:52:33:d9:09:87:bd:40:ca:6e:bd:d8:2a:72:
39:49:e6:9d:71:75:c8:74:8d:8b:c5:16:98:8e:7c:
10:5b:67:67:f1:cb:94:d3:a7:f8:d3:5c:9e:62:1a:
eb:6c:d5:a3:ab:2d:02:38:e9:f9:80:17:bf:63:00:
12:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:1B:8B:C0:41:EA:90:E4:6F:55:1C:43:56:3C:54:31:D0:D7:6E:FA
X509v3 Authority Key Identifier:
keyid:41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c0:a8:35:97:51:3d:3d:1a:4d:46:cc:1e:ae:a1:ce:13:ba:
12:dc:24:19:b3:6c:43:65:1f:eb:c3:d7:a1:63:1b:90:4e:0c:
ba:1c:dd:93:6d:41:05:c2:b1:bf:d9:cc:a4:ec:b3:b4:ac:a5:
ba:b4:25:ba:ac:1b:04:b2:1c:0f:46:70:27:05:95:5b:54:6e:
ad:5d:f0:8d:14:f1:fe:b8:64:e5:ef:c5:27:75:24:d1:5a:4d:
43:0b:99:14:e3:0d:16:60:aa:7d:93:5e:ef:82:80:0c:b9:3e:
e6:b9:40:7d:38:fd:c7:24:57:38:71:a0:3c:4f:f9:c0:6f:bc:
f9:c2:57:8d:53:04:01:5a:28:24:79:63:8a:54:34:68:71:ea:
23:71:12:80:9f:b8:22:8e:db:0b:86:d2:e2:45:f9:d4:74:c8:
9e:e2:af:24:97:c4:5a:bb:cf:08:cf:6e:0a:88:2b:c6:b8:64:
36:01:9f:66:c9:09:8d:c0:7e:b9:84:fd:ff:d1:e2:32:53:c7:
25:ce:d1:6f:f3:59:17:5a:1a:4c:83:ad:be:97:ff:9c:f3:14:
87:bb:93:29:7c:10:81:ba:91:32:71:55:d0:81:fa:af:1d:bf:
b1:65:70:e5:e9:4e:87:0d:b0:8f:d9:93:2e:7c:05:10:e0:35:
90:f5:2d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:45:52 2024 by rpki-client on console-fra.rpki-client.org