Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
File: qmeVicHEiJfQmy1P7XpmBEqHbqM.mft (raw, json)
Hash identifier: EIGLrpdpmx8WmYDcenj1WLp44+C54HzMPOxJpLHhNyY=
Subject key identifier: 10:BE:9E:F5:F7:C5:04:2C:C2:0C:CE:8D:B4:2B:4E:8E:99:23:F9:44
Authority key identifier: AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
Certificate issuer: /CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Certificate serial: 018F874888477A3FC3112E605791722CC4BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
Manifest number: 1136
Signing time: Fri 17 May 2024 16:00:28 +0000
Manifest this update: Fri 17 May 2024 16:00:28 +0000
Manifest next update: Sat 18 May 2024 16:00:28 +0000
Files and hashes: 1: HWHrVQyJEsq8SHCLrRCrs-onlTw.roa (hash: 5TAHkZuJVsj6UjxXfPeP5hLsLg00keLjAhuGjMwJn8o=)
2: qmeVicHEiJfQmy1P7XpmBEqHbqM.crl (hash: VwQFI3eXH43RtGD3owWHJfq3gRvvyhrL1vqkFmVv0tY=)
3: wIe0dyT7VfORLYLw3ycjcNYbduw.roa (hash: PyDaHWlkT/BDExaznChsp7vDajv3HlnZkmOtHLRK06M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:48:88:47:7a:3f:c3:11:2e:60:57:91:72:2c:c4:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Validity
Not Before: May 17 16:00:28 2024 GMT
Not After : May 18 16:00:28 2024 GMT
Subject: CN=10be9ef5f7c5042cc20cce8db42b4e8e9923f944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:52:d7:c4:95:da:01:17:f0:5e:c4:66:b9:eb:
16:36:ae:bf:a4:ad:ce:bf:a3:6c:42:1b:27:1f:27:
3e:09:47:d0:8e:92:11:cc:e4:68:af:67:b8:64:e9:
eb:ed:52:99:84:10:01:4f:e5:c2:a2:a3:89:64:0a:
a9:6e:76:ae:04:18:e1:be:da:23:0b:9b:5c:09:3e:
b9:05:56:5c:78:c3:58:35:59:a6:ad:d9:39:3d:18:
35:d6:dc:4b:da:b2:3b:7c:81:56:20:ab:1e:d8:10:
b3:69:13:f7:f3:90:00:18:5d:e4:7c:f7:ed:51:38:
96:fb:d7:22:23:54:1a:d7:67:eb:a9:6b:3f:0c:bf:
4a:c1:e7:06:8c:90:14:1e:5f:51:9a:6d:db:a3:97:
e6:2a:f2:bd:bf:40:ac:5d:81:77:bf:29:d8:27:27:
39:c5:fe:6c:c7:e3:2b:3e:d0:a6:09:15:72:15:8e:
3b:e1:e8:8f:b2:34:2e:5e:5e:f5:52:49:f3:41:17:
2b:12:31:10:bf:72:90:33:30:b8:98:0c:a8:b2:30:
0e:f5:57:04:06:17:da:d3:37:57:06:9c:be:cb:90:
44:ad:83:f5:d0:5f:74:7c:47:ab:23:ba:f7:35:bd:
7d:b0:fb:b2:8f:63:b5:92:45:37:d5:18:a9:53:e4:
6b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BE:9E:F5:F7:C5:04:2C:C2:0C:CE:8D:B4:2B:4E:8E:99:23:F9:44
X509v3 Authority Key Identifier:
keyid:AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:88:58:43:1a:dd:e2:d8:cc:d5:81:2b:61:f7:c4:0c:c7:85:
9c:89:e7:66:8f:24:1d:ae:53:ce:9d:2e:fb:b1:c8:84:ae:8f:
a9:c6:65:fa:c3:e6:05:33:64:0f:1d:d5:77:aa:c4:ba:54:be:
12:8f:4e:c9:85:db:a7:e1:77:4b:8e:d2:56:c3:56:27:16:fb:
98:c1:97:ab:e9:d0:c0:b7:0b:5e:97:be:64:b2:11:84:42:6b:
54:bb:cf:2a:e6:8e:0a:0d:95:b8:72:e8:32:4b:a6:a9:3c:6e:
d0:16:79:50:83:82:82:90:42:dc:e0:55:d1:a3:59:62:00:29:
e0:c3:6d:59:c5:70:71:00:d5:57:ea:dc:bf:2f:8c:cf:8e:a4:
02:9e:e7:3a:cd:46:9e:8e:56:85:d9:a2:57:ff:5e:52:d5:94:
6b:44:b4:e4:f6:d7:3b:b9:ef:b9:26:0e:ff:dd:69:84:cc:d8:
ee:d9:51:d6:42:cd:96:05:3a:ee:7f:e8:4a:04:fe:6d:9e:df:
b4:e8:7e:40:99:06:bc:8e:77:85:ec:92:0b:f3:1b:56:e1:28:
b7:06:b1:89:dd:b3:7d:cd:31:d5:bb:6b:55:7d:05:19:9b:af:
c9:1e:b2:75:53:9d:85:4c:7d:cf:d1:2e:fa:58:8d:27:35:64:
18:dd:50:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:15:07 2024 by rpki-client on console-fra.rpki-client.org