Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
File: QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft (raw, json)
Hash identifier: F9Ql8iw49prpQOe03yWNiPpR1hi1BkwR4AazI6mnc94=
Subject key identifier: C3:BB:BF:9B:C9:74:78:2E:0F:3A:C0:EE:58:3A:DC:17:22:B1:37:73
Authority key identifier: 41:FC:55:EE:24:88:FB:94:01:C4:B6:68:AB:AC:54:11:0E:BB:80:92
Certificate issuer: /CN=41fc55ee2488fb9401c4b668abac54110ebb8092
Certificate serial: 018F87114FC3F943BE7C11FEA1A7AF96C8AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
Manifest number: 0E7D
Signing time: Fri 17 May 2024 15:00:09 +0000
Manifest this update: Fri 17 May 2024 15:00:09 +0000
Manifest next update: Sat 18 May 2024 15:00:09 +0000
Files and hashes: 1: ODhi5E2qw0vpUrSZxqC5wcC-apE.roa (hash: Hbje0p0SujQmLjGDSqJqCfV+tt+S43MZPp6I9HCRnBc=)
2: PXcHl394Lz2LuCoP9mPe8uXptVU.roa (hash: eMho7HriTNqrB6RBk1+Vl2ymF2pxG1eI9Bm2cPV08RE=)
3: QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl (hash: iqewx9lnqYMwlRNoHmCYMgAi5fqLYJ2KYdbXsUvWuZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 15:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:11:4f:c3:f9:43:be:7c:11:fe:a1:a7:af:96:c8:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fc55ee2488fb9401c4b668abac54110ebb8092
Validity
Not Before: May 17 15:00:09 2024 GMT
Not After : May 18 15:00:09 2024 GMT
Subject: CN=c3bbbf9bc974782e0f3ac0ee583adc1722b13773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:14:30:70:34:22:d7:67:a1:f8:1c:51:59:1d:
70:60:f1:c1:7d:e2:5e:7b:77:58:3f:a1:2e:e4:33:
7c:38:4b:e1:43:c9:b8:c5:cf:98:29:cd:24:cb:84:
b4:9e:8c:f8:5c:2d:9c:83:54:ea:c1:0e:03:46:f2:
f8:34:da:b5:b8:8b:0f:42:f9:5e:6a:ea:e8:b1:87:
79:11:7f:f4:2c:1c:d8:85:8a:93:ee:e9:76:32:76:
ac:63:8a:d8:16:3a:8c:ed:f4:59:50:95:d3:bc:3e:
95:49:43:59:60:ac:41:21:ab:c3:f4:b7:7a:1d:56:
00:cd:ed:da:1c:93:39:a9:dc:85:a2:72:5b:89:6c:
9f:08:e2:b7:8f:2f:c3:cb:01:f6:e4:69:eb:df:05:
90:53:1b:c0:e0:7b:a8:3e:03:50:a3:1c:56:bb:89:
0d:c4:e1:45:a3:29:43:45:5f:ae:cd:42:77:8d:54:
4f:6b:8e:7f:6d:a8:10:a0:68:bd:7d:43:f8:6d:7d:
9f:71:32:cf:59:4d:6f:fc:e5:04:80:b2:b7:82:47:
e8:e5:61:e6:c7:ae:5f:22:1f:da:e5:17:86:4f:7e:
d5:3f:60:46:70:61:88:03:e8:0c:4c:1a:5c:79:ee:
ab:dd:3d:f6:e8:15:8b:f5:be:b5:fa:c8:73:c2:20:
c7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BB:BF:9B:C9:74:78:2E:0F:3A:C0:EE:58:3A:DC:17:22:B1:37:73
X509v3 Authority Key Identifier:
keyid:41:FC:55:EE:24:88:FB:94:01:C4:B6:68:AB:AC:54:11:0E:BB:80:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:2c:a2:53:c7:9f:6c:50:75:5e:e3:02:d5:38:aa:fa:a7:b8:
5c:0c:58:3e:cc:8c:35:29:33:4b:15:e2:e0:5b:86:89:d4:ac:
5f:11:5d:5d:73:8b:6c:e9:48:95:25:d6:69:3f:90:87:06:3e:
4a:cb:ee:4e:4c:4c:cf:b0:2c:95:d3:ea:25:2a:4d:7c:5c:21:
74:0d:c8:82:37:d6:e3:5a:57:e3:04:18:ae:a0:5d:21:3c:e7:
9b:dc:c8:da:4e:38:db:41:f1:6e:42:cb:ea:ee:e4:48:d3:3f:
24:2a:a9:0e:24:bb:e2:fd:6d:ab:5a:87:4b:7e:e8:d7:b2:31:
a2:2b:27:fc:65:89:ab:db:33:5d:c1:90:96:7d:8b:c2:e6:7d:
58:e7:76:78:b9:95:77:3e:a9:3a:e5:a3:1e:6f:46:23:a9:43:
d6:f2:d2:66:a5:8b:47:f6:ec:58:91:4c:b1:f1:e3:58:aa:b6:
5b:1b:88:62:64:4e:46:24:6d:73:77:f4:17:8c:08:af:89:ae:
0b:28:de:56:ac:90:8b:a7:af:53:03:ed:f7:6d:64:0f:06:bc:
cd:11:89:61:e5:9e:10:5f:2b:52:9c:3f:b9:cf:15:01:31:bd:
e5:7f:15:50:21:fa:da:30:fe:af:d4:00:a6:e4:47:86:ef:c6:
cd:b4:cd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:32:58 2024 by rpki-client on console-fra.rpki-client.org