Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
File: Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft (raw, json)
Hash identifier: 2djfTkBxUs7I3nTUzbJhDArVvX32FhWP9ny2ELo00pA=
Subject key identifier: C7:1C:B4:70:93:23:D1:72:49:75:33:94:A9:D9:3F:5A:62:FA:3A:CD
Authority key identifier: 43:D9:4E:06:87:16:09:CC:1F:81:5A:56:DE:5C:9F:AF:6D:57:D5:84
Certificate issuer: /CN=43d94e06871609cc1f815a56de5c9faf6d57d584
Certificate serial: 018F9C882855AE16AD0C777C065F85F16131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
Manifest number: 1182
Signing time: Tue 21 May 2024 19:01:59 +0000
Manifest this update: Tue 21 May 2024 19:01:59 +0000
Manifest next update: Wed 22 May 2024 19:01:59 +0000
Files and hashes: 1: Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl (hash: BftWP/a1KD0BGOuWlgXnVUQYPRsB+Qlmtt4MvrDXTc4=)
2: oDtiNJKrHzf-nmuD5-SnYfRXA0Y.roa (hash: MLLOhXfARTFfJVKfgGDamES4xxUHmUnlFb6PRxGzYYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9c:88:28:55:ae:16:ad:0c:77:7c:06:5f:85:f1:61:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d94e06871609cc1f815a56de5c9faf6d57d584
Validity
Not Before: May 21 19:01:59 2024 GMT
Not After : May 22 19:01:59 2024 GMT
Subject: CN=c71cb4709323d17249753394a9d93f5a62fa3acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f8:ea:2e:9d:e2:e0:c7:83:10:50:0b:62:38:
23:48:95:20:6b:b8:30:aa:6a:48:51:d8:51:1d:74:
c8:ae:2a:25:26:e2:e6:f5:9c:c0:ea:41:d2:08:96:
8c:26:e7:83:08:1a:5c:d3:a9:20:13:2f:3c:f7:c4:
28:a4:7c:06:0a:31:92:ff:31:35:52:99:e6:29:2a:
19:69:77:2a:b5:fa:9b:50:97:24:e7:5c:f1:1a:b0:
01:c7:f3:2f:a7:2a:9e:0d:35:78:53:52:f1:c1:f9:
f8:3a:0c:d9:db:67:f0:98:fd:79:c8:4b:74:13:cc:
09:78:a5:1c:63:1b:c0:96:0d:cf:c2:35:cb:e9:78:
15:61:36:64:65:31:9b:69:31:5c:4c:4a:72:e5:5c:
5e:c3:b7:7d:9d:cc:37:a4:01:7d:a9:93:fe:23:3b:
ed:5c:e6:b4:1d:a6:85:9b:bc:ec:c7:53:9e:08:41:
10:9b:aa:db:32:51:cf:11:44:31:09:28:de:47:15:
12:ff:81:ea:42:7a:20:f9:d4:07:dd:2e:c2:51:25:
db:b0:58:19:19:66:ad:55:70:51:e1:44:28:82:04:
9b:e6:6e:d1:ad:d6:43:c2:12:5e:c2:3b:37:fd:7d:
c5:6f:31:34:82:7a:8e:ad:29:3d:fc:01:ff:72:bb:
31:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1C:B4:70:93:23:D1:72:49:75:33:94:A9:D9:3F:5A:62:FA:3A:CD
X509v3 Authority Key Identifier:
keyid:43:D9:4E:06:87:16:09:CC:1F:81:5A:56:DE:5C:9F:AF:6D:57:D5:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:8e:cc:85:4c:09:98:27:ea:35:65:5d:e5:7f:7e:a7:21:ef:
51:9f:bc:80:62:bb:1c:c1:78:36:60:38:98:a0:b0:0f:26:22:
e0:1c:b9:b7:74:9b:88:bb:0c:de:fd:65:fe:16:89:bb:90:59:
03:02:97:83:06:c4:03:87:c6:13:78:90:c6:40:d7:1f:9d:60:
14:a2:17:9d:51:a4:f5:3b:61:af:1d:84:87:f8:e1:86:25:a5:
8e:93:65:22:da:c2:e2:7f:fa:94:48:71:1e:5f:9c:04:af:a1:
97:9b:2e:21:9c:8e:c0:35:5a:bc:91:5c:d4:9d:18:39:65:b4:
ca:6f:65:f5:fc:1d:44:27:51:c0:f1:c6:82:f1:d8:f1:e0:ba:
59:a5:a1:40:0d:aa:c5:62:bd:fc:88:1a:98:a6:e7:56:dc:6a:
e9:cf:10:d0:e6:7d:1c:aa:eb:c0:ac:46:96:dc:4d:13:83:9c:
0c:9b:7a:c1:c2:a5:44:1a:18:12:ca:aa:a9:95:fb:d9:f7:45:
5e:a2:98:1a:c5:f1:c8:58:d5:57:fc:d7:07:72:3c:ed:f0:9e:
b2:c4:8a:c0:a1:67:65:9b:7d:fd:9a:39:66:75:32:2c:39:f8:
59:2a:54:59:b9:8f:b2:0d:40:31:f2:cb:3c:6e:18:73:dc:87:
d6:83:b0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 21:10:20 2024 by rpki-client on console-fra.rpki-client.org