Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
File: QA8uoVe7tTqwJgEazlzRNg7y930.mft (raw, json)
Hash identifier: jS9Jf7zIHsdj0eXON5YIjiK5ypTv0FXLtHBJCFf3oKI=
Subject key identifier: C6:7F:38:D8:F9:16:E8:A2:5C:C2:9C:B2:A9:1D:4D:D4:17:D2:F9:2A
Authority key identifier: 40:0F:2E:A1:57:BB:B5:3A:B0:26:01:1A:CE:5C:D1:36:0E:F2:F7:7D
Certificate issuer: /CN=400f2ea157bbb53ab026011ace5cd1360ef2f77d
Certificate serial: 019365FDBB5EC1E6D2FE74B60DB8FD7A5CEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
Manifest number: 12CC
Signing time: Tue 26 Nov 2024 01:02:27 +0000
Manifest this update: Tue 26 Nov 2024 01:02:27 +0000
Manifest next update: Wed 27 Nov 2024 01:02:27 +0000
Files and hashes: 1: 8Bp7HBxI3xmvueezCoGIzkeS1a8.roa (hash: kWb2UwXKiQRgptLU76HQVMZ+FbM72f71URGNB1ssOls=)
2: QA8uoVe7tTqwJgEazlzRNg7y930.crl (hash: GwD4Mfr2O0pkiXLGbjxWGk3YQKN7ftEfaDdUtqDmmMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:65:fd:bb:5e:c1:e6:d2:fe:74:b6:0d:b8:fd:7a:5c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400f2ea157bbb53ab026011ace5cd1360ef2f77d
Validity
Not Before: Nov 26 01:02:27 2024 GMT
Not After : Nov 27 01:02:27 2024 GMT
Subject: CN=c67f38d8f916e8a25cc29cb2a91d4dd417d2f92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4e:d0:55:8a:44:ad:f0:74:d2:89:01:9c:91:
45:ec:46:8b:17:56:fc:f5:70:50:42:39:34:f2:35:
84:e5:08:a2:1e:f6:22:0e:31:98:f9:a5:69:2f:87:
20:47:8b:8f:0b:b3:4d:c2:68:2c:e7:be:d0:01:ec:
1e:03:84:8d:41:e0:34:24:08:e5:42:2f:80:b4:8a:
59:90:6a:a0:3e:da:5f:cf:92:83:2b:2f:8c:70:88:
0c:a0:46:60:12:10:ee:6e:44:02:25:bc:48:cb:d3:
2c:fe:2b:33:c7:cb:50:25:7b:89:95:13:38:e3:d2:
96:05:a6:1c:19:46:86:97:28:43:df:fe:b2:9c:0c:
b8:5a:ff:67:be:f2:07:9e:d4:40:b4:dd:ae:e0:41:
08:82:7e:73:20:f5:3f:10:86:38:47:f2:a3:77:c9:
a5:1d:66:b8:f8:c8:5d:8d:30:cd:19:69:43:19:81:
ac:6c:23:f5:67:40:a0:c7:e6:f7:9d:fd:68:e0:0d:
db:f2:60:fa:f2:74:13:8a:44:6a:e1:95:26:cb:dc:
fc:22:c9:a0:11:b7:59:7e:70:6c:ae:42:d2:9d:c7:
1c:cf:41:14:0d:e4:ba:da:d0:c5:0d:e8:74:91:99:
52:8d:85:d1:63:3d:28:74:07:26:52:82:b4:92:4e:
ae:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:7F:38:D8:F9:16:E8:A2:5C:C2:9C:B2:A9:1D:4D:D4:17:D2:F9:2A
X509v3 Authority Key Identifier:
keyid:40:0F:2E:A1:57:BB:B5:3A:B0:26:01:1A:CE:5C:D1:36:0E:F2:F7:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f1:99:1d:4b:4c:30:59:24:eb:09:98:37:7a:0c:f2:34:19:
23:cd:d3:c6:f0:f4:71:f9:70:f4:32:b4:3c:25:46:c7:25:83:
3e:67:64:2d:13:8c:86:fe:0b:49:f7:84:85:92:d9:ba:8c:a6:
03:d1:76:c9:54:3f:ef:11:2c:c8:ac:50:f4:2e:5e:af:19:d9:
63:36:4f:47:07:0f:14:46:62:3c:44:d1:01:0d:26:92:f4:ba:
f0:ad:82:71:a0:d1:d3:15:e0:b2:ca:dd:ca:60:f7:0c:7c:c1:
3e:79:ce:48:f0:58:0b:59:c7:8d:4b:9c:6a:f0:64:2e:13:fd:
5f:f1:e5:2f:75:9d:fa:0f:af:03:64:f4:a7:5b:72:1c:0c:d5:
1d:0d:f6:d5:37:9a:d8:5f:04:e5:b3:0a:8d:e8:77:0f:95:01:
a5:8a:77:fb:0f:19:e7:20:3c:ce:bc:10:c5:b8:55:26:f8:06:
43:c6:1d:60:cf:39:20:0a:31:aa:64:e8:98:50:36:1b:2f:dc:
58:02:4c:33:80:56:be:a0:b2:a5:09:80:43:9e:95:db:e1:5f:
39:4e:15:20:61:65:f3:ae:23:d0:3a:47:e3:b4:0e:33:56:4b:
7d:dc:4c:57:f1:a5:a6:a2:82:03:94:18:ec:e8:da:fa:a7:2c:
54:39:ae:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:16:48 2024 by rpki-client on console-fra.rpki-client.org