Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft
File: QO5hC9zSO60rEZK9RcqKl204Vdo.mft (raw, json)
Hash identifier: ywL07hjwz71i9N0UaMHhSHXflt04Jsa1OlAWD6UAIJQ=
Subject key identifier: 69:6E:41:A3:C3:6E:9B:7A:BB:40:95:64:B7:22:5A:CF:83:F3:D8:F0
Authority key identifier: 40:EE:61:0B:DC:D2:3B:AD:2B:11:92:BD:45:CA:8A:97:6D:38:55:DA
Certificate issuer: /CN=40ee610bdcd23bad2b1192bd45ca8a976d3855da
Certificate serial: 018F8636272FD0C21F8893DDDF49043DF0C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO5hC9zSO60rEZK9RcqKl204Vdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft
Manifest number: 1011
Signing time: Fri 17 May 2024 11:00:46 +0000
Manifest this update: Fri 17 May 2024 11:00:46 +0000
Manifest next update: Sat 18 May 2024 11:00:46 +0000
Files and hashes: 1: GUBBBIZzQRA8Rpx6D-DAmvZqRxI.roa (hash: 8w9Tzb8nkNmN5RxEfA3KAEABZ/o+zJ/ZAM04AV1B08g=)
2: QO5hC9zSO60rEZK9RcqKl204Vdo.crl (hash: RiR9spSqQ+PK+m3IJalzA9XUD0gdG0lx2UTVhZoiVe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QO5hC9zSO60rEZK9RcqKl204Vdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:36:27:2f:d0:c2:1f:88:93:dd:df:49:04:3d:f0:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ee610bdcd23bad2b1192bd45ca8a976d3855da
Validity
Not Before: May 17 11:00:46 2024 GMT
Not After : May 18 11:00:46 2024 GMT
Subject: CN=696e41a3c36e9b7abb409564b7225acf83f3d8f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:39:89:d7:6c:30:f7:a7:79:75:d8:8d:23:e1:
37:63:5b:ac:11:46:9b:3b:19:42:02:21:ae:f0:cc:
e5:6a:cc:85:f2:1d:15:40:5e:85:bf:4f:95:2c:cf:
ae:c3:3b:77:56:b7:00:99:6b:42:0c:0e:c5:3a:bf:
9a:99:37:8c:16:64:e1:e0:99:4e:2f:54:76:3b:51:
81:54:df:82:f0:6a:24:a8:46:e1:37:7a:d3:25:92:
5f:53:a2:0d:78:d1:07:82:f1:03:f8:17:c0:c7:d3:
b3:fd:3b:e7:3c:f3:43:45:fa:3e:15:c5:a6:7c:87:
cd:d0:75:2a:f6:92:b6:aa:5f:97:a3:51:d7:73:84:
99:48:3b:70:77:68:45:75:30:03:bf:95:84:27:52:
24:b6:b0:ca:e6:62:53:04:e1:33:32:ff:b3:77:62:
02:63:0a:77:ca:bf:3e:ba:f4:f8:68:b1:ee:36:59:
4e:e3:8f:37:54:9e:2a:13:ab:91:b7:e2:1e:1e:92:
13:83:32:79:9f:66:8c:34:6e:76:e0:a1:0a:3a:49:
4e:7c:f6:d6:5f:9f:77:25:1f:56:ac:57:eb:c4:af:
aa:c8:11:09:a3:d0:a9:3f:71:6c:56:b2:0b:1a:f2:
a8:2f:4b:13:16:b4:4a:0f:f0:5d:be:5d:53:32:57:
c0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6E:41:A3:C3:6E:9B:7A:BB:40:95:64:B7:22:5A:CF:83:F3:D8:F0
X509v3 Authority Key Identifier:
keyid:40:EE:61:0B:DC:D2:3B:AD:2B:11:92:BD:45:CA:8A:97:6D:38:55:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO5hC9zSO60rEZK9RcqKl204Vdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:85:c2:b9:43:6e:bb:46:d5:49:a2:dd:41:cb:26:bf:6e:21:
4d:26:03:73:c9:a6:1e:7b:6f:21:92:09:c6:68:1e:68:e3:19:
cd:51:9c:d6:52:f0:59:2b:6d:d6:79:3d:28:c5:be:b9:f6:e2:
17:9a:c9:d7:06:4f:87:9e:c0:f2:81:df:27:5a:25:38:ae:3a:
fd:6c:20:c4:a4:48:c2:73:a7:06:f4:8e:85:00:49:ab:37:73:
1b:d8:23:32:bc:fc:57:2a:57:0e:23:60:3a:61:04:87:dd:de:
df:d3:9e:78:a5:7b:31:b8:21:4f:e0:34:8a:5c:12:9c:ff:c2:
f2:b0:01:c8:58:3c:12:c6:33:36:94:19:bf:cb:5f:1b:6d:99:
f8:c7:7a:66:35:0d:6c:03:5a:7c:07:d7:36:8a:3e:1c:55:2a:
27:e4:60:22:5e:d4:86:77:43:dc:63:84:c5:ec:bc:2a:44:9b:
98:d4:2b:8e:b4:b3:6d:bf:15:cd:e8:ac:10:99:69:33:29:c1:
c3:f1:12:26:98:ac:26:fa:af:48:0c:d2:b8:1d:aa:1f:d8:28:
84:50:c7:a4:91:cf:b9:8c:fb:17:2c:cb:82:25:f9:25:b1:b1:
b7:85:a1:f4:13:e7:62:8e:9f:41:3b:a8:a2:39:52:e1:6b:d0:
31:59:e9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:53:54 2024 by rpki-client on console-ams.rpki-client.org