Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/511d83-7531-4430-a839-0ccc703fe471/1/QuRgW8Vm7ZEMv-KLwic9uZrmpo0.mft
File: QuRgW8Vm7ZEMv-KLwic9uZrmpo0.mft (raw, json)
Hash identifier: 74B5C/WjjITSGMktMdnTXD0lIpFdQvQoBSGTsZWfGkM=
Subject key identifier: 17:67:CA:1B:14:94:CF:20:B5:F7:2B:07:1C:29:05:1A:C8:65:DE:BA
Authority key identifier: 42:E4:60:5B:C5:66:ED:91:0C:BF:E2:8B:C2:27:3D:B9:9A:E6:A6:8D
Certificate issuer: /CN=42e4605bc566ed910cbfe28bc2273db99ae6a68d
Certificate serial: 019359C100183182B9E5F712944EE1758426
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuRgW8Vm7ZEMv-KLwic9uZrmpo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/511d83-7531-4430-a839-0ccc703fe471/1/QuRgW8Vm7ZEMv-KLwic9uZrmpo0.mft
Manifest number: 1248
Signing time: Sat 23 Nov 2024 16:00:40 +0000
Manifest this update: Sat 23 Nov 2024 16:00:40 +0000
Manifest next update: Sun 24 Nov 2024 16:00:40 +0000
Files and hashes: 1: QuRgW8Vm7ZEMv-KLwic9uZrmpo0.crl (hash: fm4BlUVhT3CVwAyXLoa84UWkWZOhbXj2EuIJN+dQrgg=)
2: aGSmrVTkqp3v71GC8OYZKfwyT68.roa (hash: bKyHs/t5mbF0kBka2iv2PQFYlrlW6DrlL0egb/ULSOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/511d83-7531-4430-a839-0ccc703fe471/1/QuRgW8Vm7ZEMv-KLwic9uZrmpo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/511d83-7531-4430-a839-0ccc703fe471/1/QuRgW8Vm7ZEMv-KLwic9uZrmpo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuRgW8Vm7ZEMv-KLwic9uZrmpo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:c1:00:18:31:82:b9:e5:f7:12:94:4e:e1:75:84:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e4605bc566ed910cbfe28bc2273db99ae6a68d
Validity
Not Before: Nov 23 16:00:40 2024 GMT
Not After : Nov 24 16:00:40 2024 GMT
Subject: CN=1767ca1b1494cf20b5f72b071c29051ac865deba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1b:e8:7f:ec:b0:0c:09:c9:18:0a:63:35:bd:
94:4e:6f:a0:9e:63:33:a4:0a:c0:0f:5d:87:24:49:
d0:94:15:00:4d:b6:4a:74:a4:34:e9:7d:9c:fd:b2:
46:69:90:1f:a5:7f:18:30:b4:e8:81:27:cf:36:7d:
19:f7:e5:32:d4:6b:7a:7e:70:26:bc:90:01:48:04:
9d:f0:38:a8:5d:c9:29:da:01:da:06:24:14:30:91:
c0:85:55:c9:81:d7:1e:11:2e:b3:54:7a:0f:eb:6f:
29:d3:d5:47:e8:2e:df:98:d3:03:15:1f:1e:17:ec:
68:39:dd:c4:33:11:37:7b:f2:d1:22:c9:e9:35:c9:
7c:5e:b5:a2:70:ec:96:26:e1:f2:26:a3:1d:7f:44:
f7:e2:3a:9d:50:28:15:65:bc:4b:7c:79:3e:43:99:
4e:ac:54:e5:d8:4a:64:39:1b:dd:c8:a8:da:58:87:
f7:da:d0:ae:8d:3c:e2:d6:4e:63:86:c0:fb:ae:a5:
a9:e4:83:03:13:61:bf:5f:5f:fe:a4:a6:99:40:50:
d5:b2:db:f5:56:72:c0:a6:59:c5:e9:cb:d8:f3:73:
c8:6e:cf:8e:01:a3:58:4b:84:26:22:37:f3:25:4b:
99:41:a6:80:92:9e:f2:8d:46:75:c0:07:aa:c0:ff:
08:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:67:CA:1B:14:94:CF:20:B5:F7:2B:07:1C:29:05:1A:C8:65:DE:BA
X509v3 Authority Key Identifier:
keyid:42:E4:60:5B:C5:66:ED:91:0C:BF:E2:8B:C2:27:3D:B9:9A:E6:A6:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuRgW8Vm7ZEMv-KLwic9uZrmpo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/511d83-7531-4430-a839-0ccc703fe471/1/QuRgW8Vm7ZEMv-KLwic9uZrmpo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/511d83-7531-4430-a839-0ccc703fe471/1/QuRgW8Vm7ZEMv-KLwic9uZrmpo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:4e:8e:00:f8:cb:26:5a:67:d8:86:32:3c:ee:55:50:fb:ce:
2b:70:9a:17:68:89:53:27:e2:16:3f:e4:20:a0:37:1a:35:12:
85:f8:ab:a3:a4:57:16:af:82:9a:04:15:c2:da:07:ce:8c:be:
2a:94:7e:7b:0b:d3:f8:3d:6a:f4:0a:4f:b3:f3:6f:7f:b2:a0:
c1:29:c8:ec:87:bd:29:ca:f3:3b:c3:aa:fe:03:ad:eb:07:e4:
f5:63:f8:2e:ac:7e:a8:ae:85:a6:fb:86:a2:67:95:70:5f:7e:
ba:64:7c:64:d2:b7:8b:ea:92:e6:18:b0:61:71:0e:67:fa:04:
ad:fa:10:b7:63:a9:11:53:e5:e5:7c:03:3c:c0:d6:d7:f7:f1:
fb:6b:3d:6a:8b:19:7c:30:b1:82:64:a2:78:01:af:af:fc:f8:
61:f4:64:49:7f:07:05:de:d6:51:a5:e2:29:db:e5:92:2a:83:
61:89:08:97:77:a6:e6:0a:54:8d:d9:a9:d3:86:84:d7:e6:af:
3b:c4:4f:09:2b:e5:86:91:9f:cf:12:3e:1b:7e:80:36:bb:fb:
1f:e7:c7:cd:cc:36:34:8e:17:de:99:f8:f6:8e:2b:df:be:19:
f8:2c:73:39:04:d9:85:17:e2:bf:98:6a:60:cb:02:99:f5:eb:
ee:d2:9c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:46:55 2024 by rpki-client on console-ams.rpki-client.org