Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/481ea2-570c-48ac-8a37-7269b78f9cff/1/QfxINXn14C0-SZzXOiOq2RQDGDE.mft
File: QfxINXn14C0-SZzXOiOq2RQDGDE.mft (raw, json)
Hash identifier: 2Vk2cbL8e5C4xmjXcF+OD/qWt7ajLN0fbCWGvPeSgPE=
Subject key identifier: C8:90:87:22:6E:6B:28:25:11:E1:83:53:3D:AC:29:FC:2E:DD:5E:B4
Authority key identifier: 41:FC:48:35:79:F5:E0:2D:3E:49:9C:D7:3A:23:AA:D9:14:03:18:31
Certificate issuer: /CN=41fc483579f5e02d3e499cd73a23aad914031831
Certificate serial: 018F9804E01D59D87F7DA86D04AB61673209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfxINXn14C0-SZzXOiOq2RQDGDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/481ea2-570c-48ac-8a37-7269b78f9cff/1/QfxINXn14C0-SZzXOiOq2RQDGDE.mft
Manifest number: 0DAF
Signing time: Mon 20 May 2024 22:00:07 +0000
Manifest this update: Mon 20 May 2024 22:00:07 +0000
Manifest next update: Tue 21 May 2024 22:00:07 +0000
Files and hashes: 1: QfxINXn14C0-SZzXOiOq2RQDGDE.crl (hash: Kyu86x+CE2UZXvtMZvNSHNbMAGZGDmLNQLE0wt41UT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/481ea2-570c-48ac-8a37-7269b78f9cff/1/QfxINXn14C0-SZzXOiOq2RQDGDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/481ea2-570c-48ac-8a37-7269b78f9cff/1/QfxINXn14C0-SZzXOiOq2RQDGDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfxINXn14C0-SZzXOiOq2RQDGDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:98:04:e0:1d:59:d8:7f:7d:a8:6d:04:ab:61:67:32:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fc483579f5e02d3e499cd73a23aad914031831
Validity
Not Before: May 20 22:00:07 2024 GMT
Not After : May 21 22:00:07 2024 GMT
Subject: CN=c89087226e6b282511e183533dac29fc2edd5eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:89:4a:f4:cd:cf:7d:0f:10:f2:85:d4:0e:33:
42:d4:4e:50:c0:3e:b9:2a:26:b9:9e:7c:3b:e4:11:
eb:14:00:6d:9e:8d:a2:48:1d:5f:9b:f2:41:a0:6d:
a7:84:0a:9d:77:ca:6b:bc:c0:6c:ee:46:10:f0:dc:
e9:9c:27:46:0f:f0:6a:1e:84:83:5f:8c:41:99:1a:
bb:dc:10:29:70:0e:03:ab:23:85:de:fe:50:26:99:
80:9c:72:02:62:9d:13:6e:f4:b0:d7:fd:d1:bc:64:
43:a4:ff:a7:4c:7e:9c:2c:f9:d9:da:4d:96:2f:cd:
05:90:9c:8b:b0:94:7a:09:21:ad:78:c4:49:2e:e5:
a8:cd:74:d7:ef:ce:5e:39:a1:ec:e3:b2:ca:e0:89:
cd:ed:b3:dd:05:3e:3d:fc:55:a7:5c:e2:34:b9:53:
a7:b3:7a:f5:3f:59:09:42:af:e9:1f:b1:59:35:35:
b1:92:a4:7a:04:6b:5c:fb:fc:02:9a:00:26:ed:a5:
05:60:80:16:57:6d:6a:b7:10:c9:f9:ca:07:f9:73:
bb:16:27:97:91:d1:7a:26:96:56:55:e3:b2:1a:f5:
cf:d6:07:cc:27:ba:b7:28:4c:63:4c:06:15:6f:5f:
eb:fe:e4:9e:05:c5:b0:66:e2:2d:87:80:0d:30:30:
ea:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:90:87:22:6E:6B:28:25:11:E1:83:53:3D:AC:29:FC:2E:DD:5E:B4
X509v3 Authority Key Identifier:
keyid:41:FC:48:35:79:F5:E0:2D:3E:49:9C:D7:3A:23:AA:D9:14:03:18:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfxINXn14C0-SZzXOiOq2RQDGDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/481ea2-570c-48ac-8a37-7269b78f9cff/1/QfxINXn14C0-SZzXOiOq2RQDGDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/481ea2-570c-48ac-8a37-7269b78f9cff/1/QfxINXn14C0-SZzXOiOq2RQDGDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:50:57:6b:a2:75:8a:48:48:b2:5c:5b:e7:c0:6d:79:2d:b8:
2e:e2:34:ae:64:43:79:53:be:0f:b5:11:f4:62:6f:13:50:f3:
20:22:ce:12:e1:52:9f:af:99:ac:26:7e:03:75:06:a1:1d:a5:
81:d9:88:f7:c2:d9:f9:7d:94:6e:cb:13:4a:97:da:e0:fa:3f:
fc:95:15:56:bd:ab:25:2f:d8:28:7c:b5:c9:19:f4:ef:d3:8f:
ac:ae:4c:b1:e4:88:10:f1:77:e7:81:91:61:71:d8:fe:80:63:
28:39:bd:35:01:25:e7:22:53:43:4a:8c:f5:c4:dc:10:4e:3e:
d3:f7:a3:6f:68:32:9a:3b:56:e9:f5:9e:93:c4:6a:75:00:a3:
ba:63:3c:46:85:a9:f3:68:8a:44:d7:b4:7d:f9:03:0c:78:b7:
15:f6:5c:03:7e:87:dd:53:a7:cd:dd:c4:fe:c9:14:22:76:37:
e3:c1:00:a7:08:29:16:a3:64:c2:14:d9:a9:d4:59:ea:47:39:
2a:74:40:40:f8:bb:95:16:65:ba:8c:8e:51:67:53:bc:48:0d:
b9:db:aa:20:e3:1d:78:00:b8:73:ec:5e:7a:bb:e7:25:79:b7:
3f:b4:65:c2:48:05:4d:a6:f0:43:ba:cb:7d:83:33:58:5e:29:
78:8e:a9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 00:53:46 2024 by rpki-client on console-fra.rpki-client.org