Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
File: QmstdED7eIRM8BNexRgrP294OoY.mft (raw, json)
Hash identifier: ynnNfEcvi5saX/FZ6jSI19qfFcGTdvELwheWpqAcQMc=
Subject key identifier: A0:8E:E3:BB:2F:86:34:DA:52:31:E0:C5:E0:C3:D6:EA:A6:EF:19:0A
Authority key identifier: 42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86
Certificate issuer: /CN=426b2d7440fb78844cf0135ec5182b3f6f783a86
Certificate serial: 0193579BA28BAE9047A50E15AF399BF60966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
Manifest number: 0536
Signing time: Sat 23 Nov 2024 06:00:37 +0000
Manifest this update: Sat 23 Nov 2024 06:00:37 +0000
Manifest next update: Sun 24 Nov 2024 06:00:37 +0000
Files and hashes: 1: QmstdED7eIRM8BNexRgrP294OoY.crl (hash: 0x85PDbDwUIHcZWAtk/xy0nCvH+AWeI8V6EYN++zsrY=)
2: _yLZrAd1bWhzwH8nJ_wiBnbf348.roa (hash: F6bAd28M9dtx5inAD7MHggzpJ5LdakOA6LSE+dgwPBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:a2:8b:ae:90:47:a5:0e:15:af:39:9b:f6:09:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=426b2d7440fb78844cf0135ec5182b3f6f783a86
Validity
Not Before: Nov 23 06:00:37 2024 GMT
Not After : Nov 24 06:00:37 2024 GMT
Subject: CN=a08ee3bb2f8634da5231e0c5e0c3d6eaa6ef190a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b3:41:d2:02:83:06:c4:05:a9:99:21:bc:a5:
0f:03:f6:06:b3:a1:86:1e:a7:ad:9c:fc:d5:9c:cc:
fe:08:c4:7f:68:f9:af:cf:06:1d:5f:96:dd:72:23:
5e:40:d8:0d:39:85:e3:48:fe:90:32:dc:63:18:ce:
9b:11:13:ad:7e:9d:17:a0:cd:cb:86:ec:ef:90:8d:
b8:16:d4:f1:a5:60:c3:b9:45:6f:d6:06:da:95:22:
0c:56:04:f8:3e:3e:b7:a7:af:2c:ca:58:dc:9d:4b:
22:c3:3c:bc:4b:6b:0a:d8:ff:7b:80:40:f1:d5:99:
8d:af:d6:e7:6f:b6:9e:8d:7a:08:3f:12:af:44:77:
8b:8c:e9:b1:71:4b:c5:52:0d:44:91:9f:05:a4:dd:
27:a9:ee:d3:8c:26:64:c5:62:74:a2:97:e5:ce:0a:
31:c9:e9:2c:87:42:cb:03:4c:ed:45:fd:a9:af:11:
2f:8c:07:87:be:47:fc:d1:14:87:c6:63:70:e3:4d:
72:aa:12:6e:8e:d9:b2:d1:ea:19:2a:c5:e9:35:7f:
66:81:b9:d4:bb:82:00:a6:0e:01:84:32:a7:b8:0c:
30:0c:02:6d:ec:80:d3:06:d6:6d:2e:8f:02:ac:c6:
a9:e9:5b:be:bd:3e:c9:3e:c8:5f:38:76:16:12:be:
62:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:8E:E3:BB:2F:86:34:DA:52:31:E0:C5:E0:C3:D6:EA:A6:EF:19:0A
X509v3 Authority Key Identifier:
keyid:42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:ad:b3:a7:0a:6d:5e:05:13:fe:1c:d9:fc:3f:c9:6b:5d:0d:
68:dd:77:72:be:ac:cd:47:b9:c1:05:7f:e8:68:6b:4a:88:12:
97:3a:d1:d4:76:51:89:1e:76:72:48:31:38:cb:c1:0f:a1:ef:
cb:47:88:0c:5a:e4:b9:51:79:a3:1e:fb:94:ee:db:2e:bf:71:
e0:a2:91:61:71:73:e4:3f:02:e3:a8:c8:79:6a:99:21:44:bd:
e4:82:7f:a7:e4:92:af:73:2f:47:de:21:f2:de:17:e4:d4:a8:
51:36:34:15:ad:d2:ab:8f:a5:dd:3a:c7:81:3d:6c:a0:b5:9e:
64:26:75:83:8a:ac:cc:5a:64:92:8f:b3:85:1a:73:36:db:c5:
e7:55:d4:2a:9a:63:cf:8a:7b:d9:b0:f6:38:29:1f:56:23:51:
82:36:be:b4:5e:7e:9f:9e:2b:ae:98:22:89:ac:b1:8d:c7:be:
db:8c:48:45:a2:e2:49:2d:1c:38:bb:b4:1d:a3:f5:73:d9:cf:
35:0d:20:11:b3:ce:a8:04:9a:a8:be:83:eb:e7:86:7e:19:46:
b4:16:33:16:be:66:43:1d:60:92:b3:16:4d:37:a1:7e:bb:6c:
c8:0b:8a:7e:b3:bc:92:00:2e:35:13:73:cd:6c:df:4c:3f:db:
56:18:74:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:17:40 2024 by rpki-client on console-fra.rpki-client.org