Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
File: 1-qe1orkHCRPTSTKBX-tH42Mf318.mft (raw, json)
Hash identifier: onHQTGu87WDrGWG1xBE4rcq6nBy6p5K04fuoeNyibGI=
Subject key identifier: FD:87:55:7F:AE:DD:81:39:BC:8D:74:93:C2:18:32:2B:9C:49:F1:BA
Authority key identifier: FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
Certificate issuer: /CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Certificate serial: 0193572E010FC10CA24807E49CE6EC8274AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
Manifest number: 114C
Signing time: Sat 23 Nov 2024 04:00:52 +0000
Manifest this update: Sat 23 Nov 2024 04:00:52 +0000
Manifest next update: Sun 24 Nov 2024 04:00:52 +0000
Files and hashes: 1: 1-qe1orkHCRPTSTKBX-tH42Mf318.crl (hash: u01ex7l/2J4JiUriBIHk1zHdCz4FSbPxzYKoMyf3w0I=)
2: YHW79U42UYSXRpEfSbcWICMyPNU.roa (hash: 9a6xi3jfhcWGENuZH6W4Acd2AtSuNV1zSX/YaPEuHXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2e:01:0f:c1:0c:a2:48:07:e4:9c:e6:ec:82:74:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Validity
Not Before: Nov 23 04:00:52 2024 GMT
Not After : Nov 24 04:00:52 2024 GMT
Subject: CN=fd87557faedd8139bc8d7493c218322b9c49f1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:27:67:18:b8:97:9b:89:0d:3d:96:c5:d1:1b:
88:ce:26:2c:eb:db:93:a6:4a:5a:f6:c5:a3:9f:bf:
fa:d3:36:e9:6d:7c:86:1c:09:73:53:be:59:6f:13:
8a:e4:1a:a6:dc:57:5c:ce:ee:f4:83:6d:eb:82:0d:
8e:66:3d:8f:81:75:a8:11:0b:19:11:ad:74:00:a1:
89:8f:f5:7a:c8:c4:fa:9e:69:dd:f4:f2:23:b4:4e:
e3:bc:68:b2:e5:f8:50:f3:de:65:49:56:c2:2c:eb:
67:c9:67:d7:ec:62:15:c5:8f:14:51:aa:ec:d8:cb:
c3:67:a6:68:3b:60:44:c6:65:18:9a:7f:c1:7e:8a:
9d:92:5d:f1:df:d5:e6:59:18:0a:ab:51:a2:0e:77:
55:6c:2d:c8:65:87:06:27:f4:1f:f8:6b:59:f2:3a:
a9:d7:a1:c6:ea:7a:12:5e:ac:a8:9c:f6:60:cb:a8:
e0:cd:3e:80:a1:fd:5b:d5:37:f3:8f:97:4c:60:64:
5d:99:5f:2f:18:c0:23:e4:e8:8c:91:96:30:85:be:
6d:b8:4e:50:6b:e0:95:ca:81:ce:fd:84:ba:d8:ff:
a2:d6:11:fb:0d:f8:48:81:84:ec:f7:49:58:03:44:
b3:c6:5b:ba:f0:0d:a3:6b:69:15:29:cc:66:35:6c:
07:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:87:55:7F:AE:DD:81:39:BC:8D:74:93:C2:18:32:2B:9C:49:F1:BA
X509v3 Authority Key Identifier:
keyid:FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:af:fd:b6:0a:41:9b:e6:48:76:12:61:22:20:5e:02:dc:6b:
f1:67:2b:4d:6f:f6:62:95:a9:80:d4:56:4e:84:c3:c3:be:21:
68:70:95:77:48:7f:2e:9e:9d:8d:21:24:e5:c1:72:93:20:7f:
1f:21:f9:33:1f:96:c7:4b:09:19:6f:00:58:46:4b:9e:54:01:
96:ea:e0:9e:51:07:ff:d7:bb:c9:be:54:c0:dd:0e:6c:8b:1b:
ad:ab:d3:67:d6:73:15:91:73:0b:26:aa:18:08:74:fa:69:a3:
f2:33:de:1d:62:08:7a:63:cb:73:f7:85:09:9f:07:27:e3:74:
dc:f7:58:eb:51:04:58:12:e5:c7:92:2f:15:62:6c:6c:44:8f:
3d:ee:63:1c:3f:20:17:a1:b6:36:c6:5c:bf:be:5f:90:72:4e:
89:a0:d3:59:ce:12:56:5d:b5:7b:12:fe:4e:a5:d6:91:39:f4:
ac:09:4d:fc:44:71:8c:29:b7:83:01:e2:48:e3:e1:7d:84:96:
41:88:2d:4b:56:0d:0d:6b:1d:29:3d:28:39:e6:42:14:cc:b8:
9f:fc:fd:ea:34:af:83:f6:4c:2c:c5:5c:0f:3d:78:0f:84:d6:
b0:de:f7:99:e1:d1:fc:72:12:cb:87:f5:0a:e0:e8:ef:32:d0:
d3:7d:43:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:00:18 2024 by rpki-client on console-ams.rpki-client.org