Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
File: pqqcrek75rp8irsyODGAdjF9YH0.mft (raw, json)
Hash identifier: gAtzWjgrF6pxKZYi9CT7O2JNv3k9gz6pC9Q7Xm32yU4=
Subject key identifier: A8:39:C9:76:7E:AF:AA:CC:6E:33:BD:D1:AC:00:04:ED:36:87:1F:01
Authority key identifier: A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D
Certificate issuer: /CN=a6aa9cade93be6ba7c8abb3238318076317d607d
Certificate serial: 0193557614EBF20C0D3682284A499DBFAAC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
Manifest number: 0A88
Signing time: Fri 22 Nov 2024 20:00:22 +0000
Manifest this update: Fri 22 Nov 2024 20:00:22 +0000
Manifest next update: Sat 23 Nov 2024 20:00:22 +0000
Files and hashes: 1: bBSZmapKkbi5zgNkzdMfFpxC0aI.roa (hash: wEFuTiXDYL5yUdg9cuNZPoO4C7Y0cpCrQn+KG3/Ynzg=)
2: ku7wf4Gmu2_tu-G52zfpd-xBSb4.roa (hash: msP6bTVrDA+2JWUxWLTV/jQJkGd0ekCIZD+LgtvJZh4=)
3: pqqcrek75rp8irsyODGAdjF9YH0.crl (hash: ds0WNgsIV/ioCUvEnKgzqPh6yA8mkP99MW/iqIkclEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 20:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:76:14:eb:f2:0c:0d:36:82:28:4a:49:9d:bf:aa:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6aa9cade93be6ba7c8abb3238318076317d607d
Validity
Not Before: Nov 22 20:00:22 2024 GMT
Not After : Nov 23 20:00:22 2024 GMT
Subject: CN=a839c9767eafaacc6e33bdd1ac0004ed36871f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ca:78:21:28:52:70:f6:4b:93:01:36:b6:d8:
a7:77:a5:6c:8f:89:36:ca:31:84:8d:c1:28:d2:90:
35:bf:22:28:a2:2b:9d:84:9a:63:0f:dd:90:d0:f7:
25:60:ea:8a:c3:43:36:32:1c:7f:29:8c:ce:53:68:
11:e6:1c:c2:45:01:e3:08:02:0a:4f:83:96:1b:64:
ff:5c:7d:84:6c:fc:2e:ac:a5:bd:7d:40:b6:be:95:
1d:1a:27:ab:c3:cc:26:05:d7:85:9c:eb:e9:63:f0:
9b:e4:67:c8:a4:a0:e4:e3:51:2e:fe:2c:4a:d4:1e:
3a:7e:1c:7a:28:db:25:1d:dc:8e:4a:95:8e:2d:e8:
41:9d:bd:11:a8:b3:bf:bc:d1:f0:b4:2b:4e:49:11:
f5:ff:be:dc:f3:f4:5c:b5:30:e4:17:f0:a8:bc:56:
e5:fe:96:93:ed:ca:5c:13:a6:e7:ff:e7:e1:f4:14:
84:9d:4d:d1:6f:7d:f5:c4:4d:c3:c8:9b:f1:c9:3a:
58:be:c3:1b:23:c1:a1:da:27:b2:d5:3a:9d:10:f6:
2b:bf:cb:3d:d3:e3:d9:f5:d1:7a:50:ea:df:1f:34:
5e:50:20:8a:c2:30:05:16:9e:34:89:71:14:b3:a8:
40:2a:f8:3d:56:05:e9:82:57:01:98:c6:88:2c:eb:
b0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:39:C9:76:7E:AF:AA:CC:6E:33:BD:D1:AC:00:04:ED:36:87:1F:01
X509v3 Authority Key Identifier:
keyid:A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:6c:4b:7b:0f:26:a8:02:f8:81:0e:ba:75:1e:f6:07:31:fb:
a7:01:ea:5d:1d:f8:1e:fd:26:0b:5c:c6:78:bf:ac:65:4e:39:
31:c3:59:e5:81:17:65:b9:99:fa:4c:82:1e:07:0c:fd:a8:78:
72:30:ab:fa:34:e3:5e:06:b7:89:17:34:6f:23:d6:2c:94:5e:
e7:a5:c1:50:1b:0e:f5:fb:95:ee:9e:df:fb:6a:6e:0d:6f:7e:
35:2d:59:ce:3b:81:50:ee:7e:e3:55:15:fd:f7:c7:06:e6:49:
fc:6a:c5:48:5b:ed:fb:0c:33:98:cd:ec:67:8f:f0:ce:93:7d:
d8:40:6a:19:f6:fd:04:8e:86:41:dd:57:9f:19:83:6d:7f:ea:
15:7e:2a:b8:6c:14:fa:f3:36:18:3c:9b:2d:3c:c1:6d:4a:63:
a1:94:2d:29:b9:3a:92:79:cb:5e:0d:55:47:fb:42:e0:26:02:
6e:b9:4d:61:c9:f8:dc:bb:a2:a9:b1:15:cd:7e:02:2f:ad:52:
2e:d5:4a:87:83:ad:17:fe:a0:41:32:c1:47:8b:7e:63:39:ca:
4b:88:4f:e2:36:c1:cf:ec:c2:fe:25:44:dc:06:83:42:95:55:
57:37:9d:54:15:be:9f:6b:bc:57:12:29:25:48:ac:3f:41:31:
2a:48:5f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:26:17 2024 by rpki-client on console-ams.rpki-client.org