Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
File: QvGiTID9yjKWRFc65tYcny43Ttg.mft (raw, json)
Hash identifier: pODY9u9Koefs/fsPVgTtb1a2HTbWQ8+dP40BTca9Fwc=
Subject key identifier: 85:8F:1F:04:B9:46:81:67:17:B8:EA:2A:AE:EF:74:D5:A8:A7:A7:6E
Authority key identifier: 42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8
Certificate issuer: /CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8
Certificate serial: 018F96BB3E928213F32B698F51BA5FB74943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
Manifest number: 117E
Signing time: Mon 20 May 2024 16:00:04 +0000
Manifest this update: Mon 20 May 2024 16:00:04 +0000
Manifest next update: Tue 21 May 2024 16:00:04 +0000
Files and hashes: 1: QvGiTID9yjKWRFc65tYcny43Ttg.crl (hash: 5uSDRlIxy4fBhKm1cgNWa8FimMeORn6Ew2fzgW9BqNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:96:bb:3e:92:82:13:f3:2b:69:8f:51:ba:5f:b7:49:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8
Validity
Not Before: May 20 16:00:04 2024 GMT
Not After : May 21 16:00:04 2024 GMT
Subject: CN=858f1f04b946816717b8ea2aaeef74d5a8a7a76e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:57:82:44:64:7c:a7:f2:ad:7f:5f:25:4a:20:
18:bb:36:9e:c5:63:cd:59:fa:34:e6:29:19:c9:08:
07:77:b0:14:5f:40:3f:5f:94:ae:b2:eb:5c:dd:06:
1f:e3:31:9d:e4:be:b1:97:84:40:da:b1:4e:71:81:
5c:6d:3b:e3:0e:d9:72:cd:c1:5d:29:53:16:a1:0d:
b4:55:7b:66:0d:9e:d2:b3:3f:d2:83:da:10:ec:82:
16:fe:94:02:e3:02:fd:7a:7b:cf:0e:1a:d9:e7:cd:
8e:e4:c0:12:71:26:50:23:50:1d:41:7b:02:32:aa:
25:7e:f7:41:2b:0f:f2:eb:49:44:9e:30:96:42:c8:
45:5c:b0:04:bc:c4:c0:7b:9e:36:ea:7b:3d:df:a2:
c3:9a:79:64:03:dd:18:0d:fc:79:be:57:b6:dc:92:
19:3c:e7:73:a1:84:05:db:5a:32:d5:b3:1e:f3:9b:
54:44:d6:32:69:a8:7a:b0:0c:35:c6:be:a2:10:a2:
60:28:78:93:87:5c:fb:81:c9:52:88:ce:b8:f2:90:
22:f8:22:bb:66:65:33:07:e5:b6:57:9a:d5:e6:52:
84:9a:69:d9:c1:9a:22:1a:9c:dc:a9:1e:3e:39:c5:
f0:51:fd:84:af:b3:19:ad:8a:e7:02:6d:c7:47:03:
3a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8F:1F:04:B9:46:81:67:17:B8:EA:2A:AE:EF:74:D5:A8:A7:A7:6E
X509v3 Authority Key Identifier:
keyid:42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:1e:5d:07:8a:78:14:c3:81:63:5c:9c:04:fe:24:fb:2a:f9:
26:f3:a4:09:c3:f2:69:64:56:0e:93:ed:ae:82:38:21:de:97:
82:f7:1e:36:6e:09:15:b2:ff:8b:41:da:5c:05:10:a9:78:fd:
4f:d8:1f:75:0a:fc:bd:91:ee:fa:60:50:5e:5f:b1:64:0e:ff:
d5:c5:94:40:e8:f5:76:a9:b8:d8:7f:4c:c9:83:88:e2:17:b8:
5d:c4:0f:6b:e3:04:8d:57:bf:c8:39:9b:ff:2a:e2:44:a7:6b:
e5:cc:25:e2:d9:b5:55:f5:ff:3d:54:ed:2d:b5:00:63:d3:0a:
55:eb:03:a6:d0:14:41:81:68:3f:91:26:31:25:66:7b:dc:1d:
ed:b1:27:42:71:d1:2e:34:f0:0c:65:26:16:1b:a3:1a:a1:0f:
34:2d:de:40:9a:83:73:f2:b6:7f:84:f2:da:f6:6e:f0:14:e6:
a4:2c:ef:93:03:d2:5c:2e:f1:fa:74:0a:65:26:b1:d4:c0:d7:
35:88:64:0b:e2:39:48:40:be:17:5b:c0:07:58:70:0f:3a:5c:
11:b3:21:a1:a3:43:c6:af:57:c5:39:1f:62:af:98:2f:00:f2:
88:09:a9:89:d0:f9:93:5b:2a:49:03:96:23:09:4b:ef:f9:9b:
ac:09:c5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 18:33:47 2024 by rpki-client on console-ams.rpki-client.org