Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
File: qsU0mf8g8DXLixwKqbd8PX0ol2w.mft (raw, json)
Hash identifier: SbhYZVXsTPTODWNevbxsNe5MQ4sG0iG2vktjhXddjKg=
Subject key identifier: BC:BE:AE:BE:91:BB:CF:6F:1D:7C:45:6C:76:0C:88:21:66:17:EA:FC
Authority key identifier: AA:C5:34:99:FF:20:F0:35:CB:8B:1C:0A:A9:B7:7C:3D:7D:28:97:6C
Certificate issuer: /CN=aac53499ff20f035cb8b1c0aa9b77c3d7d28976c
Certificate serial: 019356F6F532EA4CD01582DFD4FC2C338B12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
Manifest number: 1370
Signing time: Sat 23 Nov 2024 03:00:45 +0000
Manifest this update: Sat 23 Nov 2024 03:00:45 +0000
Manifest next update: Sun 24 Nov 2024 03:00:45 +0000
Files and hashes: 1: H5hHGG3h35Gchd4iNE9bC0fNlag.roa (hash: t/Tbib9QFi9AjBFjnD9A6MSEi28p6N2KE8gYilIa01M=)
2: qsU0mf8g8DXLixwKqbd8PX0ol2w.crl (hash: Hb78Bge+xKEl+cVXMNUU8BR7txhwk2bmWYRTZur4eAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f6:f5:32:ea:4c:d0:15:82:df:d4:fc:2c:33:8b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac53499ff20f035cb8b1c0aa9b77c3d7d28976c
Validity
Not Before: Nov 23 03:00:45 2024 GMT
Not After : Nov 24 03:00:45 2024 GMT
Subject: CN=bcbeaebe91bbcf6f1d7c456c760c88216617eafc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c4:b5:18:87:39:24:cb:19:15:17:d6:34:ad:
ab:21:cb:db:f7:6a:e7:4f:fe:ed:88:e0:d0:ed:23:
31:46:3e:f7:32:e5:49:f7:07:9b:4e:09:2f:24:9e:
87:46:0d:b2:b3:ea:82:b6:5a:ab:04:e9:70:0a:72:
1c:e4:57:e0:24:73:0f:00:d7:a1:bb:85:08:c5:60:
3f:6e:a1:9e:51:a0:ee:6b:34:5d:af:64:73:a1:15:
03:23:e8:e7:5c:5e:20:ae:af:e3:74:01:4e:fb:ad:
81:b1:63:0b:3c:e1:45:97:90:15:93:6e:34:ae:bc:
3a:bf:2d:ac:78:ae:68:e4:23:7a:0e:3d:56:16:ae:
88:d4:f4:d0:ef:fd:76:3b:9f:6f:59:82:6a:86:bb:
76:93:b9:1c:5a:37:2a:ca:23:32:78:62:33:74:a8:
80:da:5d:87:58:66:ec:6e:00:a4:23:9c:6b:8b:c8:
28:53:08:a9:3c:57:e3:e7:95:c3:1a:f3:dd:eb:70:
77:9c:ac:78:57:0e:2a:be:1b:9e:58:3c:21:6c:4d:
a1:35:98:13:e7:83:1f:2a:a7:b0:d1:0f:5c:31:ec:
db:bf:07:df:d3:e9:fc:29:bb:97:59:35:78:c9:5a:
47:a7:f8:8c:9e:d8:2d:72:ba:ac:70:a4:e5:c6:12:
84:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BE:AE:BE:91:BB:CF:6F:1D:7C:45:6C:76:0C:88:21:66:17:EA:FC
X509v3 Authority Key Identifier:
keyid:AA:C5:34:99:FF:20:F0:35:CB:8B:1C:0A:A9:B7:7C:3D:7D:28:97:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:93:af:67:11:42:e6:7e:c7:c6:9a:2c:dc:01:80:bd:81:e9:
bf:67:b7:37:60:0e:22:be:35:30:c3:11:32:ce:61:9f:d3:0d:
2e:7a:71:6c:9e:4c:36:17:50:b3:a2:39:00:25:81:98:ed:2c:
ac:80:20:01:41:47:9b:2b:c0:85:44:c7:ef:b0:8c:26:94:61:
36:16:cc:0b:be:5a:42:53:1b:74:ae:8d:e5:01:ca:01:c2:cc:
cd:dc:12:ad:11:ae:ae:34:94:6f:4f:1a:df:f9:b7:8d:ca:c5:
df:c2:a0:cd:90:ea:a5:66:a4:e5:f7:2b:8e:17:0b:6b:e0:89:
8f:8e:ff:8f:3e:9d:89:dd:d5:15:6d:4b:b7:6e:0a:cb:45:0f:
6e:56:70:b2:67:0e:69:61:a9:d0:33:f5:15:f2:57:e0:ee:25:
7f:38:8c:ba:8c:73:a8:01:2f:58:7d:20:a1:58:35:79:3f:fd:
6c:a8:ff:ed:97:e4:0d:cc:a1:42:43:8d:56:a5:ab:5b:b1:18:
1a:96:3d:fc:3a:24:fb:98:62:48:df:54:19:ed:9a:78:91:c6:
48:5a:3e:e8:f2:86:6d:ba:18:27:a0:69:06:97:4d:3b:e4:e8:
30:cd:3a:fa:54:9d:a1:22:05:a2:4f:f4:73:1f:41:71:57:ba:
bf:d6:f3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:19:16 2024 by rpki-client on console-fra.rpki-client.org