Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
File: aesALwAL1CbkpkDHHWwCAbUFDjQ.mft (raw, json)
Hash identifier: HFGIsYWIFE2PYgn7fnrkpCjBy38D2qOwlFSJGgC2Jkc=
Subject key identifier: 28:35:21:6E:15:E8:EA:60:E9:CC:70:19:16:71:92:05:A4:3A:BD:B7
Authority key identifier: 69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
Certificate issuer: /CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Certificate serial: 01901DED5AE41066916BFF837DC886AE6A08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
Manifest number: 110B
Signing time: Sat 15 Jun 2024 22:03:32 +0000
Manifest this update: Sat 15 Jun 2024 22:03:32 +0000
Manifest next update: Sun 16 Jun 2024 22:03:32 +0000
Files and hashes: 1: 2-NPGmV1S-I3jY3_F9QheqQfqG4.roa (hash: fCdExppHXkTvWPzYfpqOvFw8/6EVIc/KVeaYESiOtPI=)
2: 6txvKn1B3B25-VJzbmAPloN9ojM.roa (hash: /PsgMg94U/wVVyKk5BxzZrtG1MX0reiXy8mkZK5ZfA8=)
3: aesALwAL1CbkpkDHHWwCAbUFDjQ.crl (hash: ks5CS/sa9gCSxr/7jQFFC+Z0v/H5WN+PGsM8exLZ+rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ed:5a:e4:10:66:91:6b:ff:83:7d:c8:86:ae:6a:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Validity
Not Before: Jun 15 22:03:32 2024 GMT
Not After : Jun 16 22:03:32 2024 GMT
Subject: CN=2835216e15e8ea60e9cc701916719205a43abdb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:55:c1:9b:31:94:f8:7c:9f:d3:f0:5d:65:57:
83:99:7a:81:23:96:46:e2:05:9c:dd:06:bc:32:67:
88:8c:88:c7:db:24:b8:a9:6a:16:cc:a5:6a:d6:06:
7c:83:6a:e3:ba:09:59:12:b3:51:25:7c:3d:71:6b:
e3:a5:3d:c8:6c:bc:25:be:f9:fd:44:59:ba:23:6b:
15:dd:d2:19:3b:20:47:4e:c1:e8:17:dd:82:e9:e6:
2d:73:59:08:9d:f5:3a:60:3a:64:2a:3b:b4:5b:59:
98:ed:64:5a:94:09:99:de:eb:17:8d:73:a7:21:13:
81:9d:8d:28:e8:f1:da:44:25:f4:38:e7:46:b7:ab:
39:4b:b9:36:32:dc:ec:cc:eb:1b:42:47:08:b2:bf:
dc:b0:6b:be:94:1d:15:a4:ee:a2:83:58:39:81:1d:
43:e0:0e:88:35:7e:8e:2f:64:64:9c:bf:f6:8b:56:
f0:46:75:b4:19:f3:6d:b7:78:ed:2d:98:a5:50:1f:
df:e5:32:d9:7a:95:3d:90:a6:ab:31:69:1e:f1:8b:
23:27:f9:6e:a9:75:aa:b3:ab:f3:a3:9c:cb:b4:be:
33:84:70:c6:46:80:2e:a1:f8:d8:77:ac:ce:03:ee:
e9:9c:20:0c:5a:20:ac:05:b7:84:fc:06:3c:88:48:
fb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:35:21:6E:15:E8:EA:60:E9:CC:70:19:16:71:92:05:A4:3A:BD:B7
X509v3 Authority Key Identifier:
keyid:69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:52:1a:dc:4c:17:79:e3:6d:7c:1b:6e:2d:b8:6e:48:19:d2:
ff:74:e3:24:1e:b4:ce:95:43:cd:44:36:85:49:80:cc:d2:40:
93:d4:26:bc:43:9f:01:ca:8a:48:69:7d:0a:3b:9e:d4:04:a7:
9b:d6:78:63:0b:8b:d8:ad:03:cd:a0:31:bd:b0:2d:cf:05:ba:
c7:0c:58:39:3f:20:4b:28:b2:3d:15:43:92:bb:d3:e6:4d:cc:
1e:8c:14:6d:ca:3c:92:cb:d0:25:7e:31:da:fd:3f:ee:59:e7:
bf:4e:af:f2:8f:e0:ab:6a:57:c3:a1:53:48:e1:78:e9:8b:9b:
f3:80:f2:e0:67:f6:8e:5c:92:1c:37:fa:d9:d3:3e:8b:e2:61:
69:fd:14:c0:52:9b:e6:60:f2:0a:48:3a:a6:63:e2:4c:6c:aa:
ef:bd:33:67:46:e8:71:5a:12:42:13:65:dc:f4:c9:87:d6:85:
0b:a6:69:78:79:43:a8:50:85:c2:60:13:08:17:e3:b5:2c:33:
02:95:68:d2:c0:08:e6:28:c7:20:57:a9:f6:11:8d:fe:0b:9c:
2d:be:7b:90:24:8b:bc:f3:a5:31:47:05:ce:7d:4a:55:c6:d6:
ae:82:21:eb:52:cd:39:10:94:fa:f6:0d:17:5d:a5:83:20:f4:
05:68:7c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:34:01 2024 by rpki-client on console-ams.rpki-client.org