Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
File: akYj92vVuy3wr2bzYP90_xwA2wI.mft (raw, json)
Hash identifier: yuC1dSON44esCxvUJktDlzyErEh/RMjhkL0R6zzDZsI=
Subject key identifier: 4A:CE:A1:80:DB:7B:FE:47:0A:87:BA:DC:35:D6:FC:3D:85:57:A0:57
Authority key identifier: 6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02
Certificate issuer: /CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02
Certificate serial: 01901D46985F44C52E133128CD37F0F4F516
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
Manifest number: 11CA
Signing time: Sat 15 Jun 2024 19:01:24 +0000
Manifest this update: Sat 15 Jun 2024 19:01:24 +0000
Manifest next update: Sun 16 Jun 2024 19:01:24 +0000
Files and hashes: 1: FwBT6fO1eZGmthsE2_v3plJbe5s.roa (hash: 4oy6ZnuHk0wZGiw/ek0sj1a+pEq/QpwEq6a38bnoIAY=)
2: akYj92vVuy3wr2bzYP90_xwA2wI.crl (hash: QsarH45pXfbv3Lk36w78sPFCbhpaK6E/EBkcun8621s=)
3: kdm3v2WXPWKh3cWBPWJatzd1HB4.roa (hash: 3JTfhtJ+PUMhb7bepHfNxmsdi6WhYgoTJTi9vxjnHy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:46:98:5f:44:c5:2e:13:31:28:cd:37:f0:f4:f5:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02
Validity
Not Before: Jun 15 19:01:24 2024 GMT
Not After : Jun 16 19:01:24 2024 GMT
Subject: CN=4acea180db7bfe470a87badc35d6fc3d8557a057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d9:33:81:d0:fc:3e:cf:d0:2b:af:3d:0d:1e:
a1:89:b3:eb:f2:cf:dd:be:a7:6f:b1:01:36:d6:92:
4f:cc:db:bc:03:18:19:a4:c0:8e:65:7b:60:c7:f4:
0c:be:3d:01:ee:43:8d:bd:59:7f:29:7c:86:c4:b4:
9a:36:ac:92:42:ea:7c:30:b7:f3:07:89:6d:a3:1e:
41:b6:f5:6a:f3:f0:cf:29:e7:05:eb:35:96:13:cb:
3a:c2:f2:20:47:69:83:5a:8a:55:da:cd:1d:20:c6:
96:cd:63:48:59:7b:db:4e:35:95:b8:73:99:7b:4d:
3f:0a:53:f6:e0:3b:3f:b2:35:0e:2e:c9:88:46:8c:
06:17:c7:36:21:cb:c5:95:36:28:9c:6f:cf:08:d7:
84:3f:e9:39:8e:8b:cc:cc:59:06:6d:fe:62:f1:2d:
56:74:11:b0:61:08:89:35:00:62:be:9e:e0:7f:31:
bb:19:17:d1:94:65:1b:50:e3:4c:aa:5b:d2:4f:a3:
7e:9b:be:7b:a2:6d:03:7f:f7:43:2b:db:75:7d:7e:
d5:65:5e:75:09:b7:f4:7a:ed:27:db:a6:6e:da:62:
e0:26:3a:c8:ca:f3:f4:a0:e1:a6:f4:ea:0d:8d:9d:
00:33:e3:eb:31:dd:de:16:09:c1:34:fe:5d:ca:e2:
23:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CE:A1:80:DB:7B:FE:47:0A:87:BA:DC:35:D6:FC:3D:85:57:A0:57
X509v3 Authority Key Identifier:
keyid:6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:64:21:87:23:c4:17:81:ad:d5:bd:e3:59:0c:10:9e:a4:f8:
1a:2a:aa:dd:9a:8b:5a:32:f2:ad:84:0a:a9:d4:93:87:65:42:
fe:9f:75:4b:3a:d8:6b:28:4f:62:3f:7e:c7:2b:07:f7:37:bc:
bd:a1:f7:e0:5f:03:fc:ad:61:d2:a4:dd:06:d6:ed:1a:ee:cf:
1f:03:4a:cd:9c:5e:96:0f:a1:e0:ec:9f:af:d2:c1:6e:cf:4c:
24:1a:c5:19:06:ac:b4:8c:ef:b5:a2:26:2a:5b:14:b0:83:b3:
00:67:7b:89:19:53:e7:19:15:c4:cb:6f:35:f5:04:e7:e6:a6:
9a:6a:c6:f5:ef:b0:8c:12:e3:12:99:b1:72:b4:66:d5:70:50:
21:32:e9:96:24:50:db:e3:37:2f:c5:fa:d1:02:54:82:39:cf:
e7:9f:07:67:01:d4:85:06:35:82:ab:75:eb:ef:6b:fc:30:60:
c4:e5:f8:af:99:b6:85:5b:72:2b:a9:32:3f:16:ce:63:40:16:
eb:ec:24:35:c6:53:c8:5d:61:04:bd:b4:0f:a3:79:ab:6a:0a:
5f:37:f1:20:f2:13:ae:d5:17:46:be:23:f2:9e:3e:25:ef:55:
23:e1:bc:13:14:01:58:9f:a0:f0:37:ee:93:c3:dd:8b:84:2c:
4c:0a:1b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:58:53 2024 by rpki-client on console-ams.rpki-client.org