Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
File: aa24Jfn9vKDNfHkB3reiKuF5fAY.mft (raw, json)
Hash identifier: b1lBh2PZLF3r986iIKPCa8BZqK4L2i5r8brytp4fe54=
Subject key identifier: E7:30:F7:10:DF:9A:E7:75:89:67:B2:CA:04:7B:83:AF:00:E6:ED:08
Authority key identifier: 69:AD:B8:25:F9:FD:BC:A0:CD:7C:79:01:DE:B7:A2:2A:E1:79:7C:06
Certificate issuer: /CN=69adb825f9fdbca0cd7c7901deb7a22ae1797c06
Certificate serial: 019040ADECE49E02E51D1610A42AC96BA9F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
Manifest number: 0EF2
Signing time: Sat 22 Jun 2024 16:00:58 +0000
Manifest this update: Sat 22 Jun 2024 16:00:58 +0000
Manifest next update: Sun 23 Jun 2024 16:00:58 +0000
Files and hashes: 1: 0btjNwXMOg386xN4V-OABm0K364.roa (hash: lvhZ1hXam0Ay8cLczkMQQz+BA7RfBTRI13G8jeOCeyk=)
2: aa24Jfn9vKDNfHkB3reiKuF5fAY.crl (hash: HPyjWf/X9S0VgxxUQ18BrbTuzmyxeBtn56zurlQk9RI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 16:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:40:ad:ec:e4:9e:02:e5:1d:16:10:a4:2a:c9:6b:a9:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69adb825f9fdbca0cd7c7901deb7a22ae1797c06
Validity
Not Before: Jun 22 16:00:58 2024 GMT
Not After : Jun 23 16:00:58 2024 GMT
Subject: CN=e730f710df9ae7758967b2ca047b83af00e6ed08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8c:df:30:4c:03:08:04:18:dd:50:a1:72:15:
d8:f1:49:35:de:af:a6:3a:2e:22:4a:eb:52:d2:f7:
75:77:23:4d:0a:49:1b:fd:ff:8b:f5:26:33:ca:5f:
f8:81:0b:87:3a:52:70:33:bf:8e:57:b8:12:6b:51:
6f:b6:9a:cc:84:e7:d9:73:9b:d6:94:ad:74:c6:9f:
fe:73:b9:ce:b7:af:12:0d:46:f7:9c:ed:e7:2c:ff:
81:5a:63:da:e8:4d:a3:2d:86:80:01:cb:d4:64:51:
3d:a5:18:4e:b0:60:39:d4:40:89:18:e4:4a:d0:b5:
1e:62:9e:85:c0:0b:7d:7b:a4:3e:b1:97:2a:6b:5c:
7c:2b:e1:cb:fa:ee:62:19:df:02:c5:b3:98:63:3c:
ae:1d:b3:e4:be:f6:3b:97:e7:d2:a6:0d:b4:08:92:
00:ce:c0:52:2e:5c:ea:1e:ab:9c:dc:3c:1f:6e:5c:
be:07:bc:cc:27:41:3e:3c:f4:e8:19:0e:19:20:e7:
8a:f5:d1:71:fd:0d:20:50:59:de:7f:d5:b5:cd:94:
b3:5f:8f:54:e7:de:f5:0e:c6:6c:ce:26:bc:03:3e:
23:a0:0a:01:76:b5:1a:44:bd:da:9c:0b:40:df:61:
b7:04:5c:c4:f2:46:a1:9e:64:bd:32:19:5e:a0:d8:
1d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:30:F7:10:DF:9A:E7:75:89:67:B2:CA:04:7B:83:AF:00:E6:ED:08
X509v3 Authority Key Identifier:
keyid:69:AD:B8:25:F9:FD:BC:A0:CD:7C:79:01:DE:B7:A2:2A:E1:79:7C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ba:37:ed:1d:f9:9b:88:7a:a3:ab:5a:fd:3e:75:c8:96:71:
4d:16:b6:90:35:c6:ec:34:b1:f4:dc:27:a5:33:81:c9:ac:2b:
c0:8a:6d:5f:07:19:5b:07:f0:af:20:e2:a0:9f:fd:5c:3f:05:
09:98:4d:d2:24:4a:e5:a3:33:8e:2d:e0:63:37:fe:cc:13:85:
38:be:1f:14:fd:ee:bd:c9:73:98:98:48:1e:98:f5:e9:b8:2a:
4e:ca:f7:8c:f2:08:bc:4d:c6:a8:e7:d9:a7:e6:ff:cf:f7:45:
77:96:9d:08:5a:99:76:16:15:5d:0d:a9:3e:4d:72:fa:de:f9:
2e:81:92:b0:2b:a0:cd:13:ac:34:94:a7:34:48:80:c0:1a:0d:
14:8c:62:4c:ec:16:30:1c:5e:1b:c4:4c:99:e0:f8:48:47:0a:
18:e7:96:e3:bc:ec:81:2a:b9:a1:e4:d1:56:7d:2c:d0:21:f4:
2e:7f:de:eb:9c:00:44:37:43:23:be:d0:15:40:f2:8a:9a:80:
61:85:76:f9:55:da:ac:82:78:2b:28:72:8c:77:3c:3a:1e:16:
45:8d:db:66:87:ac:7c:27:1f:85:9b:14:fa:d1:95:50:60:cf:
72:2d:08:6b:6b:ac:21:72:32:6c:17:1c:b8:3e:7a:b1:cc:6b:
a1:b2:47:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBArezkngLlHRYQpCrJa6n3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YWRiODI1ZjlmZGJjYTBjZDdjNzkwMWRlYjdhMjJhZTE3
OTdjMDYwHhcNMjQwNjIyMTYwMDU4WhcNMjQwNjIzMTYwMDU4WjAzMTEwLwYDVQQD
EyhlNzMwZjcxMGRmOWFlNzc1ODk2N2IyY2EwNDdiODNhZjAwZTZlZDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4zfMEwDCAQY3VChchXY8Uk13q+m
Oi4iSutS0vd1dyNNCkkb/f+L9SYzyl/4gQuHOlJwM7+OV7gSa1FvtprMhOfZc5vW
lK10xp/+c7nOt68SDUb3nO3nLP+BWmPa6E2jLYaAAcvUZFE9pRhOsGA51ECJGORK
0LUeYp6FwAt9e6Q+sZcqa1x8K+HL+u5iGd8CxbOYYzyuHbPkvvY7l+fSpg20CJIA
zsBSLlzqHquc3Dwfbly+B7zMJ0E+PPToGQ4ZIOeK9dFx/Q0gUFnef9W1zZSzX49U
5971DsZszia8Az4joAoBdrUaRL3anAtA32G3BFzE8kahnmS9MhleoNgdjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOcw9xDfmud1iWeyygR7g68A5u0IMB8GA1UdIwQY
MBaAFGmtuCX5/bygzXx5Ad63oirheXwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWEyNEpmbjl2S0ROZkhrQjNyZWlLdUY1ZkFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9hZjZiN2EtOWE3MC00OTRlLThhOTAt
MzIzNjI2N2M4Nzk5LzEvYWEyNEpmbjl2S0ROZkhrQjNyZWlLdUY1ZkFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9hZjZiN2EtOWE3MC00OTRlLThhOTAtMzIzNjI2N2M4Nzk5
LzEvYWEyNEpmbjl2S0ROZkhrQjNyZWlLdUY1ZkFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATro37R35
m4h6o6ta/T51yJZxTRa2kDXG7DSx9NwnpTOByawrwIptXwcZWwfwryDioJ/9XD8F
CZhN0iRK5aMzji3gYzf+zBOFOL4fFP3uvclzmJhIHpj16bgqTsr3jPIIvE3GqOfZ
p+b/z/dFd5adCFqZdhYVXQ2pPk1y+t75LoGSsCugzROsNJSnNEiAwBoNFIxiTOwW
MBxeG8RMmeD4SEcKGOeW47zsgSq5oeTRVn0s0CH0Ln/e65wARDdDI77QFUDyipqA
YYV2+VXarIJ4KyhyjHc8Oh4WRY3bZoesfCcfhZsU+tGVUGDPci0Ia2usIXIybBcc
uD56scxrobJHoQ==
-----END CERTIFICATE-----
Generated at Sun Jun 23 01:34:51 2024 by rpki-client on console-ams.rpki-client.org