Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/aAONTKy9QZGZUus3CcFlM4OJAOM.mft
File: aAONTKy9QZGZUus3CcFlM4OJAOM.mft (raw, json)
Hash identifier: yhTOQaBC0XK4yXPFSPSjVp9ggKCqH0f5NrQTgYKIC+0=
Subject key identifier: C6:C2:41:2F:06:89:86:AA:19:FB:F7:21:DB:2D:44:E9:13:2C:4E:A6
Authority key identifier: 68:03:8D:4C:AC:BD:41:91:99:52:EB:37:09:C1:65:33:83:89:00:E3
Certificate issuer: /CN=68038d4cacbd41919952eb3709c16533838900e3
Certificate serial: 01901D46176021B714CC526F01898CB32ADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aAONTKy9QZGZUus3CcFlM4OJAOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/aAONTKy9QZGZUus3CcFlM4OJAOM.mft
Manifest number: 11C8
Signing time: Sat 15 Jun 2024 19:00:50 +0000
Manifest this update: Sat 15 Jun 2024 19:00:50 +0000
Manifest next update: Sun 16 Jun 2024 19:00:50 +0000
Files and hashes: 1: 8KQQ-Gpiby7znTIielViN0qL6Us.roa (hash: boQ2YI+4QwSAWqwfaDSp88YrJS3MVk48A4s6VhuKliQ=)
2: aAONTKy9QZGZUus3CcFlM4OJAOM.crl (hash: LzQkNvgUpnC8alVfVQ481zn5a0Q4DrsNaMbsD9fhGKs=)
3: mcegTA8KryHaQRa4XPE5O1v4yY4.roa (hash: FD5+bKCL030R5u9B0DUU4AyDw7samia6m+1hQW0MLL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/aAONTKy9QZGZUus3CcFlM4OJAOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/aAONTKy9QZGZUus3CcFlM4OJAOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aAONTKy9QZGZUus3CcFlM4OJAOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:46:17:60:21:b7:14:cc:52:6f:01:89:8c:b3:2a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68038d4cacbd41919952eb3709c16533838900e3
Validity
Not Before: Jun 15 19:00:50 2024 GMT
Not After : Jun 16 19:00:50 2024 GMT
Subject: CN=c6c2412f068986aa19fbf721db2d44e9132c4ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:30:59:82:96:9a:b9:c7:83:d5:7a:d0:94:1b:
00:c9:39:b9:ef:9f:ec:9d:a6:a0:ef:92:93:78:68:
85:11:69:17:54:85:da:d9:8e:63:aa:d2:d3:b9:b0:
de:6a:da:34:df:4a:4a:1a:30:d9:e1:64:5f:54:d0:
d6:44:5c:d9:67:9d:73:a5:bd:b4:c6:cb:e5:2f:d9:
cc:44:c8:44:97:90:56:e9:08:96:92:e0:49:71:b5:
93:f6:de:95:3b:88:ee:ff:97:af:e9:cb:fc:dc:ec:
b4:4d:38:8b:9c:2a:d7:55:cf:7d:a6:e3:dc:f7:64:
d3:60:4e:f0:82:db:14:b6:f4:7e:e9:2d:38:51:a4:
c6:43:39:17:10:b9:e2:d9:57:71:c8:95:1f:d2:e2:
83:e3:4b:6c:7f:b6:f3:1d:fb:a6:e1:df:e7:96:06:
49:14:4b:b3:56:7c:50:b2:95:67:ed:a7:84:30:82:
97:c3:9d:65:3a:19:1f:9e:c1:e7:9e:4b:74:8c:af:
18:cb:a4:1e:b5:a1:db:95:77:8b:58:d4:00:e7:ac:
d4:99:82:ad:1e:9b:69:0d:23:48:4c:b3:58:7e:79:
b7:62:ae:66:c2:c7:75:31:97:bd:21:4e:a6:73:6d:
dd:4b:36:32:9d:15:d3:a9:d5:1c:a7:17:55:a9:76:
a3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C2:41:2F:06:89:86:AA:19:FB:F7:21:DB:2D:44:E9:13:2C:4E:A6
X509v3 Authority Key Identifier:
keyid:68:03:8D:4C:AC:BD:41:91:99:52:EB:37:09:C1:65:33:83:89:00:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aAONTKy9QZGZUus3CcFlM4OJAOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/aAONTKy9QZGZUus3CcFlM4OJAOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/aAONTKy9QZGZUus3CcFlM4OJAOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:29:fe:30:59:54:d2:6c:16:74:d2:3f:1c:ba:bb:be:92:bb:
9b:1e:09:72:97:e4:19:bc:13:79:14:6c:42:bd:05:56:00:88:
4c:b1:cf:44:f2:09:d0:4e:c2:f0:dd:0f:42:81:55:b2:e9:79:
15:8c:9f:2c:a7:f0:31:6a:65:e8:9c:c6:09:b2:18:ba:96:e0:
2f:65:16:96:c9:78:7e:9e:a7:fe:31:a5:8d:dc:95:6c:34:17:
02:24:1c:ea:1e:2a:01:ab:68:5b:31:a4:f6:64:2d:8e:03:63:
88:ec:9f:2b:8b:11:ce:3d:64:a4:02:10:d3:02:33:40:ee:01:
5e:62:cf:ea:a3:8f:a4:11:d3:7d:24:1e:df:14:76:b1:f1:db:
64:94:b3:38:94:48:7e:67:55:62:d9:19:1b:cc:ab:5c:30:2b:
8c:d9:14:97:ee:2e:7e:ab:6a:35:66:5a:74:c2:40:a6:c2:8b:
55:79:96:d1:16:b6:b3:b4:5d:c7:80:4b:99:ab:be:ab:55:02:
e4:42:05:ca:ab:f5:f4:dd:b5:a9:8f:b5:49:bd:f6:93:0a:11:
b4:aa:3d:83:8a:4d:62:86:68:cb:f1:43:5c:eb:28:28:73:d6:
67:6d:31:c7:60:35:12:29:5f:4c:4f:d8:d5:05:c2:a4:00:98:
0e:db:eb:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:02:19 2024 by rpki-client on console-fra.rpki-client.org