Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.mft
File: aMXwmzqQOVDz_NGyVQhu3kh26xE.mft (raw, json)
Hash identifier: LMI1sDGoXnwvUmElnR7/HeS4kjLq1Y9dgaZWBuUsmJ4=
Subject key identifier: 33:BD:5D:95:53:43:EA:D9:79:EA:41:CB:72:B0:77:BF:47:3D:46:5B
Authority key identifier: 68:C5:F0:9B:3A:90:39:50:F3:FC:D1:B2:55:08:6E:DE:48:76:EB:11
Certificate issuer: /CN=68c5f09b3a903950f3fcd1b255086ede4876eb11
Certificate serial: 019040B083A5933159C25D428052029B59D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMXwmzqQOVDz_NGyVQhu3kh26xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.mft
Manifest number: 112B
Signing time: Sat 22 Jun 2024 16:03:48 +0000
Manifest this update: Sat 22 Jun 2024 16:03:48 +0000
Manifest next update: Sun 23 Jun 2024 16:03:48 +0000
Files and hashes: 1: 1-qs0w0OM6I564xtUhq55k0cj2u4.roa (hash: 7m1CdkcJizYMK27woK1DXnugjwitbUw+7PzWAbj8e/s=)
2: KJENcaur6KLVCgju_UOUeHEmjsc.roa (hash: 1hZJOtGiZqUMTcMzLuQcCkLaFIaKNszUumhAsqMR+Kk=)
3: aMXwmzqQOVDz_NGyVQhu3kh26xE.crl (hash: x3VwLu7nekteOuTxmnmngVI/WQBYbfg+NYo93nvCQnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMXwmzqQOVDz_NGyVQhu3kh26xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 16:03:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:40:b0:83:a5:93:31:59:c2:5d:42:80:52:02:9b:59:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c5f09b3a903950f3fcd1b255086ede4876eb11
Validity
Not Before: Jun 22 16:03:48 2024 GMT
Not After : Jun 23 16:03:48 2024 GMT
Subject: CN=33bd5d955343ead979ea41cb72b077bf473d465b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fa:ba:55:7d:c0:30:df:ac:a9:49:f7:f5:3c:
7f:2d:3c:2c:6f:ad:22:a5:29:27:3c:07:b4:9f:44:
be:0e:dc:34:07:f1:83:33:da:5e:cf:1e:cd:56:30:
bc:a3:8d:1f:f0:98:d2:96:79:f7:dd:2f:eb:3b:79:
2a:42:a7:05:05:0a:da:72:0a:6d:b3:66:db:90:24:
97:f7:63:95:5e:18:83:ff:51:94:1f:61:f5:a7:a1:
0f:5b:0a:74:2d:63:1e:81:e0:bf:6c:12:75:2f:eb:
0a:29:1e:a6:9e:e3:76:e5:69:e5:62:77:77:36:f8:
44:d6:4b:aa:34:e6:88:b9:c4:cf:a4:07:76:ac:9e:
4d:56:6c:bb:16:0d:32:cf:bf:73:6d:07:32:ac:12:
b6:8b:6e:bc:ab:4d:a2:c4:16:c9:bd:a3:da:c6:cb:
58:8b:01:92:26:a3:e1:81:f9:c9:a3:0c:fe:fe:5e:
51:6d:a3:3c:0f:d0:3a:00:35:37:f4:62:7a:b9:51:
ad:99:ed:02:27:52:72:40:15:96:3e:f2:2f:ee:fe:
a8:70:91:01:9b:f3:e5:22:31:64:ea:3f:06:90:9f:
5e:44:d4:94:3a:fb:31:25:0a:2d:98:3a:dd:32:b6:
87:ed:3d:42:18:6f:fe:35:91:71:7f:07:33:9c:65:
7d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BD:5D:95:53:43:EA:D9:79:EA:41:CB:72:B0:77:BF:47:3D:46:5B
X509v3 Authority Key Identifier:
keyid:68:C5:F0:9B:3A:90:39:50:F3:FC:D1:B2:55:08:6E:DE:48:76:EB:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMXwmzqQOVDz_NGyVQhu3kh26xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:9d:06:5e:89:99:7d:03:c8:ce:04:9a:72:a4:25:e1:89:8c:
53:17:38:5a:83:74:b3:5f:20:ad:19:42:65:90:00:5d:28:00:
07:b0:6f:f1:73:ed:0a:f0:05:b4:7e:a4:67:d1:5b:dc:1b:15:
5c:c1:06:e7:11:0e:62:ec:b0:7a:2f:5c:e0:47:57:74:7a:17:
4f:8f:48:ca:3d:9e:83:be:83:ae:c7:48:a4:12:aa:62:98:cd:
d1:46:ed:4a:a4:cf:36:6c:29:3a:86:93:77:86:b1:1c:94:2c:
2e:08:ea:ce:4b:c3:00:31:8b:e9:8d:ea:5f:8a:e1:bf:75:d2:
1f:03:c4:4e:b3:a5:40:bb:17:b8:48:6b:f1:a5:8e:1a:a9:31:
f5:4f:a8:b3:d3:f8:3e:fc:94:f8:52:37:62:f3:80:0e:a3:ef:
28:48:e5:a8:1b:1a:1c:f4:28:13:04:54:08:8a:6d:89:36:fc:
1c:4c:a6:d3:67:23:77:73:0d:43:c8:18:d1:d0:88:c4:2f:2a:
eb:f4:2c:33:ef:9d:3f:be:d1:b6:12:78:88:c0:67:8b:80:bd:
7a:18:80:ec:44:80:68:e8:71:ed:a2:b7:8e:14:dd:2b:b0:72:
6a:c4:4e:bb:a5:9a:d8:9d:66:d1:a4:89:4f:4f:a4:8d:6c:c3:
30:12:d0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:23:15 2024 by rpki-client on console-ams.rpki-client.org