Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.mft
File: aMXwmzqQOVDz_NGyVQhu3kh26xE.mft (raw, json)
Hash identifier: mSepIzpivwttn25CDRQfuSUnvpQ1WvleIcIxQCHslFY=
Subject key identifier: B0:16:BA:64:90:40:8F:7D:2C:D5:00:48:F3:3D:C5:33:77:00:9B:15
Authority key identifier: 68:C5:F0:9B:3A:90:39:50:F3:FC:D1:B2:55:08:6E:DE:48:76:EB:11
Certificate issuer: /CN=68c5f09b3a903950f3fcd1b255086ede4876eb11
Certificate serial: 01901FDA0F58E487F8E6FE39B98CAA0306E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMXwmzqQOVDz_NGyVQhu3kh26xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.mft
Manifest number: 111A
Signing time: Sun 16 Jun 2024 07:01:42 +0000
Manifest this update: Sun 16 Jun 2024 07:01:42 +0000
Manifest next update: Mon 17 Jun 2024 07:01:42 +0000
Files and hashes: 1: 1-qs0w0OM6I564xtUhq55k0cj2u4.roa (hash: 7m1CdkcJizYMK27woK1DXnugjwitbUw+7PzWAbj8e/s=)
2: KJENcaur6KLVCgju_UOUeHEmjsc.roa (hash: 1hZJOtGiZqUMTcMzLuQcCkLaFIaKNszUumhAsqMR+Kk=)
3: aMXwmzqQOVDz_NGyVQhu3kh26xE.crl (hash: SW41lEKJDdin7WODvuQ/loTrAcwvEiKDD1RBYuPjZxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMXwmzqQOVDz_NGyVQhu3kh26xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1f:da:0f:58:e4:87:f8:e6:fe:39:b9:8c:aa:03:06:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c5f09b3a903950f3fcd1b255086ede4876eb11
Validity
Not Before: Jun 16 07:01:42 2024 GMT
Not After : Jun 17 07:01:42 2024 GMT
Subject: CN=b016ba6490408f7d2cd50048f33dc53377009b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:67:4d:f2:19:e3:95:7b:6f:86:9b:6a:83:49:
5b:6a:bd:d8:8c:64:52:4a:15:2d:e7:a9:42:84:f1:
b0:2b:f0:6e:47:3b:bb:54:d1:2f:22:8a:d6:34:92:
e2:e0:cc:a1:0a:92:15:80:b0:24:27:0a:db:75:b7:
2c:ef:23:b2:62:07:2d:0b:e5:18:81:c3:56:2a:ea:
07:6f:06:44:2d:1e:14:a4:0f:ad:53:74:02:15:69:
24:f4:c9:7b:5e:83:69:21:0a:f6:d2:02:0f:47:68:
3c:f4:b1:94:5d:b7:c5:3f:20:2d:ae:42:4d:30:c9:
79:88:e1:9f:7a:75:c0:be:3a:74:e2:68:09:e3:69:
a8:d4:aa:0a:a6:fe:d6:c0:36:b9:d9:ab:f2:f7:99:
7a:1b:8c:26:93:fc:c0:64:c5:79:cc:92:79:aa:63:
dd:01:f7:e1:e0:fa:b1:79:9c:89:22:55:aa:78:91:
13:db:cc:74:a5:e4:52:bd:c9:20:b8:6e:cf:fd:07:
8c:f4:94:0e:cb:24:36:57:66:8b:49:50:45:3d:59:
a8:96:24:92:69:20:7b:5e:8f:70:e3:94:30:bd:27:
68:b6:db:2d:85:98:91:87:f5:d7:c2:13:01:dc:8f:
1e:dd:ea:4a:e2:2c:b1:eb:ea:8b:b5:ad:d6:0e:85:
c0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:16:BA:64:90:40:8F:7D:2C:D5:00:48:F3:3D:C5:33:77:00:9B:15
X509v3 Authority Key Identifier:
keyid:68:C5:F0:9B:3A:90:39:50:F3:FC:D1:B2:55:08:6E:DE:48:76:EB:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMXwmzqQOVDz_NGyVQhu3kh26xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:7e:f2:eb:68:29:4c:81:16:d2:73:b8:48:cf:61:76:0a:b4:
d0:42:4a:f0:03:86:a2:47:6d:cb:d0:83:8b:c9:03:b8:07:8a:
0f:e6:4f:61:e6:e5:6c:f5:46:26:51:52:77:92:06:c8:81:ab:
e6:1e:a3:05:36:6f:0d:40:8e:14:a6:b0:a3:7c:4e:d9:d8:df:
92:65:48:ed:4e:0a:68:90:de:f9:fd:01:ff:0b:ad:31:85:81:
64:b1:32:65:3c:8f:1c:23:85:be:df:64:e3:e1:61:f5:e8:b7:
36:78:6f:e7:93:2e:31:7a:60:fb:64:9e:6c:36:e8:9e:cf:d4:
c6:80:a3:fe:c9:90:c9:01:06:ed:ab:4f:fd:0b:61:dd:e9:27:
1b:0f:0b:05:04:e2:35:f1:72:a9:d9:eb:2a:c8:9a:f8:06:c4:
ef:c1:74:fa:c4:55:3e:2d:a5:59:a1:14:46:4f:53:33:5a:d2:
19:dd:ce:d6:92:aa:2a:a2:20:80:48:d9:97:7b:7b:61:ab:45:
83:8d:ad:df:1a:31:98:2d:49:c3:ff:47:e1:11:ea:4d:61:fe:
b2:47:17:19:3d:07:67:e2:26:e9:73:9e:85:05:0d:36:b0:2e:
f2:b9:93:73:41:a4:00:f7:cb:df:57:1b:13:03:45:46:e5:cb:
3e:df:64:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 08:08:16 2024 by rpki-client on console-ams.rpki-client.org