Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
File: aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft (raw, json)
Hash identifier: q5sebviAOfN5S5eO/xmLZPbZ2fD+Ylk8WFI3x+AoRnY=
Subject key identifier: AE:A7:32:47:83:4B:80:FF:C8:94:93:DA:FE:A3:8B:17:55:23:43:B2
Authority key identifier: 68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
Certificate issuer: /CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Certificate serial: 01906B2B37E08E1C0493C54677D7FBA9A91D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
Manifest number: 03B6
Signing time: Sun 30 Jun 2024 22:01:52 +0000
Manifest this update: Sun 30 Jun 2024 22:01:52 +0000
Manifest next update: Mon 01 Jul 2024 22:01:52 +0000
Files and hashes: 1: 27PfQYyzhqUO2LyTKopUpQsUoKk.roa (hash: DHjFUqBN9WX9l5lnMCS7m80ctEK7uSJ2l2PpkJgAIRc=)
2: aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl (hash: W9FL9TEI4XFHTYGeIrNRBDt48/aKo1F4mEyGB6RjAK8=)
3: qdl5fku-AQNMruwoJyh0jH26_CU.roa (hash: dn4K1VnnRaJkkXquVd29t6+4xYzZ7Au4JfP78rZG2Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 22:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6b:2b:37:e0:8e:1c:04:93:c5:46:77:d7:fb:a9:a9:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Validity
Not Before: Jun 30 22:01:52 2024 GMT
Not After : Jul 1 22:01:52 2024 GMT
Subject: CN=aea73247834b80ffc89493dafea38b17552343b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fa:34:9c:57:da:4d:3e:50:0c:04:8c:59:eb:
d7:a9:fe:81:4a:e2:f2:00:30:16:16:61:15:5a:b9:
9e:df:02:ec:e9:45:1d:69:f9:cd:7f:80:b7:f7:a5:
7e:c1:18:be:2f:52:7d:99:1c:16:ca:7e:f9:66:7e:
a5:04:19:ec:92:a6:36:3a:c1:61:3a:b1:f0:24:e3:
c2:9e:de:d3:e0:37:4f:4f:7b:a0:c1:e0:23:49:e6:
4f:40:0d:11:f4:4d:ea:08:75:c2:36:6e:fc:0e:69:
01:22:b6:aa:b4:d5:d6:1d:17:69:06:40:d0:34:09:
63:ce:fd:3c:3e:e5:86:ef:30:87:8d:59:20:7c:00:
c3:6e:60:7e:60:c1:d5:7d:cf:51:17:de:10:c7:ef:
b5:62:38:8f:9b:4b:b5:df:2a:1e:10:19:44:84:22:
c8:13:41:9a:5b:72:9a:3f:60:cb:ab:27:5e:01:34:
68:de:93:31:11:d2:83:32:5c:60:ce:f6:c0:6b:e0:
1c:31:a5:5a:d6:95:2b:25:2e:86:a3:0c:34:3d:df:
f7:bc:22:4b:a4:08:19:fa:5a:a3:f9:e6:ed:d9:85:
a9:75:54:28:b3:84:0a:fe:97:07:c9:c5:33:18:ca:
be:fc:d6:ff:b7:a9:b2:3a:f4:24:dc:ff:0e:e2:8f:
ac:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A7:32:47:83:4B:80:FF:C8:94:93:DA:FE:A3:8B:17:55:23:43:B2
X509v3 Authority Key Identifier:
keyid:68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b8:99:e3:83:c7:c6:17:97:f4:be:26:01:62:d6:74:f2:64:
7f:39:89:10:12:85:90:7d:09:5d:05:84:e0:c2:cc:9b:f7:76:
4a:8e:33:72:a7:45:4f:48:0e:2d:13:e7:ab:8b:8a:e4:f5:39:
a3:0e:80:06:18:58:93:dd:71:2d:36:f2:5e:6a:fb:1d:4a:e6:
41:35:43:17:61:f0:1c:2d:51:ff:b9:3b:d4:fb:28:b3:df:c7:
8a:5c:03:b2:2b:c6:be:c7:a1:f3:f4:74:d3:c9:64:0b:fe:58:
2e:3f:42:68:77:e5:76:1e:39:83:40:1f:4b:f3:a3:f3:c7:6d:
8a:36:71:43:5e:0b:cd:f6:2a:8d:48:00:e7:ce:94:c5:42:a3:
d8:17:5b:6e:2d:ca:d4:30:a9:da:32:60:bb:d9:96:14:2b:ee:
7f:94:f0:61:b4:db:d2:e2:51:c4:66:a3:6c:c0:59:ba:90:6f:
f1:8b:7f:2d:31:f0:7e:93:b0:fe:af:81:21:1c:76:d7:09:36:
64:ce:91:6d:71:f8:6f:71:38:1f:0d:b6:7b:f8:ae:ab:ef:19:
74:b6:c0:b2:11:f5:a6:fd:b9:6a:6f:d9:89:c4:92:af:42:a9:
e5:1d:dd:c9:88:55:1b:c6:25:be:58:c9:55:d0:da:c0:36:13:
54:01:87:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 01:22:59 2024 by rpki-client on console-ams.rpki-client.org