Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
File: ar0nEML89VGzH9fMxg3x9rtKksQ.mft (raw, json)
Hash identifier: fWY56WURZDRD+kGf9XyStMI8QQT3+GybxCvNMJBNDbo=
Subject key identifier: B6:68:4A:21:4C:2F:96:21:EE:2E:BD:6D:F2:68:9B:FC:6A:AE:95:38
Authority key identifier: 6A:BD:27:10:C2:FC:F5:51:B3:1F:D7:CC:C6:0D:F1:F6:BB:4A:92:C4
Certificate issuer: /CN=6abd2710c2fcf551b31fd7ccc60df1f6bb4a92c4
Certificate serial: 01936B2275FD7E527BDEE62E380064ED26C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
Manifest number: 09A7
Signing time: Wed 27 Nov 2024 01:00:40 +0000
Manifest this update: Wed 27 Nov 2024 01:00:40 +0000
Manifest next update: Thu 28 Nov 2024 01:00:40 +0000
Files and hashes: 1: SgwbKz2MC4zNFDLc3kFpZ3RG7x8.roa (hash: hZS3QycupqS5d2fvMLxS2fuMIGcH5zgV8wcw4IUNaMM=)
2: ar0nEML89VGzH9fMxg3x9rtKksQ.crl (hash: tj2EM+wX6U7NtwEbFNM+DDntesqvpvvDIVXEJ4MgRCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6b:22:75:fd:7e:52:7b:de:e6:2e:38:00:64:ed:26:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6abd2710c2fcf551b31fd7ccc60df1f6bb4a92c4
Validity
Not Before: Nov 27 01:00:40 2024 GMT
Not After : Nov 28 01:00:40 2024 GMT
Subject: CN=b6684a214c2f9621ee2ebd6df2689bfc6aae9538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9b:ec:50:a1:5d:99:88:43:ad:2f:2c:49:94:
61:91:fe:cf:16:c0:c9:51:99:e3:8c:e7:1a:97:66:
e3:0c:e6:d8:65:7c:f5:c9:13:6f:2b:b9:12:65:29:
58:c4:d2:c0:72:3e:40:da:40:91:8b:a8:a0:11:7b:
09:98:30:87:52:ae:70:43:d8:b6:b2:4f:77:94:11:
9a:62:bf:e6:e4:33:f5:3f:ec:51:12:1e:95:19:02:
aa:83:a6:46:6b:2f:c6:3c:29:bc:be:c3:90:81:5e:
b2:f9:1a:12:a0:46:6b:f7:01:0b:97:04:03:6d:dc:
7e:b2:d6:df:79:d3:94:19:34:68:91:7a:94:89:8e:
be:3b:3e:c5:73:2f:e3:c5:ad:a3:8c:a7:f1:d8:39:
98:e4:fc:ff:15:b0:c4:20:de:42:10:a6:a2:80:f7:
f5:cf:7a:46:00:9c:e6:95:02:70:1e:ef:70:c6:72:
24:3b:1e:c2:d4:2d:1d:95:24:e6:40:81:c7:08:2b:
d2:4a:2a:b9:74:45:72:b0:23:e8:d2:0e:31:ee:8b:
ac:09:8c:47:54:ea:17:be:81:cc:e5:f5:b2:e7:cf:
53:b5:dc:c2:60:55:32:1c:3e:6f:3e:bf:ad:24:52:
34:9b:1b:63:6a:11:16:e9:51:4b:bd:d9:54:1a:51:
f1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:68:4A:21:4C:2F:96:21:EE:2E:BD:6D:F2:68:9B:FC:6A:AE:95:38
X509v3 Authority Key Identifier:
keyid:6A:BD:27:10:C2:FC:F5:51:B3:1F:D7:CC:C6:0D:F1:F6:BB:4A:92:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:45:30:d9:00:32:94:b8:59:c9:99:17:28:9b:48:f8:6b:f5:
09:98:8e:5d:4c:43:8e:d7:f9:ff:b4:52:16:b2:00:0b:90:d8:
a5:a8:46:27:eb:65:fd:37:b1:40:b1:26:d0:2e:d4:dc:d4:07:
ce:a5:44:71:af:9b:2d:1c:d3:44:db:a1:2a:d4:e6:15:30:e4:
59:58:55:5b:61:8f:90:9d:02:8d:a8:a6:d4:14:52:2d:12:18:
25:39:b2:2f:e3:d1:7d:5b:e8:ba:34:9b:0e:ec:8a:50:cd:01:
17:e4:c4:e8:9f:8e:14:51:a4:58:32:59:30:e9:51:fe:6d:9a:
34:fc:f6:dd:11:53:9d:18:4c:75:d5:b4:e7:98:f5:13:7f:5f:
d9:87:ed:7f:82:ce:92:0a:6c:34:75:ca:19:f8:b5:53:fc:30:
bc:03:59:97:ed:b5:84:08:3a:90:61:90:a2:87:d6:51:e9:b6:
1c:7a:d8:b5:4c:6f:a4:a6:a0:7c:55:22:1f:34:d0:ec:f9:e6:
94:cf:52:61:c3:7d:5e:2d:38:25:20:09:38:c7:7c:cc:ca:c4:
11:51:51:4e:45:8c:64:7c:0d:58:ce:4f:97:f5:a0:c8:4e:82:
a2:0b:67:3a:de:9e:b0:62:5c:12:91:39:1d:42:bb:a3:d2:be:
60:05:54:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:30:59 2024 by rpki-client on console-ams.rpki-client.org