Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
File: AqsBDPXBHBswaT0RQXtgz0X7Egk.mft (raw, json)
Hash identifier: yXMc++++XExWHI23sFa6E9wmiw94ATixjgIO96oKU4E=
Subject key identifier: 44:39:99:53:1E:23:5D:41:8C:C2:D7:2A:0E:3E:23:85:2C:44:F4:F5
Authority key identifier: 02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
Certificate issuer: /CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Certificate serial: 01936A7DC56F8D0C8BDC2DD745685046FD0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
Manifest number: 137A
Signing time: Tue 26 Nov 2024 22:00:47 +0000
Manifest this update: Tue 26 Nov 2024 22:00:47 +0000
Manifest next update: Wed 27 Nov 2024 22:00:47 +0000
Files and hashes: 1: AqsBDPXBHBswaT0RQXtgz0X7Egk.crl (hash: Qvq9gUzS42wi/Pu1kYF5jiYjh92GrqYhgqd3MxYxAdg=)
2: V_RdZpOOH-zzvNuL7UM1Y0ReudY.roa (hash: zXkglWb7U2I2Y4GNG2Ir8/d23ADGIpTJBtL08gUfzf0=)
3: e-3uQ7rUHldII4f4DJGlEgRBhCM.roa (hash: LDgDsC2f/B2tJ4mo+bdyR2RNjhvCJie6rraIkdvkC48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:7d:c5:6f:8d:0c:8b:dc:2d:d7:45:68:50:46:fd:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Validity
Not Before: Nov 26 22:00:47 2024 GMT
Not After : Nov 27 22:00:47 2024 GMT
Subject: CN=443999531e235d418cc2d72a0e3e23852c44f4f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:dc:7b:76:cc:76:e3:ca:ef:61:94:bf:08:a8:
36:a0:3e:ce:8f:9b:72:13:fd:15:29:70:6f:0e:54:
61:b1:f0:14:c2:e8:a5:80:65:29:4a:85:db:88:9a:
84:df:ca:02:b8:58:fd:44:50:a6:e2:d1:dd:ab:e7:
19:0b:21:61:fd:29:e4:f6:a8:35:37:ab:c5:7e:6a:
34:4a:ae:39:4f:53:e8:f1:83:f8:04:8f:2b:73:ab:
56:d0:25:6d:a0:2a:b7:05:84:d5:9c:f4:dd:43:c1:
7c:92:03:35:26:fa:2d:47:4d:e0:52:02:ad:98:8a:
4e:21:ef:7a:8e:d0:98:dd:d6:44:1c:6e:ff:b6:d7:
57:a9:48:3e:a9:c7:aa:96:4f:22:de:32:a6:ca:49:
e9:e7:bf:1b:d5:dc:60:6a:13:19:6a:17:f9:3f:74:
59:b4:97:38:de:94:87:5e:85:03:27:99:81:0a:74:
ff:28:7f:b0:d5:4e:b7:f0:1b:28:5c:9c:8c:45:4c:
e1:4c:c7:e0:95:76:1f:a2:83:c6:34:0f:4c:bd:11:
08:5d:4e:b6:13:b4:80:04:b0:db:89:2f:9b:de:0f:
52:0d:bb:f2:1f:94:04:4c:e5:55:c7:b5:8a:eb:4d:
fd:50:02:ff:44:cb:e0:4f:f5:39:96:5c:1a:50:0b:
de:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:39:99:53:1E:23:5D:41:8C:C2:D7:2A:0E:3E:23:85:2C:44:F4:F5
X509v3 Authority Key Identifier:
keyid:02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:02:aa:b1:03:ab:f6:f6:4d:4e:bf:ee:bf:6d:fe:66:b2:86:
3b:18:11:89:82:a4:b7:4f:a9:dc:05:73:83:5c:ba:aa:35:03:
32:ac:21:47:8f:14:80:e4:1e:f4:bc:86:0b:fd:3b:9c:8f:e9:
03:81:d3:bb:6e:28:ce:e3:b9:9f:4c:0b:d9:fb:83:1b:64:e8:
34:a8:1b:27:96:26:0f:56:8d:fd:1e:24:f5:7c:96:37:5c:12:
a1:00:5d:51:28:db:78:6d:fb:51:15:0c:01:13:78:bc:9f:c7:
08:ff:a9:9b:03:47:3a:cb:ab:fb:82:ea:e2:d0:7b:72:58:b2:
70:ee:96:0f:1e:c6:51:b2:65:25:de:64:fb:a2:2f:07:30:07:
e9:e1:08:c9:97:bb:e8:8e:c4:1c:89:50:8e:5b:80:4e:86:00:
dd:4d:06:b3:02:08:b3:65:ad:9d:da:e5:2f:38:21:fc:80:ab:
d1:2d:ba:7d:a6:82:4e:9b:4e:64:ba:e5:5e:b6:36:7b:2c:ae:
24:49:b5:32:57:00:aa:3d:2b:74:25:d1:92:6b:7f:b2:20:f7:
ab:9e:ea:41:8d:b5:c9:18:f9:8b:38:fc:0c:3e:30:dc:f7:cb:
83:79:28:95:d9:cf:88:f2:77:78:33:ad:4f:66:a3:82:8a:bd:
10:67:1d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:13:13 2024 by rpki-client on console-ams.rpki-client.org