Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
File: k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft (raw, json)
Hash identifier: vPkzw5zRDkNM7swdyl/tQ0JHMmpRc4xcU9satVxHGoY=
Subject key identifier: 22:8A:FD:E2:59:ED:CA:04:70:C2:5A:26:CA:9B:FF:D9:D5:0A:B2:5B
Authority key identifier: 93:F0:1E:90:86:D4:0D:50:8F:58:42:E9:82:F2:53:68:9F:7F:E4:C9
Certificate issuer: /CN=93f01e9086d40d508f5842e982f253689f7fe4c9
Certificate serial: 0193549C89B5D0274EF0AADF8987B7D6557C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_AekIbUDVCPWELpgvJTaJ9_5Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
Manifest number: 1001
Signing time: Fri 22 Nov 2024 16:02:45 +0000
Manifest this update: Fri 22 Nov 2024 16:02:45 +0000
Manifest next update: Sat 23 Nov 2024 16:02:45 +0000
Files and hashes: 1: XVSwCJ5CkBEkzmupVzzA0kxqTC8.roa (hash: 9NFkBYbft4ewoILSGqJ7lu99BIe8qrt3VRTDxupWg+M=)
2: k_AekIbUDVCPWELpgvJTaJ9_5Mk.crl (hash: QGsSGCEmhuE+Cx+pYBK0Gdpr4QbJWR5/Kz1pOc0a2Rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_AekIbUDVCPWELpgvJTaJ9_5Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9c:89:b5:d0:27:4e:f0:aa:df:89:87:b7:d6:55:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93f01e9086d40d508f5842e982f253689f7fe4c9
Validity
Not Before: Nov 22 16:02:45 2024 GMT
Not After : Nov 23 16:02:45 2024 GMT
Subject: CN=228afde259edca0470c25a26ca9bffd9d50ab25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b0:61:14:cb:be:fc:67:07:2d:89:32:8b:77:
75:97:48:f6:b4:5c:51:a7:3c:02:86:36:84:4a:50:
3f:88:d5:f8:1f:88:4b:23:74:06:27:03:9c:1a:3a:
37:2f:6f:94:c5:0b:6e:f9:04:c6:ed:0e:7a:d3:3b:
eb:35:0b:cf:c5:41:22:1c:9d:03:08:56:34:9d:75:
3c:4a:f1:25:35:af:7f:32:f2:d2:34:74:01:8c:55:
1d:81:44:18:50:22:5a:9f:6b:dc:4d:cf:a8:46:32:
f1:27:15:6c:b8:6c:75:13:01:a6:22:05:4b:b4:a0:
1b:ad:ae:6e:c2:9a:bf:29:b7:eb:8c:24:20:5e:c6:
60:cc:53:da:73:4f:d1:58:b1:0e:78:0d:f6:12:ac:
b5:ed:6a:51:80:49:8a:b0:12:f5:8f:c6:2e:5b:7c:
47:f3:57:9c:0b:2f:ce:84:0c:55:86:2b:49:28:76:
ca:9a:83:bd:7c:13:a9:36:1a:23:a4:12:3f:b0:a1:
27:7e:16:a5:c6:82:95:70:5f:25:57:ba:34:11:3f:
28:bf:58:10:49:29:58:3d:22:87:4d:3e:a2:0c:46:
39:af:b3:35:5c:1c:48:2a:45:60:fc:89:ea:07:b3:
73:0a:08:e3:73:e0:87:db:7f:9b:86:b9:82:a7:bf:
8c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8A:FD:E2:59:ED:CA:04:70:C2:5A:26:CA:9B:FF:D9:D5:0A:B2:5B
X509v3 Authority Key Identifier:
keyid:93:F0:1E:90:86:D4:0D:50:8F:58:42:E9:82:F2:53:68:9F:7F:E4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_AekIbUDVCPWELpgvJTaJ9_5Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:ea:8f:5a:80:5e:02:90:0f:ec:84:5f:68:d9:d3:6a:e8:47:
2e:aa:4f:19:f8:c0:cb:b7:6e:8a:b4:54:5f:22:13:c4:63:45:
df:a2:6e:a2:71:a2:94:c1:05:4b:ee:fe:79:d7:60:9b:58:f9:
0e:dc:4a:28:e9:f0:1e:21:03:d5:3a:cd:52:ea:47:9d:3f:11:
3d:cd:80:62:56:25:b7:d6:00:a8:de:9f:b4:c2:05:42:8d:7a:
f5:30:1c:69:5a:51:b5:6c:09:cf:fe:38:07:af:63:be:d7:84:
6a:86:07:45:9a:97:ed:95:52:8b:0e:00:4b:41:4e:e5:9b:74:
40:97:fa:5f:a0:2e:e0:28:94:94:b3:41:41:71:df:69:8b:1f:
15:9c:a8:9e:c6:a5:f9:5e:0e:c6:53:ab:15:d9:2e:a6:e2:c5:
20:58:90:38:eb:f1:81:4c:b3:22:a5:8a:ea:de:52:a1:85:cf:
02:9e:b6:00:aa:63:28:dc:5f:4e:06:34:73:2f:29:19:41:4a:
f7:b9:da:e8:7c:5a:33:d8:d2:75:c0:7d:62:32:c4:21:15:78:
2a:76:9e:1a:11:8b:f0:7a:90:75:eb:8e:df:d4:11:2c:64:3c:
a5:d1:67:85:00:2f:7f:17:8b:a7:5c:e3:2e:79:43:66:54:59:
59:69:0c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:00:19 2024 by rpki-client on console-ams.rpki-client.org