Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
File: Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft (raw, json)
Hash identifier: I08TK4Z0OZW03ZlZxg+m5fSulBnbZVBqDinU5Wd7aTg=
Subject key identifier: 81:0C:BE:EF:7F:4A:A2:5F:99:74:57:05:18:1A:FD:55:58:AF:BC:62
Authority key identifier: 02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
Certificate issuer: /CN=026d511ce3af90c4d601c7ccf8360523713e2c90
Certificate serial: 019405A198B17E16B1EBBEC70DDE7A07483E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
Manifest number: 42
Signing time: Fri 27 Dec 2024 01:01:03 +0000
Manifest this update: Fri 27 Dec 2024 01:01:03 +0000
Manifest next update: Sat 28 Dec 2024 01:01:03 +0000
Files and hashes: 1: Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl (hash: oaBYmqz6SKWQFG6vXVwxQogUmOUbDH7wyvxg55u0X1g=)
2: HjnVjh38Nf13M3M2xg_k2IajHcA.roa (hash: GR/6Q0JcFQEJdMWXLjdOu4Chjs6XiGlq94jdvQiXOF0=)
3: QmUYw5l8TMqaNfF3JSU0acuRB3s.roa (hash: t39joXHyBYMdwOJnRsabaP0OeOGjo1Nb45Zc+DrVAXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:05:a1:98:b1:7e:16:b1:eb:be:c7:0d:de:7a:07:48:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=026d511ce3af90c4d601c7ccf8360523713e2c90
Validity
Not Before: Dec 27 01:01:03 2024 GMT
Not After : Dec 28 01:01:03 2024 GMT
Subject: CN=810cbeef7f4aa25f99745705181afd5558afbc62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:90:48:8b:cb:0a:c2:e7:e2:93:92:46:ce:b8:
40:e7:0a:14:cb:1c:03:a5:8c:e1:50:74:11:b5:78:
21:0d:81:58:0b:ab:7f:d8:a2:96:01:8c:6f:76:fa:
ba:f1:ae:29:88:24:3c:d8:5a:eb:3f:ab:ba:d6:9d:
77:ac:57:83:a6:1c:33:26:23:64:53:40:ac:ec:9d:
c9:7f:bb:0b:00:49:1d:c0:dc:fc:88:b7:d0:70:79:
77:b9:82:f7:01:3e:20:1b:62:05:ed:0f:4f:34:6f:
5d:27:ed:73:7d:86:bf:af:63:82:52:d2:10:b0:8f:
99:c0:11:a6:57:f4:24:ba:6c:44:20:d6:71:ec:0d:
ce:1d:64:f8:21:9e:70:a2:b3:bb:4c:ec:de:0b:b1:
69:36:32:35:1c:15:4d:12:a7:2c:24:ad:1f:24:77:
b9:10:0f:fa:50:ca:4f:7d:59:42:37:35:9b:2a:af:
db:52:4c:5a:03:b2:68:ce:05:08:a7:4b:90:5b:f6:
e4:cd:57:f3:dc:22:1b:23:2e:8b:f5:bc:75:41:23:
8d:b7:2c:2a:f8:84:23:83:83:3d:78:93:ab:48:78:
2e:e5:85:cb:4d:67:61:ce:50:9b:9d:09:3c:cd:6a:
cd:44:98:5a:03:a4:14:52:73:c1:f4:ec:36:f3:3a:
38:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:0C:BE:EF:7F:4A:A2:5F:99:74:57:05:18:1A:FD:55:58:AF:BC:62
X509v3 Authority Key Identifier:
keyid:02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:9b:12:07:92:1c:e0:f4:4e:be:32:07:3f:1a:a8:0d:bc:ba:
8c:93:37:48:54:a0:08:9d:c7:65:f8:59:ae:0e:9d:77:6f:da:
bd:78:cd:78:e3:0f:93:67:d7:b4:d5:15:c6:d3:27:d9:2e:7c:
f6:41:0f:80:25:81:9a:08:18:85:e3:b4:1b:07:43:a8:5e:f4:
0c:70:38:25:8c:1f:a8:0c:f1:3a:30:d4:70:9d:e9:11:97:d3:
0d:b9:ae:1d:40:89:30:70:35:ce:2e:1f:07:08:11:86:0c:ad:
85:58:89:0c:d0:bd:23:97:80:08:d1:4a:ab:dd:c0:15:3d:2c:
c2:fa:55:bb:d7:c7:c0:38:8b:97:65:2a:92:ae:eb:1f:c8:5e:
81:fe:8a:bb:50:4a:db:4e:74:a3:b0:7e:12:78:fd:33:d8:ee:
dd:f9:8c:e9:df:43:9f:94:19:7e:ab:9d:52:b5:1d:84:74:df:
b8:22:17:95:ff:5b:e4:02:9b:73:53:1b:50:45:8f:28:68:b2:
29:2a:40:79:a4:0b:90:fa:ce:bf:5b:a3:14:e8:b3:69:16:17:
c6:19:7c:32:8a:f1:98:15:83:16:44:56:e0:18:df:e0:6f:3d:
eb:3d:35:1c:30:0d:b0:02:dd:ee:81:51:f8:90:55:54:e9:58:
98:af:cb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:40:02 2024 by rpki-client on console-ams.rpki-client.org