Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a3deec-dca2-4559-94b8-d9ba096bf5bc/1/AydVBXxpvXun2iJSAQnkm1sEzAM.mft
File: AydVBXxpvXun2iJSAQnkm1sEzAM.mft (raw, json)
Hash identifier: hIGjNGSA7bHekael9gTAW4tYTCDgtldkZyq+zpbxNaI=
Subject key identifier: 62:68:BC:55:64:6A:6F:73:39:09:B7:7E:DD:15:80:8C:F7:D2:67:E3
Authority key identifier: 03:27:55:05:7C:69:BD:7B:A7:DA:22:52:01:09:E4:9B:5B:04:CC:03
Certificate issuer: /CN=032755057c69bd7ba7da22520109e49b5b04cc03
Certificate serial: 018F3CD3D2D503E9DFC18C1A1EC978CD52A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AydVBXxpvXun2iJSAQnkm1sEzAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a3deec-dca2-4559-94b8-d9ba096bf5bc/1/AydVBXxpvXun2iJSAQnkm1sEzAM.mft
Manifest number: 1154
Signing time: Fri 03 May 2024 05:01:05 +0000
Manifest this update: Fri 03 May 2024 05:01:05 +0000
Manifest next update: Sat 04 May 2024 05:01:05 +0000
Files and hashes: 1: 1Evuje0EKDtv9H38aJZf_vCpmEs.roa (hash: 1W28sHBQ5gHrXyNl5DfnSmPYt4ELlvhrhaHlGRIBOEY=)
2: AydVBXxpvXun2iJSAQnkm1sEzAM.crl (hash: aWYtxtOXpUf8HTKMuFwO9ne+EkmSxdWx4SWlWEWvci0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a3deec-dca2-4559-94b8-d9ba096bf5bc/1/AydVBXxpvXun2iJSAQnkm1sEzAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a3deec-dca2-4559-94b8-d9ba096bf5bc/1/AydVBXxpvXun2iJSAQnkm1sEzAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AydVBXxpvXun2iJSAQnkm1sEzAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3c:d3:d2:d5:03:e9:df:c1:8c:1a:1e:c9:78:cd:52:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032755057c69bd7ba7da22520109e49b5b04cc03
Validity
Not Before: May 3 05:01:05 2024 GMT
Not After : May 4 05:01:05 2024 GMT
Subject: CN=6268bc55646a6f733909b77edd15808cf7d267e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e6:59:4b:f5:7b:51:64:f0:6c:52:bf:c6:a8:
2d:15:35:cd:2d:52:76:7b:6e:95:13:33:1d:21:f3:
89:13:a8:01:9b:75:cb:ae:c1:44:12:6e:b4:ea:75:
58:b7:61:81:ef:90:7f:fc:88:45:dd:eb:81:08:a0:
07:14:06:81:d7:d2:71:ff:12:b0:a5:9f:ea:42:1f:
95:c0:e4:d1:34:25:86:e8:99:e3:d6:6d:a7:4c:e8:
59:3a:f6:21:96:ab:bb:c9:10:ca:1d:dd:bc:eb:24:
84:60:f4:06:1b:e3:e2:48:b8:cd:3d:e9:1b:c0:7c:
27:ed:24:c9:13:d0:26:55:f3:f5:c4:95:7c:af:19:
64:a4:26:c8:42:c1:d6:7b:5b:74:f5:2d:a3:95:86:
bb:88:4e:85:da:b3:1a:07:f3:f3:81:e0:b9:13:ad:
db:45:31:d7:af:34:4c:e6:2e:ef:df:5c:8d:b0:63:
68:9b:75:b1:d9:c0:f8:13:ce:b9:f0:a1:9f:60:1f:
9a:8c:83:d2:be:5f:65:ad:4a:0e:88:b3:5f:d7:95:
f9:60:8f:ef:44:c7:bb:37:ba:58:c8:fd:fc:51:d0:
be:46:86:bd:72:3b:f6:c1:27:eb:f4:83:cc:9b:fe:
66:37:13:73:88:b3:a3:a2:f6:1b:3c:9a:ed:32:16:
ae:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:68:BC:55:64:6A:6F:73:39:09:B7:7E:DD:15:80:8C:F7:D2:67:E3
X509v3 Authority Key Identifier:
keyid:03:27:55:05:7C:69:BD:7B:A7:DA:22:52:01:09:E4:9B:5B:04:CC:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AydVBXxpvXun2iJSAQnkm1sEzAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a3deec-dca2-4559-94b8-d9ba096bf5bc/1/AydVBXxpvXun2iJSAQnkm1sEzAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a3deec-dca2-4559-94b8-d9ba096bf5bc/1/AydVBXxpvXun2iJSAQnkm1sEzAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:f6:a5:e8:78:69:47:b2:4b:16:d1:14:43:14:2c:70:07:ba:
3d:32:1d:08:dd:5e:b6:ca:fc:a1:b4:fc:bd:a7:63:20:09:29:
b3:22:0f:b7:89:1c:5c:75:9e:6c:e5:2c:50:c6:e0:64:96:55:
1d:b4:ef:64:67:b2:f9:14:96:5b:03:13:31:4c:34:50:a9:f9:
18:dd:74:84:a5:54:34:ea:a4:fb:84:a5:7f:69:c3:7f:b8:c1:
7f:07:62:75:40:d0:a0:31:e3:a3:92:e7:b5:15:0c:44:ce:ef:
d5:10:e8:1b:42:54:3f:20:c8:f9:a1:77:47:67:55:3f:a3:5b:
26:ad:84:3d:70:c2:7c:b3:0e:32:db:b6:fb:8d:a4:6a:bd:bd:
79:98:b9:48:eb:24:31:b9:de:0e:03:84:8d:ac:7d:d1:3c:52:
2f:94:57:f2:01:e4:8f:d7:a2:e3:59:0d:7a:3c:88:35:7b:d3:
ab:6e:f1:4f:25:54:2f:ec:cf:d7:aa:00:74:99:49:34:35:bf:
12:2e:3f:3b:5d:f4:ea:2b:66:58:48:3d:9c:de:08:60:4b:3f:
65:d6:0c:da:8b:68:aa:38:22:d8:4e:05:ad:00:0a:11:5a:36:
0f:ae:c9:0d:e2:66:77:f8:ff:a7:eb:86:f9:7f:ac:23:d4:c5:
00:50:99:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:20:31 2024 by rpki-client on console-fra.rpki-client.org