Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.mft
File: aG1vVpUAwlBwthJPG4b2CVJnepM.mft (raw, json)
Hash identifier: vkSlSTKrs9BVaXGw7/XEkzZuJsqlFd55Blx+WLo65A0=
Subject key identifier: 3A:A6:5C:76:D5:BE:67:A9:72:07:FA:0B:F9:2F:20:FA:91:D8:09:D1
Authority key identifier: 68:6D:6F:56:95:00:C2:50:70:B6:12:4F:1B:86:F6:09:52:67:7A:93
Certificate issuer: /CN=686d6f569500c25070b6124f1b86f60952677a93
Certificate serial: 01936D11115F9F64F145AD9EC643FD4548B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aG1vVpUAwlBwthJPG4b2CVJnepM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.mft
Manifest number: 071D
Signing time: Wed 27 Nov 2024 10:00:55 +0000
Manifest this update: Wed 27 Nov 2024 10:00:55 +0000
Manifest next update: Thu 28 Nov 2024 10:00:55 +0000
Files and hashes: 1: 6kO7gNE3kBxHP4oIeMa3yug13hw.roa (hash: 7DTvEYnZ4THK3lHJuJVf7OYkpMGBejURrWb4wINYaj0=)
2: aG1vVpUAwlBwthJPG4b2CVJnepM.crl (hash: TMUNnE+/qztcemad5JzqmEw1UNr0Ljbn6xjNhcD9TXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aG1vVpUAwlBwthJPG4b2CVJnepM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 Nov 2024 08:27:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6d:11:11:5f:9f:64:f1:45:ad:9e:c6:43:fd:45:48:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=686d6f569500c25070b6124f1b86f60952677a93
Validity
Not Before: Nov 27 10:00:55 2024 GMT
Not After : Nov 28 10:00:55 2024 GMT
Subject: CN=3aa65c76d5be67a97207fa0bf92f20fa91d809d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e5:d1:1d:1e:07:0f:61:33:c7:1d:9d:0c:5a:
80:c7:ef:c2:ed:54:51:5b:f0:65:5c:1d:92:40:a2:
ec:89:8a:da:d0:bc:b0:15:f8:f9:e4:25:0f:45:5b:
60:fe:76:57:d4:2f:09:30:4b:7a:ea:a0:83:85:0f:
1d:f8:38:83:b8:61:04:f8:20:5f:4d:00:12:69:03:
fd:4c:a8:66:46:21:c4:4e:7e:79:42:7c:0c:ff:ae:
f8:65:7c:d6:31:86:6e:f7:f2:0f:cf:ff:66:53:16:
a9:cf:72:3e:ef:34:bd:4f:d2:c3:3e:b3:b9:92:68:
c6:4f:9b:fa:8e:d8:53:87:5c:df:65:dd:01:f4:47:
6b:dc:e6:01:f7:d3:90:1c:1f:74:41:b2:36:57:e6:
21:44:58:c7:9c:c1:ec:a3:07:6d:f1:65:84:19:1c:
18:58:3b:b9:54:5a:de:38:86:93:6a:e1:8d:4c:0d:
86:0b:72:b0:ac:1f:38:40:b0:a2:34:d6:46:f8:1c:
29:9d:2b:f7:75:08:54:e7:9b:e2:00:fa:2a:f7:bd:
c0:d0:57:23:ba:26:f4:e3:0f:23:e6:00:71:4c:d2:
66:fa:59:6a:a6:1c:a0:23:5a:90:44:1d:99:8d:08:
7c:37:2c:12:c0:73:a6:7e:86:55:ff:a1:56:83:c7:
6c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A6:5C:76:D5:BE:67:A9:72:07:FA:0B:F9:2F:20:FA:91:D8:09:D1
X509v3 Authority Key Identifier:
keyid:68:6D:6F:56:95:00:C2:50:70:B6:12:4F:1B:86:F6:09:52:67:7A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aG1vVpUAwlBwthJPG4b2CVJnepM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:49:f8:b5:46:99:73:c8:65:35:b2:4b:6b:76:23:ea:9e:c7:
55:e8:73:17:0a:bd:46:93:c1:79:90:77:b3:96:ff:aa:8e:0c:
5c:e8:54:be:7a:4a:58:fb:c4:df:ba:1f:b1:0c:d6:5f:72:0e:
33:42:59:c9:93:e2:e5:9b:62:24:0f:65:e8:6c:66:a3:0a:98:
fc:43:4c:90:1f:7f:fd:8b:c1:cb:f5:c3:c9:72:c7:3f:77:4b:
b4:11:59:63:fc:81:86:da:41:12:f9:ae:a8:a1:92:8d:01:27:
03:47:f1:fe:fa:e7:b4:c8:1a:5c:a2:0c:21:3c:35:e9:ab:72:
82:28:4e:a5:9d:e5:2e:c3:50:44:33:37:35:c1:14:63:8b:8d:
19:95:3f:ca:7d:83:9c:48:c0:8f:d7:62:27:d0:e8:dd:2b:77:
e3:8e:09:11:4d:8a:4f:a5:43:a3:90:cb:5f:4f:66:10:ae:b1:
a3:25:72:db:0b:ab:be:af:df:4b:7e:19:91:8c:7a:ca:54:5e:
08:3d:b5:e7:d1:6b:8d:0e:70:b7:a1:50:aa:f5:77:40:55:fe:
8c:de:2a:0d:f2:39:4b:43:2d:4d:80:39:e9:f9:f9:69:b8:db:
de:36:54:8e:ab:48:30:63:d3:e4:a3:ac:ea:a5:d1:95:4c:30:
93:47:a9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 12:33:32 2024 by rpki-client on console-fra.rpki-client.org