Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
File: AJEXecdn0jZOhvTifvjF_puwEJA.mft (raw, json)
Hash identifier: DwaIo9oLp23mEfhVKd6r9uzFw38ayONDOW8BjondAw0=
Subject key identifier: 16:3D:01:4D:55:E6:CE:25:FD:9F:F3:AE:16:CF:DE:1F:56:49:11:28
Authority key identifier: 00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
Certificate issuer: /CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Certificate serial: 018F3BF9BA728973A83E1364FA753EEC3699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
Manifest number: 1150
Signing time: Fri 03 May 2024 01:02:52 +0000
Manifest this update: Fri 03 May 2024 01:02:52 +0000
Manifest next update: Sat 04 May 2024 01:02:52 +0000
Files and hashes: 1: AJEXecdn0jZOhvTifvjF_puwEJA.crl (hash: /avr5UFdrRM89PmZ+mTI2Yt5yaWGCBln/ukBNQtNPi8=)
2: DM2KA5zRfnaPEr4Qr_TrW7YUr4M.roa (hash: xb00kHYFD5++nkNBOgV3mJFsQZZCX6UZj986u7+h618=)
3: fTQSeWpy_cUD4p9b03SBGE2LHU0.roa (hash: d0dNP0mjO3Ry/ESYOsrbJDL389MuzHyvb7EYb030W/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 01:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3b:f9:ba:72:89:73:a8:3e:13:64:fa:75:3e:ec:36:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Validity
Not Before: May 3 01:02:52 2024 GMT
Not After : May 4 01:02:52 2024 GMT
Subject: CN=163d014d55e6ce25fd9ff3ae16cfde1f56491128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8d:91:9d:db:e1:45:f1:49:90:05:96:c5:1c:
8e:c9:08:02:12:15:af:05:90:d3:e0:a9:d2:9b:c1:
ea:44:ee:75:43:01:24:fc:60:fc:fa:b6:3f:a0:9e:
dd:49:62:f6:09:4f:15:c7:9a:42:24:09:b9:15:d2:
b7:96:af:a5:9a:1d:1c:74:ac:b5:92:99:e2:ad:20:
71:a7:97:63:60:23:9d:a3:e8:8b:c6:a6:b4:c8:b5:
e9:9e:7a:e9:c1:2b:23:19:74:df:f9:c2:b3:1c:c3:
81:ab:28:1b:3f:b6:c5:5e:8a:11:e1:fb:7e:ba:fc:
ec:86:5c:1a:02:54:93:76:0e:58:6d:a7:da:5f:af:
e8:3a:b7:9c:54:a8:c6:a5:76:63:e6:97:b6:ed:dc:
c5:cf:27:40:a2:37:ab:c8:9d:4a:de:8c:52:16:3f:
35:24:40:37:6d:1b:14:aa:d8:41:12:6d:f0:85:90:
b8:5f:0a:95:72:63:9e:c9:44:f0:5a:3c:1f:a6:92:
20:20:8f:15:45:e1:6d:c4:4f:f8:7e:29:cc:39:9d:
08:71:47:f7:8b:10:db:9e:da:35:45:86:6c:98:e5:
94:a3:c8:17:1e:67:d2:a4:52:54:b3:7c:a9:a6:26:
c0:01:cb:5e:c5:fe:fb:ce:b8:87:81:b6:f7:7b:9b:
19:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3D:01:4D:55:E6:CE:25:FD:9F:F3:AE:16:CF:DE:1F:56:49:11:28
X509v3 Authority Key Identifier:
keyid:00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d3:fd:bd:6b:b1:96:96:99:a8:66:f4:09:fe:2e:b5:c0:bf:
f8:ef:8e:5b:84:c2:6e:8b:20:80:ae:0b:e4:3c:55:0d:93:a4:
bf:c5:b2:05:0e:31:06:d4:74:0c:e9:19:1c:ed:56:7d:71:38:
78:bf:22:49:db:7e:db:ee:7e:58:0d:38:03:6d:92:48:65:87:
78:a3:a9:cb:94:3c:46:ee:22:b7:88:20:d3:df:43:11:26:74:
c8:c0:cf:b8:87:c0:ff:7a:58:6e:47:ea:95:84:a1:93:9e:24:
76:db:9e:25:82:21:b2:3b:80:33:c9:34:98:cd:f1:7a:47:15:
d8:16:dd:b7:d6:70:ce:44:03:fa:94:c0:99:b7:7f:6b:00:41:
e4:00:c1:eb:87:30:58:54:88:52:6e:d2:c0:e0:e2:8e:a0:9a:
f8:5e:25:15:b5:91:d0:96:5e:4a:2d:c3:87:76:71:09:48:34:
f3:aa:2a:e1:c5:46:92:f0:7d:04:20:18:ec:dd:7a:54:e9:9f:
61:b7:9a:c6:87:3b:fc:b5:7a:77:7c:4a:0c:4b:30:56:5a:3c:
a0:38:f2:cf:33:a5:4b:9a:6a:04:bf:31:3e:fd:6b:1b:ee:0c:
33:ef:b6:b2:60:77:ba:42:de:b1:ee:1f:d4:b1:69:66:de:51:
41:a1:3e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:22:18 2024 by rpki-client on console-fra.rpki-client.org