Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
File: aWIqGq33nnEdHn5DGfcywLLagB4.mft (raw, json)
Hash identifier: csvJMBgr5cd1dC/QNdbDtYlpyEYoRjY+ugjjsAj9d2w=
Subject key identifier: 4A:C6:AB:F7:E0:55:DD:86:F1:76:33:4B:16:DB:63:55:B7:EB:A1:AD
Authority key identifier: 69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
Certificate issuer: /CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Certificate serial: 019368C651C10AF95CBF7F5E233FC5C52087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
Manifest number: 137D
Signing time: Tue 26 Nov 2024 14:00:47 +0000
Manifest this update: Tue 26 Nov 2024 14:00:47 +0000
Manifest next update: Wed 27 Nov 2024 14:00:47 +0000
Files and hashes: 1: 5EjXtK4kInhX6cSkAisknRL7pr8.roa (hash: MJYMOiOtCMF/gF7eJdafA2W7Dv+DmDMv3qv6mAeLR80=)
2: aWIqGq33nnEdHn5DGfcywLLagB4.crl (hash: TpGi/oJ23R5vMtYD/JHivZG+syxratEs3/v0+cvcOA8=)
3: sUwqIrqmDjcIrnp-1C1V_CSz1cI.roa (hash: torKC/egeyFRSHmM3Mr6xs2Mz9WDw9wYflXknFKCSCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:c6:51:c1:0a:f9:5c:bf:7f:5e:23:3f:c5:c5:20:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Validity
Not Before: Nov 26 14:00:47 2024 GMT
Not After : Nov 27 14:00:47 2024 GMT
Subject: CN=4ac6abf7e055dd86f176334b16db6355b7eba1ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e1:30:8b:5c:a8:87:44:7d:c0:2f:ff:3b:d2:
e4:f3:38:60:61:0e:66:47:7c:8d:66:29:fc:2c:51:
2e:7e:58:ef:97:15:5c:fb:23:e7:06:b3:ae:b1:ca:
12:6e:2b:83:48:41:b5:18:b9:7e:d1:96:d9:f9:32:
5a:55:bf:fd:f2:e8:7f:09:e3:38:98:32:0e:53:15:
91:e3:f6:2a:51:b2:cb:72:41:c2:dc:77:e1:1a:39:
d4:ff:15:d0:0a:e5:89:65:97:35:07:ae:b4:49:38:
a3:47:63:46:03:de:19:5d:ca:09:71:1e:c2:a8:96:
19:7b:2b:db:17:66:d7:b7:7a:1f:d1:20:1c:96:7c:
4d:6c:81:e7:4f:c1:39:b0:c2:39:26:a2:60:1c:fa:
1c:d8:b3:92:e8:f9:34:25:31:69:b5:ae:91:82:6d:
fd:86:50:11:3a:9f:23:fd:2b:5b:bf:9a:f8:65:a8:
8f:36:ce:94:f7:fe:08:8b:07:aa:48:e2:b6:3b:ef:
f2:e2:af:03:56:3f:7d:29:74:bf:e1:38:9f:46:37:
78:2d:4b:74:e1:a0:ba:cd:c3:73:9d:e0:e1:eb:f1:
6f:95:64:0e:8c:81:97:54:eb:b8:67:04:8c:8b:80:
08:b5:3b:55:fe:1e:f3:5f:89:9e:60:76:02:80:76:
e0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C6:AB:F7:E0:55:DD:86:F1:76:33:4B:16:DB:63:55:B7:EB:A1:AD
X509v3 Authority Key Identifier:
keyid:69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:3f:d4:27:27:45:8a:f9:36:b1:0a:47:da:74:af:bc:f9:ea:
24:8e:d2:71:51:99:fa:fc:ae:e2:6f:43:8a:7d:43:fc:60:ef:
96:6a:1e:ca:b2:ca:ce:11:ff:ed:84:c3:4a:01:b6:d8:de:85:
23:47:7b:fc:9f:4f:5a:f7:d0:19:cf:2f:6c:43:19:cc:49:ac:
23:f2:f2:fa:a4:4c:f7:74:81:84:57:4f:e2:a1:a2:8e:3b:6c:
dd:72:03:05:39:3a:0b:de:58:ce:f0:87:a0:61:ad:04:1e:14:
69:d1:49:18:65:7b:b8:31:97:38:1b:06:a7:e6:ad:8b:80:29:
1b:54:f5:e7:82:9d:21:8b:c9:d4:6c:ca:02:96:17:98:29:4a:
cb:5c:93:74:66:fe:88:8b:b5:e6:fe:86:f0:89:92:8d:88:f8:
79:76:78:5a:89:87:cd:d0:ef:78:5f:80:6d:13:1d:b0:cc:58:
e0:bd:55:6a:71:0f:df:db:06:4a:97:2c:0d:38:15:d3:b9:5b:
4c:a6:9e:81:ac:33:16:6b:63:df:d8:44:76:e9:19:02:5c:ba:
fc:86:ce:cc:18:ef:b1:73:86:f9:4a:2a:5e:77:c3:aa:96:1b:
d6:f8:4e:27:81:a5:e9:e2:87:c9:f9:7a:5c:08:de:41:d3:75:
ba:bb:3b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 22:11:24 2024 by rpki-client on console-ams.rpki-client.org