Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
File: aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft (raw, json)
Hash identifier: EdKiEvbdjdSxYjnZDrzTTfRh6vuqSKyGjuxquwm8QPY=
Subject key identifier: 87:27:D8:C6:C8:A9:BA:E6:E4:6D:9D:CB:C3:38:78:50:39:5C:0C:3B
Authority key identifier: 69:62:BB:3E:9D:35:B5:AF:9D:CA:08:EA:7C:CE:FF:43:51:9A:4A:6A
Certificate issuer: /CN=6962bb3e9d35b5af9dca08ea7cceff43519a4a6a
Certificate serial: 0193568968E9CB2E65E349FCD2B0C3969A3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
Manifest number: 0A2A
Signing time: Sat 23 Nov 2024 01:01:05 +0000
Manifest this update: Sat 23 Nov 2024 01:01:05 +0000
Manifest next update: Sun 24 Nov 2024 01:01:05 +0000
Files and hashes: 1: aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl (hash: ysF4eAoPy+BT1GOxi2zIc8ihVmIkdnYcQJdK5O6kbUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:68:e9:cb:2e:65:e3:49:fc:d2:b0:c3:96:9a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6962bb3e9d35b5af9dca08ea7cceff43519a4a6a
Validity
Not Before: Nov 23 01:01:05 2024 GMT
Not After : Nov 24 01:01:05 2024 GMT
Subject: CN=8727d8c6c8a9bae6e46d9dcbc3387850395c0c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2f:7c:42:1b:76:3f:23:0c:61:b2:cf:a2:05:
b4:ac:c4:39:4e:b4:c1:76:95:13:b9:44:12:66:c1:
96:cc:01:d3:e8:b7:49:de:f7:62:64:bc:5e:f3:09:
35:01:65:de:c1:47:a1:ad:08:4f:11:22:a2:54:fc:
7c:e0:54:35:3b:48:26:8b:07:b3:ef:bc:94:cd:44:
46:e1:14:26:69:a7:f1:f8:32:94:ec:56:93:24:54:
34:95:94:4d:45:82:34:73:dd:82:12:f8:31:b7:31:
84:ab:0d:d2:70:af:ca:18:65:1c:f7:9e:16:da:15:
56:0b:dc:2c:58:27:70:73:b2:c4:2d:ca:be:22:12:
92:a9:84:85:39:c3:19:c8:e9:40:8c:98:41:9a:b2:
14:53:2e:df:8d:8f:ad:7f:2d:14:a3:9b:d9:3b:94:
33:87:5d:58:8b:65:73:62:71:23:49:c2:52:65:1c:
1c:e7:06:1d:ee:af:52:4c:de:ec:2c:bb:33:ad:26:
40:8e:ca:58:21:ae:fa:28:e0:bb:fa:78:5f:fc:5e:
e9:e2:3a:4a:5f:08:76:17:10:76:5b:62:9c:d7:99:
fa:44:7c:19:f3:3e:f9:3a:3d:dd:d8:5a:2c:35:d4:
39:17:31:2b:59:57:79:d4:52:35:42:85:76:b8:3d:
36:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:27:D8:C6:C8:A9:BA:E6:E4:6D:9D:CB:C3:38:78:50:39:5C:0C:3B
X509v3 Authority Key Identifier:
keyid:69:62:BB:3E:9D:35:B5:AF:9D:CA:08:EA:7C:CE:FF:43:51:9A:4A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:8c:e7:f4:9c:c2:d3:99:02:4a:43:dc:96:c3:c2:69:4b:0e:
bc:7a:f8:d3:4d:d0:6c:b9:c4:6c:9f:70:71:48:8f:7c:b6:c6:
a6:a6:7c:1d:4a:82:c7:52:a3:3a:63:7d:bf:e1:1c:85:47:e5:
f0:a1:54:04:e9:93:c7:14:f2:03:21:76:61:16:13:88:c5:e7:
5d:b8:20:c7:77:3f:95:34:d8:00:dc:a3:13:53:fc:6b:6c:bb:
69:8f:3c:b8:78:8c:db:1a:16:b3:e7:ab:36:47:cd:72:7b:15:
ae:6d:4b:fd:13:56:4c:95:c0:96:e5:51:ea:5c:d6:28:36:d2:
e9:e0:78:6a:c5:86:4c:2f:66:1e:51:3b:4f:ce:85:10:70:31:
4b:f6:32:f5:b2:4e:8b:93:11:0b:0d:be:3a:0f:35:df:72:3e:
7e:54:3d:8d:40:bd:cc:1c:1b:d6:61:cd:34:6b:d8:f3:2b:2f:
da:30:7a:ef:2d:30:e0:ae:ac:62:34:5e:28:3f:27:99:b6:ca:
03:72:f3:1e:c6:fa:4f:4c:ac:c2:23:57:a4:26:74:a9:ad:b7:
9f:9a:57:6d:bd:ab:95:88:13:df:c5:d0:db:d8:b2:65:18:92:
a2:b8:a9:4d:c5:cc:9b:e8:5c:ab:eb:38:00:fa:7f:9c:a5:79:
50:f6:06:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiWjpyy5l40n80rDDlpo7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NjJiYjNlOWQzNWI1YWY5ZGNhMDhlYTdjY2VmZjQzNTE5
YTRhNmEwHhcNMjQxMTIzMDEwMTA1WhcNMjQxMTI0MDEwMTA1WjAzMTEwLwYDVQQD
Eyg4NzI3ZDhjNmM4YTliYWU2ZTQ2ZDlkY2JjMzM4Nzg1MDM5NWMwYzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0C98Qht2PyMMYbLPogW0rMQ5TrTB
dpUTuUQSZsGWzAHT6LdJ3vdiZLxe8wk1AWXewUehrQhPESKiVPx84FQ1O0gmiwez
77yUzURG4RQmaafx+DKU7FaTJFQ0lZRNRYI0c92CEvgxtzGEqw3ScK/KGGUc954W
2hVWC9wsWCdwc7LELcq+IhKSqYSFOcMZyOlAjJhBmrIUUy7fjY+tfy0Uo5vZO5Qz
h11Yi2VzYnEjScJSZRwc5wYd7q9STN7sLLszrSZAjspYIa76KOC7+nhf/F7p4jpK
Xwh2FxB2W2Kc15n6RHwZ8z75Oj3d2FosNdQ5FzErWVd51FI1QoV2uD02TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIcn2MbIqbrm5G2dy8M4eFA5XAw7MB8GA1UdIwQY
MBaAFGliuz6dNbWvncoI6nzO/0NRmkpqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVdLN1BwMDF0YS1keWdqcWZNN19RMUdhU21vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yZWRkMzctODE0MC00OGM1LWJlYWYt
NTEzNmYyNjIyNjQxLzEvYVdLN1BwMDF0YS1keWdqcWZNN19RMUdhU21vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8yZWRkMzctODE0MC00OGM1LWJlYWYtNTEzNmYyNjIyNjQx
LzEvYVdLN1BwMDF0YS1keWdqcWZNN19RMUdhU21vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf4zn9JzC
05kCSkPclsPCaUsOvHr4003QbLnEbJ9wcUiPfLbGpqZ8HUqCx1KjOmN9v+EchUfl
8KFUBOmTxxTyAyF2YRYTiMXnXbggx3c/lTTYANyjE1P8a2y7aY88uHiM2xoWs+er
NkfNcnsVrm1L/RNWTJXAluVR6lzWKDbS6eB4asWGTC9mHlE7T86FEHAxS/Yy9bJO
i5MRCw2+Og8133I+flQ9jUC9zBwb1mHNNGvY8ysv2jB67y0w4K6sYjReKD8nmbbK
A3LzHsb6T0yswiNXpCZ0qa23n5pXbb2rlYgT38XQ29iyZRiSoripTcXMm+hcq+s4
APp/nKV5UPYGqQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:35:58 2024 by rpki-client on console-ams.rpki-client.org