Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
File: ap1tJuVsEy3bvABaxCT7U2rLoCA.mft (raw, json)
Hash identifier: +4U3geCNFzRhp8Ij+4fHHG5RIyeX/UbYYKHQ28IuywU=
Subject key identifier: AB:25:9F:F7:74:F3:B9:17:06:10:AE:4F:C4:FB:66:91:96:7A:0A:DE
Authority key identifier: 6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20
Certificate issuer: /CN=6a9d6d26e56c132ddbbc005ac424fb536acba020
Certificate serial: 01935350B98D7DB8D6BEC265E11737A9ADBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
Manifest number: 1300
Signing time: Fri 22 Nov 2024 10:00:19 +0000
Manifest this update: Fri 22 Nov 2024 10:00:19 +0000
Manifest next update: Sat 23 Nov 2024 10:00:19 +0000
Files and hashes: 1: ap1tJuVsEy3bvABaxCT7U2rLoCA.crl (hash: aFrpRE1x8iz+0RRv4Ot3qRXlYTpYFuDUY5+7R22lUEg=)
2: d83ici4op6wAIPdioL0RZloWJq0.roa (hash: p+Fuso6xM2OOGZii2AU2+50XZVj7kw0nNIGINPK3MsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:50:b9:8d:7d:b8:d6:be:c2:65:e1:17:37:a9:ad:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9d6d26e56c132ddbbc005ac424fb536acba020
Validity
Not Before: Nov 22 10:00:19 2024 GMT
Not After : Nov 23 10:00:19 2024 GMT
Subject: CN=ab259ff774f3b9170610ae4fc4fb6691967a0ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:04:3e:9a:b2:17:7a:1e:2c:85:03:bb:bd:c8:
ee:0b:4b:0e:98:93:97:77:6b:8e:a5:3d:81:29:e6:
b7:8b:28:ed:f5:cd:6e:f6:50:da:35:6a:28:17:8a:
93:99:ba:d0:49:45:65:68:44:74:dd:60:1c:87:3c:
a9:b9:69:26:ff:1a:97:76:1a:fb:02:f3:05:fb:85:
53:82:87:d2:97:70:cb:a6:b3:91:f7:14:c8:f8:9a:
d5:2e:99:3a:43:f2:c3:61:9a:f5:9e:1a:fe:c3:d9:
0f:47:10:e5:15:14:04:e6:37:94:58:d3:8e:14:ce:
5b:a6:c8:2c:71:9f:1c:ea:fa:3a:fd:c7:bf:83:14:
17:ef:93:9e:02:a8:db:d0:9a:6a:77:03:6f:ff:cb:
b8:51:b4:64:41:ee:6b:e7:69:43:03:5e:f6:72:5c:
6d:41:48:01:be:1a:a8:07:88:19:42:f7:34:85:85:
c6:11:67:3d:46:ca:14:31:86:e1:ed:d2:13:81:e5:
08:31:70:23:f4:8a:50:81:9e:60:d3:d2:bf:32:64:
76:ef:e3:7c:ea:54:6b:32:7f:95:60:be:bf:21:be:
bf:31:4e:5e:9f:32:23:15:c6:70:3f:95:85:4a:38:
b9:bf:16:50:ad:65:f9:ae:d6:95:fb:f6:51:c6:13:
68:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:25:9F:F7:74:F3:B9:17:06:10:AE:4F:C4:FB:66:91:96:7A:0A:DE
X509v3 Authority Key Identifier:
keyid:6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:aa:0d:b1:a1:b1:8c:f0:d6:1c:91:d9:58:66:14:f2:65:24:
4a:d2:3b:5e:97:bc:99:f7:ee:e7:3e:d5:0d:25:ce:0f:a3:36:
69:53:e7:7e:76:ef:c3:7a:1b:91:ba:39:a3:f7:cc:b1:56:0c:
12:ab:d9:9e:3e:d8:55:07:d2:72:f6:c9:19:3d:88:a1:63:8c:
bc:89:fc:4b:32:bd:34:9e:11:e9:7f:aa:c7:0f:e5:dc:54:e9:
b9:dd:fe:fa:4e:f0:be:32:35:27:19:f6:a1:66:d9:2a:79:9c:
cb:a3:61:37:0a:1e:6f:23:d7:64:27:5e:77:04:46:2d:75:13:
fa:d0:81:e4:ca:f8:3f:94:4c:e9:0a:57:1b:1b:6a:68:ab:f3:
93:20:75:5f:c4:f0:84:98:0a:72:98:f7:0f:22:f7:73:fb:f6:
fd:d7:8c:de:e7:98:7f:90:e1:95:9e:5e:d1:a9:7e:11:68:e2:
84:cd:cd:f7:97:ea:4c:50:94:95:29:1d:c7:30:2d:cf:12:e5:
b0:19:c1:4f:9a:50:ec:f0:b4:80:e1:41:c5:70:85:a9:29:8d:
01:ca:00:3b:f7:35:e2:44:7f:81:42:df:f2:42:b5:ed:b0:ef:
a8:e6:19:dc:01:49:99:56:56:f8:64:e2:27:66:51:af:7e:62:
04:d9:82:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:42:23 2024 by rpki-client on console-ams.rpki-client.org