Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft
File: 1AYg6l2vilSq6hfyy57N8114UwY.mft (raw, json)
Hash identifier: UdGIjEp3ngDyBsSNnR6wwz8W/jLZU8rgT3OTSqMu+G8=
Subject key identifier: 4A:6B:FC:5B:6E:11:5E:60:48:3B:20:48:FC:0F:E3:E4:EE:2B:FC:66
Authority key identifier: D4:06:20:EA:5D:AF:8A:54:AA:EA:17:F2:CB:9E:CD:F3:5D:78:53:06
Certificate issuer: /CN=d40620ea5daf8a54aaea17f2cb9ecdf35d785306
Certificate serial: 0191FAEDDA8CCE5713654DC9B13C57DC2C2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AYg6l2vilSq6hfyy57N8114UwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft
Manifest number: 0D95
Signing time: Mon 16 Sep 2024 13:02:57 +0000
Manifest this update: Mon 16 Sep 2024 13:02:57 +0000
Manifest next update: Tue 17 Sep 2024 13:02:57 +0000
Files and hashes: 1: 1AYg6l2vilSq6hfyy57N8114UwY.crl (hash: ukItyyA9rRrj/kjjmiVFMrJIEhr7MqnA3BhfjkikjiU=)
2: 5BCqGihcYav6owe_uTJyxXL4UXQ.roa (hash: 8BUPypEDVex7HePz4UM70w0XUU7zeFNVYqgjx6LtV1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1AYg6l2vilSq6hfyy57N8114UwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Sep 2024 13:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fa:ed:da:8c:ce:57:13:65:4d:c9:b1:3c:57:dc:2c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d40620ea5daf8a54aaea17f2cb9ecdf35d785306
Validity
Not Before: Sep 16 13:02:57 2024 GMT
Not After : Sep 17 13:02:57 2024 GMT
Subject: CN=4a6bfc5b6e115e60483b2048fc0fe3e4ee2bfc66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6f:1d:d8:5c:a9:c2:53:09:d9:2c:40:fa:4b:
d6:d4:2b:a5:de:07:dc:0f:12:b9:ac:b6:53:6f:a3:
f8:f8:76:55:69:df:06:9e:af:78:96:ba:83:f5:ca:
36:f7:5a:8b:eb:e5:c3:3f:a5:ef:75:4e:5d:b5:5c:
03:66:4a:4b:79:ca:58:3a:cd:39:05:61:d3:21:c7:
a0:96:f5:a3:ab:7c:6b:16:a5:ad:ba:ba:70:e1:26:
82:fc:a0:70:43:54:ff:73:ca:b1:37:48:43:e9:a9:
80:73:de:36:49:c0:cd:99:7e:50:cc:f1:e3:6c:7f:
bd:06:da:86:c0:f8:5a:97:54:27:a3:e6:bb:31:3f:
cb:24:f9:6f:83:6a:78:05:a6:57:ea:77:ab:1d:67:
ea:cb:86:55:58:ef:4c:86:30:80:41:f2:fe:e2:e6:
f8:b8:bc:e2:1e:c9:14:8d:ef:aa:13:8a:ba:4e:c9:
69:05:0a:27:2a:13:3e:3b:04:cc:5c:4a:ac:05:70:
b9:c3:2d:b9:c1:25:8c:43:e9:e4:d6:e3:f2:64:a6:
55:d1:cd:f2:75:87:af:f5:8f:b3:17:ba:f7:82:bc:
a8:d0:8c:ed:fd:22:64:55:59:34:57:64:6e:be:7d:
e7:08:c6:1e:af:86:08:78:16:09:6a:02:bb:ab:26:
c9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6B:FC:5B:6E:11:5E:60:48:3B:20:48:FC:0F:E3:E4:EE:2B:FC:66
X509v3 Authority Key Identifier:
keyid:D4:06:20:EA:5D:AF:8A:54:AA:EA:17:F2:CB:9E:CD:F3:5D:78:53:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AYg6l2vilSq6hfyy57N8114UwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d0:10:60:c0:20:1c:bc:80:19:b9:67:68:2b:01:3d:05:2b:
f9:95:19:29:8d:df:7c:5e:df:f0:e5:29:24:04:64:7c:a5:b0:
5a:0b:26:19:0d:fa:3e:98:fb:b2:17:80:0b:6d:85:a5:dd:56:
cd:97:79:94:9b:ef:84:8e:cc:6c:a2:b8:03:c2:ea:4a:52:05:
04:f0:bf:b5:be:1f:71:47:f3:c2:d6:47:49:ac:5c:11:6e:bb:
e7:14:88:e6:cf:f4:2c:d6:98:5b:0e:33:12:04:2e:53:5c:d1:
e4:e5:1a:6f:76:8a:a2:96:b8:a8:46:a6:a4:12:b0:01:30:75:
fd:66:4d:61:ef:80:20:14:83:ff:d1:8e:3d:89:91:59:fc:42:
a9:21:4f:cd:1e:70:4b:3d:b5:7b:90:e3:12:98:42:0a:be:7c:
9e:61:f8:4d:86:f2:ae:a5:43:00:bf:80:f1:2f:08:d8:c7:0c:
9d:36:d1:09:73:87:63:2c:14:2d:07:3d:42:79:cd:26:65:86:
09:93:60:04:25:aa:17:9e:0e:5b:1c:c1:94:9a:92:18:a9:8e:
c8:1c:13:ab:b2:b9:44:3b:64:04:38:f7:25:22:61:1f:9a:20:
05:f6:40:90:61:d0:6f:5c:f0:09:1c:d1:e1:df:13:40:55:27:
09:77:8d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:14:12 2024 by rpki-client on console-fra.rpki-client.org