Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
File: ao7dovIciF--ZyhiGLgxjWrSOJY.mft (raw, json)
Hash identifier: zOeXqzEs8knaOghtrXZg4cv1w1cmX/KpYseyys2HKaY=
Subject key identifier: E3:67:22:59:75:14:5D:6C:E3:48:D0:E0:B3:64:B5:31:6A:6C:E0:62
Authority key identifier: 6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
Certificate issuer: /CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Certificate serial: 0193568B14C81803871F1AF166CA6B52BFF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
Manifest number: 0620
Signing time: Sat 23 Nov 2024 01:02:55 +0000
Manifest this update: Sat 23 Nov 2024 01:02:55 +0000
Manifest next update: Sun 24 Nov 2024 01:02:55 +0000
Files and hashes: 1: KyEfaa89zGfYEOyTQL6wxFwaPsY.roa (hash: NtdMB25MXY5Xo6v6oQaaX0jNkCdbCG2q0Xul3MKaMz8=)
2: ao7dovIciF--ZyhiGLgxjWrSOJY.crl (hash: 4crc2Z/MFzGdnFjDft2khZPdmI3jQoInqLWjAHm8E1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8b:14:c8:18:03:87:1f:1a:f1:66:ca:6b:52:bf:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Validity
Not Before: Nov 23 01:02:55 2024 GMT
Not After : Nov 24 01:02:55 2024 GMT
Subject: CN=e367225975145d6ce348d0e0b364b5316a6ce062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:57:e1:61:6c:fe:8a:4e:48:9a:1a:d7:c7:eb:
bc:8d:d5:75:cb:c9:cd:c6:ee:8f:e2:2b:ee:60:94:
b5:97:57:a6:b9:4c:d7:0c:50:c7:76:9e:30:3a:7f:
9c:af:7c:2b:d9:34:de:67:8e:05:10:0b:e2:e1:3f:
b6:57:62:a5:d0:1b:7a:db:7d:dc:50:7b:c8:9b:1c:
5c:cd:98:a1:06:7f:d1:57:2e:d6:ca:73:87:d9:40:
8b:8b:88:8d:0d:8b:ad:f1:d9:ab:1f:36:f4:5a:ac:
34:74:71:d8:78:d9:04:bf:26:5b:a1:0c:52:3a:df:
eb:51:eb:81:78:f5:93:20:f3:ed:c3:1a:cc:33:84:
e6:4d:3e:2c:8b:d0:46:af:6b:0c:c9:28:f8:bf:28:
35:15:ca:47:63:5f:b3:b7:8d:ef:cf:cf:f5:40:56:
43:97:18:9b:fc:1f:78:15:3f:7f:35:aa:ed:f7:13:
a6:2c:bd:13:7b:67:31:15:35:34:94:b6:e6:49:64:
23:4d:79:60:98:b7:bd:63:6d:70:72:f6:97:4d:60:
38:37:f0:f5:8c:54:0b:23:8d:f1:82:91:9d:49:b3:
df:60:33:32:8d:39:88:9f:ad:ea:8b:c6:6a:64:99:
be:ef:b3:e1:aa:b1:b2:c7:99:fd:cd:90:51:7f:8b:
d4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:67:22:59:75:14:5D:6C:E3:48:D0:E0:B3:64:B5:31:6A:6C:E0:62
X509v3 Authority Key Identifier:
keyid:6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b0:c2:b3:9e:a5:ed:0a:f2:1f:1f:7e:06:38:2b:c3:f3:1d:
13:6d:66:6e:a5:83:42:7e:11:b2:0a:87:cb:39:d8:16:3c:cf:
ee:0b:f5:20:2a:3d:aa:00:d5:4a:db:c6:4c:73:e4:b7:5b:3d:
15:c1:17:0c:35:e6:ea:1a:22:52:50:11:33:b8:85:03:1f:55:
7d:8f:03:cf:7e:42:48:9f:b7:5a:a7:cd:04:65:08:6d:7d:02:
46:eb:d1:6c:8e:a5:7e:ef:33:d8:7d:f4:00:13:9f:c9:f1:40:
10:4e:a2:96:3e:4d:87:d5:49:3a:24:b3:7c:d6:aa:42:04:6d:
d0:89:68:ed:13:89:53:dc:c0:15:df:9a:77:89:20:bb:05:bf:
24:de:8d:47:5c:a7:05:23:f8:6a:42:87:7a:5a:fb:ac:d5:db:
6b:7c:8c:a9:b2:11:bd:ab:12:59:21:da:47:e9:73:b5:6c:63:
69:a0:e6:73:63:15:4a:5d:fd:5b:e4:c4:d0:10:fe:2b:0e:1c:
79:ae:18:39:21:a9:2c:98:e4:1f:9b:e8:3c:3f:dd:cf:79:8c:
07:96:3a:59:1a:bf:6f:11:16:c0:fc:cc:ff:29:18:e1:19:01:
f8:4b:f3:1b:b9:a0:ea:4a:cd:90:ca:df:40:be:7d:55:72:55:
b0:0a:cc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:39:21 2024 by rpki-client on console-ams.rpki-client.org