Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
File: aNJK3cw9W3egmakHEiJSpHyPYxA.mft (raw, json)
Hash identifier: UYwi+DJRLdNvwIomxBMV43dcZfYSr/LMTsIFMB6oCdY=
Subject key identifier: 18:F4:B1:D6:7E:04:94:D0:20:54:29:6E:8F:34:E3:99:A5:F1:54:1E
Authority key identifier: 68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
Certificate issuer: /CN=68d24addcc3d5b77a099a907122252a47c8f6310
Certificate serial: 019356F6AEA961427C7897422F9D332CD120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
Manifest number: 1067
Signing time: Sat 23 Nov 2024 03:00:27 +0000
Manifest this update: Sat 23 Nov 2024 03:00:27 +0000
Manifest next update: Sun 24 Nov 2024 03:00:27 +0000
Files and hashes: 1: 6KxSqbo_KkAU0xv_L_S2IEjvLyc.roa (hash: 1mN6Ib/0NJlidB+nUIUQHfBcipiDO+6b4TPQgV5mGIo=)
2: Nv57qBE76yx4x6y49GkUjLAUC6U.roa (hash: QJMleDyq1SsgGPqIGcfalA2l/GYK2dzurHR4C0+lI9M=)
3: aNJK3cw9W3egmakHEiJSpHyPYxA.crl (hash: ifCtYYciPnu+3x9HgZc3z9uEL36RDDuRKJ5YsihYfS4=)
4: cxsP7pSe5PfizmR0nfg9cH9gjbc.roa (hash: Q9mh3CX1NH4NAYVGTB8F/JklfT4cutOjdzxU1pYeJmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f6:ae:a9:61:42:7c:78:97:42:2f:9d:33:2c:d1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d24addcc3d5b77a099a907122252a47c8f6310
Validity
Not Before: Nov 23 03:00:27 2024 GMT
Not After : Nov 24 03:00:27 2024 GMT
Subject: CN=18f4b1d67e0494d02054296e8f34e399a5f1541e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6f:3a:b0:8c:00:87:5f:d2:ef:53:17:30:a2:
a5:8e:65:7b:85:68:11:68:b8:84:65:d2:12:a5:c1:
eb:1f:dd:9f:73:26:5f:89:c0:43:41:a9:f2:06:95:
f8:79:72:c0:b5:a2:0f:b6:be:c1:82:ca:97:cb:f4:
3e:15:71:3b:80:02:3f:61:19:d5:7a:e3:43:02:83:
98:ec:34:36:e3:4e:be:c1:e6:61:3c:db:07:f6:a8:
52:66:d9:51:45:e3:4d:96:c6:85:63:55:ab:10:d2:
9a:6b:64:4f:de:52:b8:fc:c1:de:2a:42:6f:d2:2d:
c0:a4:4d:33:71:2b:71:16:21:34:d6:64:27:c6:7a:
4e:18:4f:75:46:ab:b8:6d:4b:7d:00:ad:56:8b:8f:
1c:09:80:77:e9:dd:26:d8:36:7d:35:96:3f:cb:50:
b4:d6:38:4f:d2:4b:4b:5f:60:39:ed:22:fb:bc:f3:
d3:f1:37:da:3b:c1:59:a4:ce:59:fd:32:6d:7a:ac:
70:0d:a2:5c:16:d0:e3:6e:d9:ba:b4:4b:c5:31:80:
a5:e9:b0:63:c1:3a:99:ed:f1:3e:3b:76:5c:a6:1d:
3e:68:7d:85:c7:bf:26:5a:23:5d:75:e7:6a:cc:12:
64:ae:28:66:bd:f0:80:76:71:d5:f2:dc:65:6f:8d:
dd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F4:B1:D6:7E:04:94:D0:20:54:29:6E:8F:34:E3:99:A5:F1:54:1E
X509v3 Authority Key Identifier:
keyid:68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:dc:82:94:f6:b6:d7:d8:97:53:2f:a8:c5:7a:81:2c:04:48:
29:8b:e7:50:64:50:36:bf:f2:e7:35:9b:c3:f6:9d:b5:c5:db:
59:dd:15:1a:2c:c7:ab:02:55:8c:ac:46:a3:a1:ef:56:0f:28:
bd:96:39:f2:b4:cc:29:03:e1:00:70:a0:71:fb:5c:7c:a7:79:
e1:93:8d:0d:31:65:d8:20:c5:45:3b:2d:6d:4c:2d:13:71:07:
86:8d:7f:1f:87:46:64:43:1d:91:6f:4d:99:36:28:60:99:37:
e5:ed:66:ba:0f:43:60:9f:8f:f8:4b:3e:a4:14:4c:58:44:0a:
79:53:9e:da:5e:08:1a:8e:f6:dc:bb:3d:82:85:4a:c5:1c:56:
b9:d3:b2:e7:e0:87:de:e0:b0:2d:8a:a9:2d:ef:b6:b9:68:0f:
d1:80:bc:7f:68:1e:a5:0b:3a:be:5b:8b:30:4a:52:50:8d:91:
c5:44:dd:64:94:70:5f:f9:26:5f:c0:62:f1:2e:4c:40:f8:c8:
12:50:ec:ea:3c:38:b5:f7:6f:a7:ef:b6:2f:d3:5f:71:bd:eb:
22:cf:b9:b4:66:2c:15:2f:7e:71:9e:1b:f1:37:f6:96:c2:f9:
0d:83:85:9c:fc:6d:a4:a9:05:7a:22:49:f8:51:af:7d:45:39:
55:74:14:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:12:03 2024 by rpki-client on console-fra.rpki-client.org