Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft
File: aaEl4pJtOayGmYIrxXplgPX1F-k.mft (raw, json)
Hash identifier: oCVS7z1wiSQwXrB6YJoJKq9mmwVZUfajvBb8kRb+e30=
Subject key identifier: 5E:F0:B9:EB:43:42:E8:82:3F:30:C3:C9:71:ED:98:65:4E:81:37:2D
Authority key identifier: 69:A1:25:E2:92:6D:39:AC:86:99:82:2B:C5:7A:65:80:F5:F5:17:E9
Certificate issuer: /CN=69a125e2926d39ac8699822bc57a6580f5f517e9
Certificate serial: 019368FCBDC4FB345B243B2B56A01156B9FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaEl4pJtOayGmYIrxXplgPX1F-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft
Manifest number: 0CA5
Signing time: Tue 26 Nov 2024 15:00:14 +0000
Manifest this update: Tue 26 Nov 2024 15:00:14 +0000
Manifest next update: Wed 27 Nov 2024 15:00:14 +0000
Files and hashes: 1: 97a0_QOV2ptgZASjwMLnpTUxYts.roa (hash: 0YB6BLWDN6ScupxazT2I1AtY+Zzf0wX2olnpNa/Kdvk=)
2: aaEl4pJtOayGmYIrxXplgPX1F-k.crl (hash: FogKFJC0h+mwFfc3YBZIjI4uhAE0JvMu1Oe0M/awL7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaEl4pJtOayGmYIrxXplgPX1F-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:fc:bd:c4:fb:34:5b:24:3b:2b:56:a0:11:56:b9:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a125e2926d39ac8699822bc57a6580f5f517e9
Validity
Not Before: Nov 26 15:00:14 2024 GMT
Not After : Nov 27 15:00:14 2024 GMT
Subject: CN=5ef0b9eb4342e8823f30c3c971ed98654e81372d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ae:27:28:bd:4a:9d:42:1c:96:7b:85:01:1f:
a9:38:38:4a:86:99:5d:27:1a:37:12:0c:66:cf:85:
cf:71:3c:a3:70:b9:2f:bf:22:62:52:50:00:56:5f:
72:dc:57:35:e1:b3:d2:dd:5e:17:84:b0:a9:1f:ca:
23:b4:29:e5:67:63:f4:95:56:c5:dd:a6:37:bd:3f:
2b:1a:1e:5d:9f:92:41:67:89:74:a0:9c:a8:90:1b:
79:18:31:f0:b9:45:0f:18:a4:d5:62:ad:bb:0f:74:
b6:d2:be:55:60:30:38:4c:90:90:1b:3c:f2:cb:8e:
da:1d:92:40:8d:94:12:80:4d:5f:4f:fe:10:36:83:
7a:31:21:d6:f4:69:d3:77:6d:7d:a8:ee:2f:49:c9:
f6:78:ac:c2:3b:53:ef:7a:11:d1:bf:06:0b:6c:eb:
ae:19:33:15:ae:95:e5:af:91:4e:54:37:35:98:d8:
39:f3:ee:3f:2a:c3:b0:79:ec:eb:4c:8e:ef:17:46:
bb:a9:6c:24:e1:d9:3e:6b:bb:65:b4:ab:80:97:b8:
dc:90:42:7c:bc:b4:db:5d:88:d0:11:7e:af:3c:f6:
e5:bb:bd:2e:43:45:9f:77:b6:67:34:0e:ba:5e:f3:
38:a1:61:34:fd:eb:43:79:5b:50:64:c3:a1:0a:ee:
b8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F0:B9:EB:43:42:E8:82:3F:30:C3:C9:71:ED:98:65:4E:81:37:2D
X509v3 Authority Key Identifier:
keyid:69:A1:25:E2:92:6D:39:AC:86:99:82:2B:C5:7A:65:80:F5:F5:17:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaEl4pJtOayGmYIrxXplgPX1F-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9f:86:2f:6a:c6:ba:bd:aa:c0:95:5f:ae:99:02:99:d0:cb:
25:56:32:98:ef:c3:96:0b:a8:0a:a4:79:c6:0c:a7:2c:70:b8:
1f:e7:52:95:79:77:c7:d1:63:b1:cf:20:0c:d1:ba:c0:87:dc:
11:f2:12:30:df:e6:1b:dd:c5:4e:12:c9:4e:d9:d3:63:14:92:
ce:04:20:de:fa:95:5a:4d:c4:6f:f7:45:ec:da:a5:f7:ba:2f:
fd:49:00:f6:cc:66:4c:45:7c:45:e2:22:9e:c4:a4:4c:4f:4d:
3b:4b:09:c6:65:a3:aa:2a:40:e9:c4:8c:e4:d1:53:3b:b9:5c:
c7:6d:dc:57:a1:a2:5d:16:f3:63:8a:7c:5c:a9:5d:68:12:36:
72:64:33:74:81:63:de:70:6b:a8:ca:17:ac:24:69:70:d6:c4:
ac:31:86:d6:4b:0c:fb:d9:1d:c8:e4:15:47:88:59:71:96:1a:
96:10:49:6b:07:be:d2:bf:ab:52:aa:e6:05:5d:47:68:e7:7d:
44:d1:b1:a7:41:68:3e:58:5b:77:15:45:b8:82:fc:01:1d:57:
d7:37:7f:37:90:a6:d7:fd:e2:2c:bc:dd:5e:90:18:35:29:53:
05:0d:10:ec:1d:a3:51:7d:fb:2a:a3:91:db:68:f1:2e:46:d3:
09:91:bd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 19:21:55 2024 by rpki-client on console-fra.rpki-client.org