Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft
File: AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft (raw, json)
Hash identifier: vNQPezbijUIH/7rvzwQJKQ4RYzl6GfCpK528rIB7pV0=
Subject key identifier: 8A:E8:F8:43:7C:35:5C:2B:A1:7F:2C:07:D4:52:B9:18:6F:A2:67:7E
Authority key identifier: 00:08:58:94:96:BF:86:D2:D0:F8:87:4B:76:CA:C8:43:02:5B:CD:3B
Certificate issuer: /CN=0008589496bf86d2d0f8874b76cac843025bcd3b
Certificate serial: 0194BA84B3FC9C6AF76B4A8199C95B93FF6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAhYlJa_htLQ-IdLdsrIQwJbzTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft
Manifest number: 0CEB
Signing time: Fri 31 Jan 2025 04:00:46 +0000
Manifest this update: Fri 31 Jan 2025 04:00:46 +0000
Manifest next update: Sat 01 Feb 2025 04:00:46 +0000
Files and hashes: 1: AAhYlJa_htLQ-IdLdsrIQwJbzTs.crl (hash: CdF5mfHDUqqxM7mDdiL1d234uCfi0mzhWFGY86FGrk4=)
2: D6FQ_AOx7VEUAwBlUYJ5Pt1jupM.roa (hash: 4lHXyj3pRBx2LFAwlRyUS6mFr8ntH6TaBTAezCtdNUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAhYlJa_htLQ-IdLdsrIQwJbzTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:b3:fc:9c:6a:f7:6b:4a:81:99:c9:5b:93:ff:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0008589496bf86d2d0f8874b76cac843025bcd3b
Validity
Not Before: Jan 31 04:00:46 2025 GMT
Not After : Feb 1 04:00:46 2025 GMT
Subject: CN=8ae8f8437c355c2ba17f2c07d452b9186fa2677e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:32:0b:00:f6:c6:9b:51:c8:d1:a2:c1:0a:dc:
a4:81:96:00:a9:d0:2b:0f:df:4d:40:6d:21:bf:9f:
a1:24:de:13:68:5c:73:ee:00:52:7e:ae:4f:af:35:
fc:3f:70:41:7d:2e:e6:a1:90:48:45:85:96:b9:85:
02:98:c5:a2:c4:f2:bf:06:f8:8b:8c:2c:9e:b5:44:
b0:c5:91:68:99:8c:ad:8a:51:c2:75:54:51:23:c4:
72:53:84:55:54:e3:da:d6:4b:a6:94:87:0c:1d:13:
99:0d:35:47:96:73:01:39:ae:c5:79:23:41:46:0d:
01:4b:4a:e7:de:dc:eb:55:27:41:68:89:15:70:c5:
57:6a:54:20:20:73:cb:52:b4:c1:75:e0:07:6d:44:
06:e4:3a:74:9d:a1:09:1f:be:c9:a1:d6:a4:29:45:
2e:56:6f:01:de:27:b6:10:6a:7a:a8:c1:09:7d:6f:
7a:8f:14:75:56:92:12:86:7d:1a:ff:80:ab:95:cb:
46:6d:43:ff:08:83:92:dc:37:ae:8e:ab:e8:98:cf:
88:d4:51:b0:b1:f7:d7:c4:d8:23:95:e9:40:00:3e:
22:33:e9:0d:aa:a0:6d:fd:85:65:28:29:41:f4:51:
8a:55:6a:91:b7:fd:c4:cc:ad:a6:6a:a6:c6:ce:33:
8b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E8:F8:43:7C:35:5C:2B:A1:7F:2C:07:D4:52:B9:18:6F:A2:67:7E
X509v3 Authority Key Identifier:
keyid:00:08:58:94:96:BF:86:D2:D0:F8:87:4B:76:CA:C8:43:02:5B:CD:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAhYlJa_htLQ-IdLdsrIQwJbzTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:85:2d:0a:14:6b:8c:92:2b:51:7b:45:61:91:6b:f8:3e:a7:
13:f4:8d:ed:b0:1f:52:08:fb:d8:3a:4b:b0:89:e0:0f:91:79:
59:41:c1:86:b5:dd:e5:a9:8b:a8:f1:b8:12:91:81:23:7e:d7:
da:1d:98:77:3d:6c:ef:10:3f:6a:30:96:01:8b:6c:f1:8e:8e:
ee:a6:ad:c3:4e:6c:ee:ad:8d:45:9f:b8:b8:bc:43:59:21:a9:
c8:15:90:8c:cf:cf:4f:d3:6a:63:aa:c4:66:01:ec:12:d3:8d:
5b:e3:43:c9:f4:b0:8e:5e:e5:8b:0f:55:ad:59:58:c5:cd:36:
34:50:84:7e:b2:f3:a5:b8:d3:02:76:0e:db:ad:5d:be:92:21:
03:95:60:b1:a2:25:df:fe:89:f8:92:2a:43:c1:04:32:4d:ad:
1f:e3:7d:0e:d2:b9:72:7c:3e:65:ca:3b:c4:2a:c3:fa:12:d6:
65:fc:a2:dd:5b:dd:e0:74:7c:37:b0:36:a9:ab:b2:05:d9:fd:
03:d7:e1:d9:60:cf:2f:36:e2:e3:5d:bd:3f:d0:47:a1:15:f4:
8c:a6:82:97:f5:b4:31:af:93:50:ed:00:d2:f7:78:8f:a8:7e:
28:c4:a4:2e:e7:f4:37:c2:23:b6:6a:35:b1:4c:2b:38:2e:f4:
b1:b8:15:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:17 2025 by rpki-client on console-fra.rpki-client.org