Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
File: aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft (raw, json)
Hash identifier: yqHcDhF1FMXP8kKVzOPq7usU1mv0tEmL3GXdzxOKYMg=
Subject key identifier: F5:64:39:2C:16:BF:15:DC:F0:C6:ED:EF:44:FE:4C:EA:81:2F:FD:E6
Authority key identifier: 69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
Certificate issuer: /CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Certificate serial: 01935199E8BD145FA8B0C61AB49C4DF2B131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
Manifest number: 025B
Signing time: Fri 22 Nov 2024 02:01:01 +0000
Manifest this update: Fri 22 Nov 2024 02:01:01 +0000
Manifest next update: Sat 23 Nov 2024 02:01:01 +0000
Files and hashes: 1: IFs71rd-SRqh7KQnELiFqIDW-AE.roa (hash: MBaUbz5hktCV0IHSMwOgUNM2rgXbGFM5oW+Pl2lNI6Q=)
2: WvquLfoBWB-lSojS4j3duhjaOfc.roa (hash: Kjht5i+kXveB46V9eg1ak0lgxqIrp+RsZmxkygdEoVM=)
3: aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl (hash: c0ZDi11iZnRsNKLT7z61x81aLyW/oRg9ukKbiEMvH74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:99:e8:bd:14:5f:a8:b0:c6:1a:b4:9c:4d:f2:b1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Validity
Not Before: Nov 22 02:01:01 2024 GMT
Not After : Nov 23 02:01:01 2024 GMT
Subject: CN=f564392c16bf15dcf0c6edef44fe4cea812ffde6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3a:b8:09:01:dd:ed:b7:3b:21:c8:b5:1c:5a:
12:0f:e8:ea:a7:02:8d:8c:8a:76:fe:45:3d:0d:32:
9b:66:f8:02:78:a3:82:a8:7a:55:4c:b1:2e:64:d1:
33:68:29:e1:f2:39:6a:75:37:53:2c:c0:1b:8e:54:
d9:4a:b5:d3:12:14:c3:58:56:44:11:17:71:71:4b:
ae:f3:53:1b:76:59:da:54:77:a2:45:10:6c:b1:cc:
d1:a9:ae:77:d0:85:2d:11:6c:4f:0c:a9:24:ad:4d:
c9:06:47:67:12:95:9e:7e:82:6b:3e:2a:5c:99:9d:
eb:bb:64:7c:f3:0b:b7:80:39:76:00:f5:99:b5:2b:
01:9c:bd:a1:e2:74:b0:8a:57:95:fa:25:4d:66:2b:
39:da:db:a8:88:0e:0c:44:7c:7d:b3:11:45:6f:dc:
b4:b1:37:93:ca:64:2d:c0:6c:0f:36:fc:53:de:63:
d0:a2:5c:fb:d0:e6:e1:af:f6:47:17:cb:bd:f2:39:
51:a9:85:2f:63:8f:b6:f0:d7:21:f6:6d:52:5a:99:
a2:d9:ca:5d:e5:20:75:2a:f0:28:72:c2:a1:7b:9f:
06:b7:27:c8:55:cd:dc:8b:a1:47:e7:df:f3:4f:5b:
d3:44:25:81:2f:f9:3b:88:85:ae:5c:9c:67:7d:18:
d3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:64:39:2C:16:BF:15:DC:F0:C6:ED:EF:44:FE:4C:EA:81:2F:FD:E6
X509v3 Authority Key Identifier:
keyid:69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:53:2b:39:d9:61:ba:77:ef:5e:fe:15:8c:7a:a7:a9:ab:ae:
81:87:d8:dd:12:55:90:8a:1f:7b:ed:f2:06:70:12:ba:3a:d9:
1e:18:38:ad:4b:80:1a:7c:6e:49:d9:2c:6a:e8:e5:a4:48:b5:
12:d0:86:59:1a:c9:29:91:e1:25:1d:c1:e8:e5:e8:5c:ee:c1:
37:7b:30:5a:49:7d:a8:be:90:27:78:97:61:25:4c:7a:2e:49:
6d:6d:d6:6a:ea:1d:b0:4b:13:6c:df:38:a4:e6:d2:f8:84:e5:
59:31:64:1d:48:68:fb:16:5e:81:3d:e5:97:d4:a6:81:67:9a:
34:1b:ff:44:3d:a3:8f:10:81:97:4e:38:9d:b3:e9:f1:fe:f5:
90:8c:64:7e:7e:18:bb:e1:f1:7a:44:9c:5c:a8:ab:f2:e8:5c:
02:d3:40:36:9b:9a:d8:37:c4:61:21:98:21:7e:76:ad:06:a8:
0b:b6:a1:9f:c1:04:36:a3:14:b8:ff:d0:31:20:f7:57:c9:c1:
7d:d4:13:cf:49:4a:48:83:24:f0:d1:f0:33:4b:fe:0e:23:74:
f8:a2:0a:a6:8b:7b:12:f6:d3:48:e5:c3:d3:32:89:e3:17:40:
70:7d:5e:c2:b8:52:84:84:fd:4b:67:01:22:ed:0f:24:0c:ad:
0d:7c:e2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:55:44 2024 by rpki-client on console-ams.rpki-client.org