Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/39dacc-1c57-4deb-a225-b6207f755267/1/aJxopFZh-QpAWb2MKaPJZ7-S6FU.mft
File: aJxopFZh-QpAWb2MKaPJZ7-S6FU.mft (raw, json)
Hash identifier: vhAZzJddaBy3FQUciWkYcfaSC3Fj9DbdbUnDb99LEWc=
Subject key identifier: D5:06:06:68:D9:D3:7E:96:98:7F:4B:2E:9C:92:32:61:2B:92:F6:8A
Authority key identifier: 68:9C:68:A4:56:61:F9:0A:40:59:BD:8C:29:A3:C9:67:BF:92:E8:55
Certificate issuer: /CN=689c68a45661f90a4059bd8c29a3c967bf92e855
Certificate serial: 0193587782C1B1F2A51B8607302EA2C4C411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJxopFZh-QpAWb2MKaPJZ7-S6FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/39dacc-1c57-4deb-a225-b6207f755267/1/aJxopFZh-QpAWb2MKaPJZ7-S6FU.mft
Manifest number: 0334
Signing time: Sat 23 Nov 2024 10:00:47 +0000
Manifest this update: Sat 23 Nov 2024 10:00:47 +0000
Manifest next update: Sun 24 Nov 2024 10:00:47 +0000
Files and hashes: 1: EuqAODfaKXAzUZs6x4fhx0qMesQ.roa (hash: OqFRphaN82aKJwYAtTbzY1gFVaZxxQa7hmyG29KwNNc=)
2: aJxopFZh-QpAWb2MKaPJZ7-S6FU.crl (hash: vDarbFvevNJLbTh+dPsNnXH92G6Tdx5N6p196FHJc+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/39dacc-1c57-4deb-a225-b6207f755267/1/aJxopFZh-QpAWb2MKaPJZ7-S6FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/39dacc-1c57-4deb-a225-b6207f755267/1/aJxopFZh-QpAWb2MKaPJZ7-S6FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJxopFZh-QpAWb2MKaPJZ7-S6FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:77:82:c1:b1:f2:a5:1b:86:07:30:2e:a2:c4:c4:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=689c68a45661f90a4059bd8c29a3c967bf92e855
Validity
Not Before: Nov 23 10:00:47 2024 GMT
Not After : Nov 24 10:00:47 2024 GMT
Subject: CN=d5060668d9d37e96987f4b2e9c9232612b92f68a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:46:e2:78:ec:87:df:c4:0c:0a:d8:49:c7:61:
42:97:ad:82:58:79:ac:5e:97:13:45:8c:66:76:ea:
08:0e:45:d8:d1:63:cd:90:07:c3:26:3f:c8:1f:2e:
34:28:ed:c1:02:0f:a0:97:be:5e:f0:bb:ee:21:90:
bd:24:94:8b:c5:d0:3a:2a:85:fa:3f:ce:1b:8e:70:
99:6b:8b:27:5d:b7:67:75:31:62:c0:a2:5e:a5:f9:
91:d8:95:da:eb:77:ea:43:4a:a4:22:74:13:fa:6c:
17:d8:0f:6e:f1:7e:cb:92:88:30:03:08:fb:ae:3c:
33:91:fd:20:10:88:96:39:88:34:e0:0c:23:e7:0c:
f2:8c:12:bd:f6:5e:28:b6:a8:cf:5f:c8:18:a4:04:
1d:e8:72:e7:23:7a:ed:e4:ed:fb:c4:53:f7:ff:8e:
ec:74:63:69:da:02:1e:4e:f0:ef:03:ce:38:0b:fe:
cb:78:c0:72:20:c7:37:50:a1:64:fb:7c:e2:47:d5:
69:d3:0a:9f:8f:7e:3f:8b:da:21:42:82:76:75:0c:
6d:cb:e3:f1:cc:34:8f:76:f0:23:83:ae:91:9f:6c:
83:37:72:8f:f4:7a:19:c8:2d:a1:79:c0:4f:5a:38:
9e:d3:2b:a6:fe:4f:92:a7:9f:68:32:83:04:94:57:
9d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:06:06:68:D9:D3:7E:96:98:7F:4B:2E:9C:92:32:61:2B:92:F6:8A
X509v3 Authority Key Identifier:
keyid:68:9C:68:A4:56:61:F9:0A:40:59:BD:8C:29:A3:C9:67:BF:92:E8:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJxopFZh-QpAWb2MKaPJZ7-S6FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/39dacc-1c57-4deb-a225-b6207f755267/1/aJxopFZh-QpAWb2MKaPJZ7-S6FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/39dacc-1c57-4deb-a225-b6207f755267/1/aJxopFZh-QpAWb2MKaPJZ7-S6FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:40:05:16:86:d9:20:5b:53:96:90:d5:d2:6d:a2:0c:4e:50:
a9:85:88:03:de:23:23:18:6c:2f:0e:36:80:bf:47:f7:d1:c3:
8a:19:7d:6d:8a:40:fe:66:00:f6:2d:cb:98:7d:8a:88:c7:50:
00:02:30:50:58:50:b7:74:59:09:b6:32:b0:39:ab:76:b3:7c:
68:c7:71:6b:05:1a:72:ef:e8:01:89:b9:cd:af:4f:b4:f6:26:
75:f3:76:8e:26:d6:a9:8f:12:4e:c0:89:da:d4:1d:dd:c3:67:
06:5d:a8:9f:05:60:29:5c:d1:5e:e7:e0:d6:14:80:ae:02:12:
ee:2a:0a:2f:03:de:57:ac:1e:e6:78:e9:1d:79:a4:a8:a5:35:
46:ca:8d:d1:69:46:11:e5:41:1b:a8:5d:02:22:f4:1e:37:61:
13:91:3e:46:f6:d0:c5:a4:09:1d:b6:89:ff:83:07:23:b9:a5:
a0:3f:63:d4:cd:f1:f7:a7:ca:9b:ea:28:62:c9:14:67:ce:fb:
69:d9:fb:77:cc:1b:c8:26:f8:b4:85:4c:17:23:01:f7:2a:2d:
de:48:af:5f:5c:98:84:1c:3c:76:46:57:27:24:d0:03:ea:38:
07:0e:82:de:1f:73:ea:42:7d:02:84:18:2c:0b:f3:e9:8a:cf:
10:de:43:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:03:18 2024 by rpki-client on console-fra.rpki-client.org