Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft
File: aXJqlhM2--eCCz10joEvSVyHLTU.mft (raw, json)
Hash identifier: eh6A25wUxZoxdiEf3uvPMdIGCwvFchQhaHmNR9EoftQ=
Subject key identifier: A8:A2:72:E7:8B:F7:27:F0:44:A7:43:1B:10:E4:00:AF:F1:D2:E1:D9
Authority key identifier: 69:72:6A:96:13:36:FB:E7:82:0B:3D:74:8E:81:2F:49:5C:87:2D:35
Certificate issuer: /CN=69726a961336fbe7820b3d748e812f495c872d35
Certificate serial: 018F874843823C4D531AF509244D66D2957F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXJqlhM2--eCCz10joEvSVyHLTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft
Manifest number: 0967
Signing time: Fri 17 May 2024 16:00:11 +0000
Manifest this update: Fri 17 May 2024 16:00:11 +0000
Manifest next update: Sat 18 May 2024 16:00:11 +0000
Files and hashes: 1: P_G-p6KrZoDkEeUrd6Sf3FGzgmA.roa (hash: XErbqPKIzX1FscItuzwTk1CIqD7yKJXXe9tYjnq9RnQ=)
2: aXJqlhM2--eCCz10joEvSVyHLTU.crl (hash: K2v2BRsDQ2EFDl7aRMtQMjtHp8jVdrgTPadGKxYSKbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXJqlhM2--eCCz10joEvSVyHLTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:48:43:82:3c:4d:53:1a:f5:09:24:4d:66:d2:95:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69726a961336fbe7820b3d748e812f495c872d35
Validity
Not Before: May 17 16:00:11 2024 GMT
Not After : May 18 16:00:11 2024 GMT
Subject: CN=a8a272e78bf727f044a7431b10e400aff1d2e1d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cf:ec:67:6c:41:ae:68:96:60:c3:ac:40:c9:
41:e0:d4:16:a8:28:f1:e5:c0:3b:6d:6d:a0:9f:cf:
31:49:8a:3e:bb:4e:59:54:67:eb:75:79:91:db:75:
3a:48:2a:70:62:47:5c:47:cc:bf:72:99:47:aa:65:
3f:85:97:7e:33:dd:a2:32:11:f3:68:c4:f2:be:7e:
c1:85:ac:dc:dd:13:0d:b4:ad:c1:85:f9:24:8c:9c:
46:e9:f4:a5:0a:b8:78:ee:ec:87:9f:7e:1d:21:ca:
e0:c5:0a:de:54:e7:fb:a4:01:dc:24:7d:e2:20:c4:
b1:c8:92:04:ec:18:48:28:37:10:20:bb:7d:61:eb:
49:94:20:03:8f:56:dd:46:7f:e9:c8:d4:64:1a:94:
05:d1:8e:b9:71:51:d8:41:98:0a:3b:06:ba:b7:24:
5c:ca:87:27:f6:94:62:2f:66:90:ac:43:7d:d3:19:
ff:66:9c:d6:d2:72:de:20:ff:75:47:e3:19:c1:d7:
5b:79:41:17:1e:af:e8:66:2f:5a:22:ba:d3:00:36:
7d:58:8c:95:63:63:7c:0c:49:08:b0:0e:cc:3c:89:
5f:49:15:21:d7:22:a5:a0:e8:9d:41:85:a3:75:8d:
ff:4d:43:35:70:4a:84:bc:68:f7:87:9f:8e:bf:ab:
32:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A2:72:E7:8B:F7:27:F0:44:A7:43:1B:10:E4:00:AF:F1:D2:E1:D9
X509v3 Authority Key Identifier:
keyid:69:72:6A:96:13:36:FB:E7:82:0B:3D:74:8E:81:2F:49:5C:87:2D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXJqlhM2--eCCz10joEvSVyHLTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f1:06:85:55:d7:82:91:2f:84:30:82:f7:9e:0e:55:01:21:
1c:89:cb:eb:b3:ec:9d:5a:65:e8:e1:b5:2b:3d:26:4b:e2:84:
e1:90:10:35:58:ba:76:fc:44:d4:c9:cc:fa:d6:84:92:45:d1:
7d:fd:25:dd:4d:4a:f0:3e:da:cd:5c:e9:10:33:9e:aa:65:89:
4f:78:0a:13:01:26:e6:cb:08:ca:97:19:44:8b:d3:dc:a0:77:
1e:be:14:4b:06:26:16:44:1d:ca:1b:75:20:24:f8:db:bb:e1:
20:39:90:92:7f:0a:6c:51:7b:9c:ec:7f:ab:7a:0a:18:ae:7d:
f0:f0:4b:1b:2e:a9:e2:c3:de:4f:ad:97:e7:df:f7:0c:33:45:
50:de:e5:db:46:93:d9:2d:b6:44:b3:f5:ec:28:01:f6:c6:ca:
04:5a:fa:2c:2f:ae:c7:f9:a2:31:8c:5c:65:58:e5:ab:0a:f1:
2c:29:be:2e:68:f6:78:a9:82:81:9f:4f:39:30:0f:52:08:0d:
66:d8:aa:3b:f8:57:d8:17:ea:24:3c:e8:6d:1d:18:fe:a7:ad:
b7:db:70:62:e6:7a:eb:3e:b9:81:0a:d5:21:22:c3:d0:1f:56:
a0:2c:a7:9c:35:0f:96:21:bc:44:ee:23:c9:1f:2b:ac:dc:ba:
5b:41:7c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:03:44 2024 by rpki-client on console-fra.rpki-client.org