Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
File: agFtrScwR7GIhmkUhd7dlxccTWg.mft (raw, json)
Hash identifier: KZTarfS9ovH4RIQx/khOTGP8lv9m9J02iXoSVIJ13Zs=
Subject key identifier: 4F:07:EB:9E:0D:D5:84:E6:69:59:F6:79:C7:46:B4:01:E1:B9:60:9D
Authority key identifier: 6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
Certificate issuer: /CN=6a016dad273047b18886691485dedd97171c4d68
Certificate serial: 0193512BA28CF94D50BBB811286D1E3EE2B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
Manifest number: 0662
Signing time: Fri 22 Nov 2024 00:00:34 +0000
Manifest this update: Fri 22 Nov 2024 00:00:34 +0000
Manifest next update: Sat 23 Nov 2024 00:00:34 +0000
Files and hashes: 1: 0AzkBQ0JFA5bEdMYWaXszlLBOLI.roa (hash: YT2lPNDQMAbFCNjc+R1VwQhA1zu37s9zIndAypywbp4=)
2: WcR7zHhUmC6rSaxttpYk9euQIik.roa (hash: wXzakS8nMeEGBjkg0PrjxyqwymvnWmh0iq5Wo7l7Qww=)
3: agFtrScwR7GIhmkUhd7dlxccTWg.crl (hash: TN7EHj8VBfZWZdyK2agz9VT9/f0oTweawDsYE2v1O4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:2b:a2:8c:f9:4d:50:bb:b8:11:28:6d:1e:3e:e2:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a016dad273047b18886691485dedd97171c4d68
Validity
Not Before: Nov 22 00:00:34 2024 GMT
Not After : Nov 23 00:00:34 2024 GMT
Subject: CN=4f07eb9e0dd584e66959f679c746b401e1b9609d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:46:af:66:50:3b:e5:9d:f5:02:5f:39:ba:2a:
3d:80:c8:aa:2c:a2:e5:9f:13:fa:c1:c7:26:0c:b0:
50:30:c0:a1:50:bc:0d:0c:10:68:d3:1b:ca:29:9e:
b3:1b:22:ac:f6:fe:f6:5a:43:67:0e:1f:a4:af:03:
88:1d:46:45:8d:06:4e:8d:36:2a:8e:24:e3:de:b8:
94:38:56:4b:9f:12:55:77:9c:9d:43:ec:69:29:c3:
ef:f7:8a:8c:c7:68:79:81:9e:0e:b5:27:26:24:5c:
22:ac:33:c0:01:02:ea:ac:df:76:f1:35:1f:9d:2a:
a6:1b:dc:38:ec:10:6e:f0:67:ae:70:23:62:a5:79:
10:30:72:e8:8d:3d:b6:c1:cb:28:7f:0a:6f:60:a6:
ee:17:2d:1e:2d:d0:64:84:36:d3:3d:e8:76:19:6f:
f3:f5:69:0d:02:b6:a5:07:13:f3:3f:3b:08:61:a6:
00:27:c7:a8:34:13:13:5c:b2:84:c6:cd:93:6b:fb:
48:dc:f5:eb:36:1a:44:63:21:59:d1:fc:44:a1:b0:
7c:d1:7d:e0:da:5e:9b:cf:fa:41:df:25:a1:97:42:
af:34:86:b2:88:c3:39:e8:7e:ff:0c:41:b7:6d:02:
25:6e:7d:a4:42:2d:6d:5c:59:7e:36:d1:72:1f:f5:
c0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:07:EB:9E:0D:D5:84:E6:69:59:F6:79:C7:46:B4:01:E1:B9:60:9D
X509v3 Authority Key Identifier:
keyid:6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:67:25:a7:32:73:e5:aa:21:d5:7e:74:f1:e2:e0:d5:8e:31:
c4:7c:63:2b:fb:db:df:be:02:8a:d6:d9:d0:52:f1:e4:c8:48:
ed:d8:32:42:80:f7:37:b2:57:51:90:cd:4f:90:c5:74:f0:65:
9c:98:4c:85:67:1e:91:de:49:6e:d9:1b:70:5e:6b:25:89:c7:
81:22:e6:71:b5:92:73:1b:e2:40:e8:e6:50:82:8e:48:99:38:
50:bd:ee:23:00:c5:5f:b5:50:cd:6d:e7:0d:78:45:02:ec:e3:
2c:e7:41:b6:b7:aa:d9:50:a1:04:33:2f:ba:05:d9:26:fd:05:
12:1f:e0:9a:42:7f:2e:87:72:0c:62:54:f5:d5:4b:5d:69:41:
8f:43:d1:f8:c1:5a:9f:f9:ec:11:7a:10:bd:17:a3:05:e2:89:
94:78:2d:59:67:a4:85:71:08:35:f8:78:7a:bb:07:cd:a3:71:
f7:88:40:44:cd:c3:fb:02:fa:ff:5a:b8:08:10:0f:d9:46:2a:
2c:86:03:8e:e0:83:60:17:13:57:1d:65:ee:0a:05:34:41:bb:
da:aa:d5:9f:55:87:7a:b9:17:ea:a8:40:cd:65:3a:8a:61:9c:
2f:69:b4:db:63:bd:9c:aa:40:d8:1d:42:52:6d:9d:11:83:c2:
15:1d:e6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:55:06 2024 by rpki-client on console-fra.rpki-client.org