Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
File: A6YrMJo3hUJZChKznF9wzbDnsVA.mft (raw, json)
Hash identifier: gjtcxCXyStLXOY03DCnQmO+jXLhvNJbI+S0G/bWo9Yg=
Subject key identifier: 63:0A:A6:2A:2C:D1:5F:D3:A4:A4:1D:AE:C8:B2:9D:41:7E:31:46:92
Authority key identifier: 03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50
Certificate issuer: /CN=03a62b309a378542590a12b39c5f70cdb0e7b150
Certificate serial: 019369A1A59C544131874F9F868858436406
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
Manifest number: A5
Signing time: Tue 26 Nov 2024 18:00:21 +0000
Manifest this update: Tue 26 Nov 2024 18:00:21 +0000
Manifest next update: Wed 27 Nov 2024 18:00:21 +0000
Files and hashes: 1: A6YrMJo3hUJZChKznF9wzbDnsVA.crl (hash: 4PQ8en0JFQg90Di5yJSOAChgbSqFXNjwUJ53OCgmSqM=)
2: ql7w292SRSHKykp7P6IWK_uY_KA.roa (hash: uRm3eWx4mPbxy0865QdfOiFgB0MqCQ44QIruRIPu490=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 18:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:a1:a5:9c:54:41:31:87:4f:9f:86:88:58:43:64:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03a62b309a378542590a12b39c5f70cdb0e7b150
Validity
Not Before: Nov 26 18:00:21 2024 GMT
Not After : Nov 27 18:00:21 2024 GMT
Subject: CN=630aa62a2cd15fd3a4a41daec8b29d417e314692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:15:a4:84:89:4e:ae:4d:39:6d:9d:08:53:53:
9b:ec:e7:f3:71:0e:1d:cb:c3:c0:d9:1d:97:21:60:
73:3e:56:e4:99:ee:38:c7:2c:48:f0:66:42:c9:90:
37:14:72:69:45:90:9e:50:6b:af:40:50:55:1d:b9:
c0:3b:22:44:db:e8:99:a3:66:9c:25:14:91:5b:a5:
7c:f0:b4:25:cc:43:13:01:3c:ee:9c:ea:5b:cc:b6:
4c:0d:e6:3e:c7:26:ca:4c:c5:84:15:b8:94:62:d9:
74:1c:7b:00:ed:2a:83:49:f0:69:85:d0:6b:19:44:
6f:a0:48:c9:60:a3:57:00:c4:2a:f0:3e:ee:24:6f:
f1:85:19:ea:b6:70:8d:00:9a:36:d6:d4:df:89:ce:
e3:9e:a5:49:13:11:fa:da:3a:8d:af:1b:36:27:19:
1a:9a:36:29:77:e7:c7:e6:7e:62:61:d5:42:13:96:
c5:0b:fe:58:b2:18:ba:eb:7a:ae:8d:0c:0c:18:db:
4e:c7:8f:10:ee:6a:cb:6b:9a:53:fe:49:da:30:6a:
22:bd:aa:5e:4a:94:24:4e:c1:60:4c:58:cf:6b:0c:
0a:b7:80:d7:79:1a:58:c3:bf:5e:f4:41:ad:35:9e:
f2:ce:e6:cc:8a:29:12:ae:e2:02:e2:bb:8f:fa:a6:
60:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0A:A6:2A:2C:D1:5F:D3:A4:A4:1D:AE:C8:B2:9D:41:7E:31:46:92
X509v3 Authority Key Identifier:
keyid:03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:54:0c:ba:1f:53:f5:eb:fb:67:c8:da:72:4c:eb:c0:e6:cc:
95:7e:47:69:40:ae:4f:2d:11:cf:5d:82:a2:65:d2:4b:c8:59:
c0:a3:2b:65:90:6d:bd:d4:4e:1f:42:26:64:88:42:56:1e:b4:
bc:ba:c8:26:97:69:30:24:b1:6c:3b:6d:83:53:d9:89:2f:08:
a4:89:b4:3f:48:cc:3f:fe:8a:21:cf:d2:f8:19:92:7f:24:7d:
cd:e0:0f:7b:0f:4f:67:e5:b0:82:29:74:62:5e:b9:84:51:10:
b7:a4:6d:7f:96:14:f4:2b:45:4a:ba:96:67:e1:24:e7:f8:95:
68:74:d2:80:3b:74:b1:ea:d5:38:4c:34:85:bf:22:0e:83:fd:
a1:56:40:82:e8:48:7d:98:2c:86:ce:46:71:bf:28:4f:77:1d:
77:fe:83:82:6b:57:fe:0c:40:ae:05:3d:bc:80:9a:c0:e8:ee:
e8:00:2c:98:14:c6:af:3b:b2:01:90:42:ce:36:25:28:e3:a7:
49:67:94:cc:ba:5a:bd:27:c8:48:c2:b6:ff:0e:23:f6:32:f7:
e1:ef:ea:9f:bb:08:d1:d0:23:46:71:45:b2:6d:5e:6c:12:54:
ba:55:2a:a9:1c:c7:22:f5:58:c5:89:cf:93:18:25:b0:af:1d:
57:c2:99:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNpoaWcVEExh0+fhohYQ2QGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYTYyYjMwOWEzNzg1NDI1OTBhMTJiMzljNWY3MGNkYjBl
N2IxNTAwHhcNMjQxMTI2MTgwMDIxWhcNMjQxMTI3MTgwMDIxWjAzMTEwLwYDVQQD
Eyg2MzBhYTYyYTJjZDE1ZmQzYTRhNDFkYWVjOGIyOWQ0MTdlMzE0NjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphWkhIlOrk05bZ0IU1Ob7OfzcQ4d
y8PA2R2XIWBzPlbkme44xyxI8GZCyZA3FHJpRZCeUGuvQFBVHbnAOyJE2+iZo2ac
JRSRW6V88LQlzEMTATzunOpbzLZMDeY+xybKTMWEFbiUYtl0HHsA7SqDSfBphdBr
GURvoEjJYKNXAMQq8D7uJG/xhRnqtnCNAJo21tTfic7jnqVJExH62jqNrxs2Jxka
mjYpd+fH5n5iYdVCE5bFC/5Yshi663qujQwMGNtOx48Q7mrLa5pT/knaMGoivape
SpQkTsFgTFjPawwKt4DXeRpYw79e9EGtNZ7yzubMiikSruIC4ruP+qZgtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMKpios0V/TpKQdrsiynUF+MUaSMB8GA1UdIwQY
MBaAFAOmKzCaN4VCWQoSs5xfcM2w57FQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTZZck1KbzNoVUpaQ2hLem5GOXd6YkRuc1ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDJhMTktNDc0Ni00NzhmLTk5MzYt
MjczM2Y2OTljYjYyLzEvQTZZck1KbzNoVUpaQ2hLem5GOXd6YkRuc1ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC82ZDJhMTktNDc0Ni00NzhmLTk5MzYtMjczM2Y2OTljYjYy
LzEvQTZZck1KbzNoVUpaQ2hLem5GOXd6YkRuc1ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANlQMuh9T
9ev7Z8jackzrwObMlX5HaUCuTy0Rz12ComXSS8hZwKMrZZBtvdROH0ImZIhCVh60
vLrIJpdpMCSxbDttg1PZiS8IpIm0P0jMP/6KIc/S+BmSfyR9zeAPew9PZ+Wwgil0
Yl65hFEQt6Rtf5YU9CtFSrqWZ+Ek5/iVaHTSgDt0serVOEw0hb8iDoP9oVZAguhI
fZgshs5Gcb8oT3cdd/6DgmtX/gxArgU9vICawOju6AAsmBTGrzuyAZBCzjYlKOOn
SWeUzLpavSfISMK2/w4j9jL34e/qn7sI0dAjRnFFsm1ebBJUulUqqRzHIvVYxYnP
kxglsK8dV8KZdw==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:33:23 2024 by rpki-client on console-ams.rpki-client.org