Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
File: aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft (raw, json)
Hash identifier: wLqQ+N73osdPSOo8FF+Fa1aipuLcuGKqYCr5BPyYZB8=
Subject key identifier: 82:2F:C2:C9:3D:52:BE:E3:4A:1F:F7:51:45:A7:69:E3:82:D0:81:81
Authority key identifier: 68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
Certificate issuer: /CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Certificate serial: 01935688F380783368F466ACFF77F47B2F74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
Manifest number: 0F36
Signing time: Sat 23 Nov 2024 01:00:36 +0000
Manifest this update: Sat 23 Nov 2024 01:00:36 +0000
Manifest next update: Sun 24 Nov 2024 01:00:36 +0000
Files and hashes: 1: WoGSb6XfIv1-1k6gmCDrwXStnkw.roa (hash: IyVqtJ5KVyyU/3xN0m1UxylmSSHrcnG156TL7CnoNUM=)
2: aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl (hash: Y8GYSZi5LQef4wEKiPGau1KEn85DJfYfZHfgiYmB0K0=)
3: wbOpu5lvsVAW8KILVvNKMQyfUN0.roa (hash: ziyMrUoVMTSRf/IMRWtrWK9wHd959PUBbvpw+4hHeB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:88:f3:80:78:33:68:f4:66:ac:ff:77:f4:7b:2f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Validity
Not Before: Nov 23 01:00:36 2024 GMT
Not After : Nov 24 01:00:36 2024 GMT
Subject: CN=822fc2c93d52bee34a1ff75145a769e382d08181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1e:4c:8d:3e:7a:48:fc:ce:fa:57:ea:b7:c9:
07:06:ac:d8:d2:c0:fa:f5:d0:10:7a:37:54:f5:61:
28:02:5e:6c:82:dd:55:de:1d:7f:5d:00:9d:cd:80:
41:fa:47:6f:a7:c2:0c:07:51:72:b5:1c:d7:2c:63:
cb:e2:75:81:18:12:40:e3:d8:9b:11:1b:7e:57:57:
a0:6f:b1:85:49:50:f8:1d:7f:99:de:4e:f8:03:00:
82:3a:fe:80:a0:8a:6e:55:c6:a4:18:b9:6d:73:94:
90:ae:06:1f:3c:42:36:16:6e:63:18:20:4d:96:c8:
18:fc:ae:2d:17:88:55:25:f5:18:45:1c:d4:68:d3:
31:58:8a:11:10:2c:85:2f:2c:83:1b:22:e5:db:5d:
cc:f4:d6:3b:09:a4:ac:b0:92:4f:a1:74:40:f1:cd:
04:46:2e:7d:b3:34:c6:ad:30:1d:d2:31:56:d8:08:
99:39:9d:dd:ad:72:5f:66:90:c8:2a:bb:03:20:8c:
1d:80:c5:d5:ac:81:42:40:71:83:30:4a:bb:6a:ee:
0d:91:b4:5c:c1:c7:09:13:1a:55:1c:c1:63:73:f1:
1d:48:92:70:2e:ea:5c:64:29:6c:0e:9d:bd:8d:09:
20:cc:dd:94:84:3f:3d:5c:ac:b2:11:94:bc:48:64:
87:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:2F:C2:C9:3D:52:BE:E3:4A:1F:F7:51:45:A7:69:E3:82:D0:81:81
X509v3 Authority Key Identifier:
keyid:68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:71:71:a8:2a:7f:27:ad:08:2f:0c:81:21:de:1e:68:72:36:
95:9c:b7:1f:6b:b1:e1:e3:3d:52:a9:81:96:87:a8:2f:65:22:
73:76:73:47:67:0f:d2:5f:fb:ee:ad:c6:86:66:19:06:c0:97:
75:ef:2a:d6:e6:20:e1:22:a7:4c:58:8b:30:68:9a:87:d7:06:
21:4f:65:21:e6:be:87:b1:6b:67:5a:47:dd:52:80:b1:c1:9c:
68:81:9e:ff:23:c3:7e:e3:02:f3:28:52:8f:9e:5c:dd:9f:b1:
da:33:3c:75:44:2e:2e:59:23:65:c2:6f:46:73:93:6b:be:f3:
fd:75:3f:c6:1a:b4:59:ec:ea:f6:49:57:b1:b5:ae:6e:78:16:
f7:3b:44:bd:ee:ae:36:09:65:36:1f:b6:02:c7:42:5a:a8:c0:
ac:e4:e3:70:db:14:29:88:32:bb:e1:e1:e5:24:9c:02:37:14:
08:8b:b7:3a:0a:2c:32:2a:39:a8:05:df:ef:fb:91:30:f8:0d:
b3:2b:46:f3:80:ee:21:9c:8c:e8:24:9f:c5:a0:e3:c9:b2:13:
61:43:fa:df:2d:be:d7:87:26:52:01:5b:fd:49:b3:72:bb:9e:
c0:16:9a:c2:0d:c0:85:8a:1b:c9:24:6e:ac:93:00:ea:f5:b1:
53:df:57:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:37:50 2024 by rpki-client on console-fra.rpki-client.org