Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
File: aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft (raw, json)
Hash identifier: b5Mjv2aS94rDIoL5KooBEKYN8NSDfwxEfreWxAAERPw=
Subject key identifier: 7A:55:DF:DA:2E:D7:10:88:4D:DB:39:00:50:D3:54:8C:AB:4C:24:CA
Authority key identifier: 68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
Certificate issuer: /CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
Certificate serial: 019356F6C84E1BA18A13333A813732D6CCF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
Manifest number: 117D
Signing time: Sat 23 Nov 2024 03:00:33 +0000
Manifest this update: Sat 23 Nov 2024 03:00:33 +0000
Manifest next update: Sun 24 Nov 2024 03:00:33 +0000
Files and hashes: 1: aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl (hash: AescqfTUuy9wmvtq8+Fjiz9iwkC4p7uVlyjSY0ZLbf4=)
2: maxfnIrv5kMwjDOhma71tlr06s4.roa (hash: 96cOXCNPzyxHyTPC+7UqYSvLvosT3o61JBuwzLyd2vE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f6:c8:4e:1b:a1:8a:13:33:3a:81:37:32:d6:cc:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
Validity
Not Before: Nov 23 03:00:33 2024 GMT
Not After : Nov 24 03:00:33 2024 GMT
Subject: CN=7a55dfda2ed710884ddb390050d3548cab4c24ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b5:3f:cb:fa:b5:40:c1:98:50:8a:39:fc:21:
6a:69:4b:39:ac:6b:cf:ff:4b:36:90:f1:9c:8d:a3:
73:8e:a1:d9:ad:e7:80:cf:df:93:32:aa:4a:a5:81:
9b:43:8f:69:de:6f:5b:0c:dd:43:09:c6:c1:8b:f9:
36:f9:7f:a9:59:d3:e2:b9:ab:b8:f2:ab:bf:7f:15:
62:89:09:98:b0:59:fb:e7:68:af:77:cb:f9:f0:d3:
32:6f:89:24:22:a1:5c:5a:22:9c:fc:e7:56:17:0c:
30:19:7a:25:48:a1:0e:37:83:30:de:2c:fe:96:f9:
90:12:50:a0:34:b7:2f:a1:ad:f4:f7:b2:4c:21:7e:
54:b8:78:45:0f:93:e5:07:be:d3:37:5d:a8:c7:c4:
b9:dc:2e:af:83:44:f3:3e:14:53:69:ae:31:cd:32:
36:e8:25:78:28:24:83:ea:16:c1:b2:ae:e2:d0:ce:
7c:58:fe:3e:0a:77:1b:b5:fc:cd:46:e8:0f:a8:91:
35:67:9e:4e:9d:80:29:83:3a:05:42:12:8e:ac:78:
be:ee:62:cd:7a:fb:24:0c:78:31:58:42:01:3e:4a:
2b:37:ed:41:ca:15:1e:88:50:0c:91:dd:a2:59:ea:
41:16:73:7e:1d:82:cf:40:6f:4c:11:66:1c:ce:95:
f2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:55:DF:DA:2E:D7:10:88:4D:DB:39:00:50:D3:54:8C:AB:4C:24:CA
X509v3 Authority Key Identifier:
keyid:68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:c9:05:5f:13:63:90:ae:5f:9e:3b:d2:c4:af:56:75:ae:8c:
aa:96:d4:eb:4a:89:7a:e3:62:67:57:80:21:e7:0a:bf:2b:e8:
db:92:00:05:8e:fe:2d:8c:e6:4d:eb:07:c9:44:94:22:44:c5:
97:c9:78:8d:7f:8a:a2:a7:76:2b:21:84:e7:9d:8c:5a:06:92:
37:dd:c6:55:f4:db:08:f2:0a:b3:e2:8c:8e:e8:0f:d3:62:3d:
31:b0:cb:c0:cb:51:9d:5b:0b:e9:ff:58:88:90:a4:2c:03:bf:
65:0a:f2:8a:28:c3:4e:de:e1:3b:36:98:59:b8:02:52:5d:3f:
4d:2b:9c:cb:0c:eb:9d:4d:2b:9c:04:0d:88:86:05:1f:db:a0:
2a:2f:f9:24:04:d5:24:f6:9d:f3:22:d0:85:46:93:ca:99:00:
ae:e0:91:e2:ae:a1:46:96:e4:79:3c:b2:c9:97:de:fe:18:3c:
73:28:19:1d:a6:19:01:6f:4d:f1:67:58:84:e8:fb:8c:f1:b3:
f6:b6:7e:5e:d5:39:42:4f:b3:2a:a7:74:0a:1d:7e:5d:7e:22:
7b:5c:b7:dd:97:82:f6:50:87:44:22:1f:7d:5b:4e:7c:df:6e:
2a:c3:93:09:d7:b5:f6:11:46:be:ed:93:ee:54:64:ac:4e:79:
13:b0:f0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:56:10 2024 by rpki-client on console-ams.rpki-client.org