Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
File: AjJOaqWIMp6sepOPuYeNEy8qha8.mft (raw, json)
Hash identifier: e/DTKiqaM4RWXDddIqxKn6fccT1Vsd5xRrcbYljNnJQ=
Subject key identifier: 69:B9:0A:B9:9C:E1:BB:43:FE:C4:06:53:2E:81:AE:C2:58:7F:A1:57
Authority key identifier: 02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF
Certificate issuer: /CN=02324e6aa588329eac7a938fb9878d132f2a85af
Certificate serial: 019406EAA35AB9D617A6ED4DEAEBDF9F9442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
Manifest number: 0BFA
Signing time: Fri 27 Dec 2024 07:00:28 +0000
Manifest this update: Fri 27 Dec 2024 07:00:28 +0000
Manifest next update: Sat 28 Dec 2024 07:00:28 +0000
Files and hashes: 1: 359pMWmpbijOHiRBISAV74r-lhM.roa (hash: UpgWcfYxvy2uR0VWiIlnjUMZpUNBGuUvKhsb1pqww9g=)
2: AjJOaqWIMp6sepOPuYeNEy8qha8.crl (hash: Y/EuLMd5GMj40oi+h2HVTc7CEo46RvsWGWpZe9mrLmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:ea:a3:5a:b9:d6:17:a6:ed:4d:ea:eb:df:9f:94:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02324e6aa588329eac7a938fb9878d132f2a85af
Validity
Not Before: Dec 27 07:00:28 2024 GMT
Not After : Dec 28 07:00:28 2024 GMT
Subject: CN=69b90ab99ce1bb43fec406532e81aec2587fa157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c2:54:55:fd:9c:de:00:e4:4e:e6:76:16:5d:
e1:dc:a3:0c:93:91:a5:78:82:6f:38:88:86:e5:b6:
7d:bf:22:a2:c8:f9:85:c2:35:9f:c0:e2:91:c4:f2:
9d:bd:8a:cd:7d:73:c4:d5:50:f2:9a:8d:55:2e:84:
b6:e4:42:32:da:d5:a7:35:39:7e:b2:1f:a6:28:60:
9f:3b:a1:2b:8a:10:8d:6f:7e:f7:96:d6:5b:b0:d2:
cf:e0:b6:c4:0c:db:6a:e2:01:f3:5a:61:a5:43:4d:
ec:04:8e:95:28:4e:cf:3c:5c:ca:b4:d4:af:17:99:
f2:05:d3:f7:32:d2:9d:1a:91:b2:de:cc:7e:09:30:
46:51:79:c0:ec:25:fb:68:24:e6:1e:f7:10:10:3a:
d2:26:11:af:dc:1c:fd:29:89:10:54:65:f3:ec:5d:
77:a4:12:b5:9c:50:74:a6:67:bd:d8:cb:c3:a2:c9:
d9:9b:ff:05:87:9e:3f:a5:cc:73:d2:27:92:8d:2c:
ec:1f:cd:ec:9c:37:de:30:6e:04:07:da:df:c6:d4:
b3:92:7c:c3:55:11:35:95:2b:f2:87:03:3f:ec:c0:
9c:d8:60:9f:f3:34:9f:e5:11:31:12:1c:f1:ae:3b:
77:31:b2:2b:82:be:e4:ea:04:96:28:46:69:03:91:
8d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B9:0A:B9:9C:E1:BB:43:FE:C4:06:53:2E:81:AE:C2:58:7F:A1:57
X509v3 Authority Key Identifier:
keyid:02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:80:2d:31:b0:9b:77:24:ec:23:8d:b6:5b:bd:31:56:bb:dd:
fb:95:87:98:3d:a6:7d:9b:0e:67:bc:c8:9f:43:27:6f:0b:3a:
18:e1:b5:29:75:ed:4b:0a:9e:a0:79:bd:ce:51:44:8a:eb:fc:
8d:1d:24:09:68:66:f8:ce:7d:ce:dc:02:7a:30:2d:d5:a0:42:
ba:4a:49:bb:69:b7:4e:c7:4a:4f:b0:45:d6:e0:6e:c6:86:71:
d4:5b:d9:00:e7:39:36:92:6e:03:45:d5:13:60:d4:a3:70:4b:
ee:bb:2b:ff:4a:26:d5:ca:37:67:d2:67:eb:15:dd:4e:5b:83:
d2:c0:c6:18:7a:67:4d:0e:c1:f9:30:11:96:f2:a2:68:ce:f7:
6e:58:e3:33:53:8f:03:06:77:a4:ae:a7:f5:b8:68:23:e2:bf:
29:ab:91:fc:95:82:65:f8:d8:5b:ac:b7:8f:17:b3:77:b8:f7:
3d:de:fe:aa:60:31:2f:f6:ec:19:54:ca:a7:b1:d5:7e:60:eb:
30:44:2c:5b:36:98:5c:58:f2:e6:bd:e6:34:e6:71:1d:42:c9:
7a:82:95:1d:8d:0c:ae:cc:f7:cb:bb:b0:8a:58:23:33:82:36:
9d:7b:58:99:ca:dc:cb:e3:4a:16:70:ba:1c:b1:d1:5b:74:82:
27:4c:54:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:10:02 2024 by rpki-client on console-fra.rpki-client.org