Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
File: AYzG9GaiQWV79exSpjDa6wEiL4U.mft (raw, json)
Hash identifier: 4/zwKNMGqy8hZI67b7FR+hJbaQkuMDkwTsU1dySN6TQ=
Subject key identifier: 2E:6B:E3:0F:A6:67:5E:A2:00:4F:0A:66:7B:0E:72:F8:11:DD:A7:F1
Authority key identifier: 01:8C:C6:F4:66:A2:41:65:7B:F5:EC:52:A6:30:DA:EB:01:22:2F:85
Certificate issuer: /CN=018cc6f466a241657bf5ec52a630daeb01222f85
Certificate serial: 018F2C858EA89B064A340BA8673F90CE52A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
Manifest number: 114C
Signing time: Tue 30 Apr 2024 01:01:41 +0000
Manifest this update: Tue 30 Apr 2024 01:01:41 +0000
Manifest next update: Wed 01 May 2024 01:01:41 +0000
Files and hashes: 1: AYzG9GaiQWV79exSpjDa6wEiL4U.crl (hash: llMi3Ny/zlV8RpYT1j+zhhapzawo7XhdvaXEm2FCqmQ=)
2: eGbG13urmXY7_AHdBw2kKz6kjMM.roa (hash: GfHxquVOWIlfZRn0lzl+tl6NH3W27Q3HrKpnJzorMXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 May 2024 01:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2c:85:8e:a8:9b:06:4a:34:0b:a8:67:3f:90:ce:52:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=018cc6f466a241657bf5ec52a630daeb01222f85
Validity
Not Before: Apr 30 01:01:41 2024 GMT
Not After : May 1 01:01:41 2024 GMT
Subject: CN=2e6be30fa6675ea2004f0a667b0e72f811dda7f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:29:86:12:3e:ca:1b:11:e9:5c:62:1f:56:af:
12:27:fb:47:ee:8c:9e:a4:b4:36:2b:d7:ca:fc:d0:
bf:6e:6b:4f:7e:6c:4b:61:a7:20:8e:be:56:d2:d8:
aa:1d:57:e6:0d:9d:ac:63:9e:10:9b:81:c4:6b:20:
97:74:90:e3:1a:bb:74:0d:4e:d8:d7:ba:0a:eb:c5:
90:65:6a:aa:dd:56:1f:eb:91:58:86:77:3a:4d:17:
af:13:c9:53:05:3d:17:ad:73:68:4d:c2:00:8b:69:
9e:c1:83:a9:03:00:76:ec:05:cc:bd:70:76:72:85:
14:60:57:cb:7b:01:bf:07:63:23:8c:af:2e:40:00:
b7:16:ad:41:d7:62:22:b6:65:52:86:59:a7:40:e9:
66:36:7d:a8:6e:ca:a3:2c:cc:e1:84:d8:f4:79:58:
89:92:88:05:61:7e:69:c1:37:0c:32:f2:d1:1e:fa:
3d:58:fb:76:0e:ea:9f:7e:91:fc:47:e0:a1:6a:30:
c7:59:60:bb:94:45:26:ae:0c:ff:80:37:cc:0a:83:
1b:fe:75:4d:0e:86:f6:05:01:41:6f:69:e6:a8:31:
a4:bf:97:95:1b:be:83:57:9f:2c:9e:62:b6:ae:ff:
83:f2:4d:ee:7d:be:aa:e2:ce:c5:9b:62:a3:06:d0:
7f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:6B:E3:0F:A6:67:5E:A2:00:4F:0A:66:7B:0E:72:F8:11:DD:A7:F1
X509v3 Authority Key Identifier:
keyid:01:8C:C6:F4:66:A2:41:65:7B:F5:EC:52:A6:30:DA:EB:01:22:2F:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:70:6f:7c:ab:9a:53:b2:48:6c:c3:b0:73:d8:94:b0:34:dd:
4f:4a:5c:95:13:16:47:3e:30:af:31:21:61:cb:c1:32:88:e5:
2d:d7:81:b0:db:f4:2c:63:fc:7b:9a:a3:a8:32:79:41:dd:e8:
d5:31:2e:23:7f:c2:6a:6e:07:8a:93:15:e3:7b:94:c9:05:26:
61:c3:a1:66:5e:04:24:48:f5:d7:64:64:15:c8:54:06:f8:9b:
9f:aa:28:ca:a7:d2:43:77:22:81:0d:38:13:ae:df:3b:1e:56:
df:ad:ae:5b:7d:dd:91:29:83:b8:0b:cd:1f:7a:84:a6:80:6d:
a6:a4:73:05:64:46:bb:a3:8e:4b:48:b5:8a:b7:d3:48:d9:35:
c2:75:f1:e4:7a:f9:f7:f7:27:df:e6:3e:3f:dc:3a:5a:16:e0:
aa:6d:9c:f3:2c:14:af:80:ca:fc:8f:3d:c7:ef:21:1f:63:99:
89:ec:d8:0e:98:a3:8a:59:d2:f3:c6:5c:1c:28:fb:a4:29:84:
74:af:10:5f:e2:64:31:da:4d:40:36:33:8a:e9:13:75:9d:0f:
1d:10:7e:b9:4e:3b:f2:7c:17:74:b1:05:a8:b8:7b:57:c1:ba:
fa:29:f7:01:0c:f7:64:78:bb:e3:7d:06:a1:7e:4f:ed:32:eb:
1d:27:a6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 11:43:49 2024 by rpki-client on console-fra.rpki-client.org