Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
File: axoVfiCtyjtEBnuo2NyrrmmKi-w.mft (raw, json)
Hash identifier: x+qxd2nygpCSal56WZxxkBUWpZ/aIzthhEkRcg+HY7M=
Subject key identifier: 9D:70:F4:24:8B:3D:28:0E:8C:3F:21:A3:F5:97:6B:05:D6:6F:D4:C8
Authority key identifier: 6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC
Certificate issuer: /CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec
Certificate serial: 0193670EE33DDB7917CE718ADC8BBE5C3003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
Manifest number: 0C7A
Signing time: Tue 26 Nov 2024 06:00:49 +0000
Manifest this update: Tue 26 Nov 2024 06:00:49 +0000
Manifest next update: Wed 27 Nov 2024 06:00:49 +0000
Files and hashes: 1: 090iEnpedWdEk_mlgN_ffJmXwls.roa (hash: FsCLdR8Le/hijQeo/8q5V3Rc/iJoMndYhsuRTKhUKTo=)
2: axoVfiCtyjtEBnuo2NyrrmmKi-w.crl (hash: IYVWRA8i4WkXnfRTxyS47IZxeALkU5JRFEGnw2Lhrmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:67:0e:e3:3d:db:79:17:ce:71:8a:dc:8b:be:5c:30:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec
Validity
Not Before: Nov 26 06:00:49 2024 GMT
Not After : Nov 27 06:00:49 2024 GMT
Subject: CN=9d70f4248b3d280e8c3f21a3f5976b05d66fd4c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:af:bd:f0:2c:76:04:a6:47:39:8b:8b:a6:4f:
57:14:a7:d4:b7:fa:6f:bd:6e:bd:7f:ea:f0:29:57:
30:85:40:d7:af:10:12:ba:f1:82:b3:d4:56:64:32:
ec:9f:6f:87:1f:cd:90:c6:68:68:bf:ec:76:5a:a8:
04:6d:29:b3:85:28:46:4f:ff:57:82:37:c2:ee:ca:
88:26:2d:19:91:0c:99:1a:c5:4d:e4:ec:9a:46:49:
d1:c9:d6:a6:ab:14:23:c3:89:a7:db:4a:e5:d9:cf:
dd:3e:91:98:f3:c3:9d:84:4a:f5:f9:14:43:9a:d3:
25:f3:4e:e3:34:91:60:10:f0:a0:f3:a3:0e:6b:a8:
80:37:77:d7:8f:fc:89:5d:e4:f9:17:d4:84:a4:fa:
bb:3a:93:ec:9d:76:40:0c:24:e3:b1:71:5b:78:67:
75:76:3e:94:3e:d5:d1:b1:b6:51:d8:84:29:28:14:
7d:e6:ba:0b:2c:46:67:16:a5:ff:16:f6:65:79:94:
0c:b2:9a:19:e1:9f:d1:67:4d:ac:40:3a:c2:74:82:
c0:fa:96:63:2a:df:37:58:09:12:a8:21:16:c8:cb:
18:49:c0:ed:91:2d:73:15:27:a6:5d:ba:6a:cc:bd:
23:cf:0a:9b:2e:a2:12:f8:eb:ab:da:f3:1e:ff:84:
af:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:70:F4:24:8B:3D:28:0E:8C:3F:21:A3:F5:97:6B:05:D6:6F:D4:C8
X509v3 Authority Key Identifier:
keyid:6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:9e:43:cd:87:78:a0:58:6a:b7:e1:e5:e5:a4:f4:13:f8:3f:
8a:26:61:d9:a4:37:2e:94:5a:05:23:54:4c:1c:9b:86:8f:b7:
cc:4f:c2:f1:1a:3b:bd:db:e8:7d:30:02:0e:c4:ee:0c:4e:d5:
ad:84:f5:0d:4e:d2:b3:b3:8b:27:eb:fc:dd:0f:55:65:cc:9c:
8a:be:ca:30:5f:64:04:a6:8a:d8:47:43:53:2f:29:fd:d9:3b:
5a:5e:17:5d:c4:6f:bb:fd:8b:51:ce:4c:b5:c6:dc:ed:2f:63:
6e:da:72:6c:8c:a3:07:16:69:43:f4:14:32:7c:a6:1f:18:b8:
d0:be:fc:d3:6f:ee:e0:c1:f2:8e:26:02:a6:af:d6:f4:d3:f7:
a4:47:48:eb:b8:17:6d:d1:8c:c8:dd:24:06:bc:26:86:ce:bb:
e2:5c:bd:ad:80:b1:9d:c7:69:ad:90:68:c6:f2:c8:72:3d:ea:
f3:3b:e8:66:fd:ad:47:aa:90:1f:e2:08:3c:b4:58:67:19:27:
64:9b:a2:01:0f:b1:cd:67:6f:90:66:f4:be:40:5f:33:ab:d3:
f3:a2:08:7f:1f:41:02:76:42:c3:f3:5a:65:17:cd:73:62:30:
ca:d6:83:96:86:ae:69:14:a8:7a:2d:de:e3:e1:21:82:c0:36:
d8:9d:13:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:12:25 2024 by rpki-client on console-ams.rpki-client.org