Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/6/AA0F2492A1847DB45A3A340F1B6D8D30FFAABE8A.mft
File: AA0F2492A1847DB45A3A340F1B6D8D30FFAABE8A.mft (raw, json)
Hash identifier: qjW93ddY0T5Rp92va1eDy+iEde2FLf/ZeqOV2ELSIcw=
Subject key identifier: FC:3A:3B:02:5E:70:D8:B7:9F:BE:1D:A2:94:2E:A8:46:8F:1E:97:39
Authority key identifier: AA:0F:24:92:A1:84:7D:B4:5A:3A:34:0F:1B:6D:8D:30:FF:AA:BE:8A
Certificate issuer: /CN=aa0f2492a1847db45a3a340f1b6d8d30ffaabe8a
Certificate serial: 7F68431102088474760A6F874A23FED6395C9368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qg8kkqGEfbRaOjQPG22NMP-qvoo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/6/AA0F2492A1847DB45A3A340F1B6D8D30FFAABE8A.mft
Manifest number: 02F3
Signing time: Fri 17 May 2024 08:26:39 +0000
Manifest this update: Fri 17 May 2024 08:21:39 +0000
Manifest next update: Sat 18 May 2024 10:02:39 +0000
Files and hashes: 1: AA0F2492A1847DB45A3A340F1B6D8D30FFAABE8A.crl (hash: akS3UotiDltZn1AJWzrtFkNdyTvRhBmlwdkiBmieT9k=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/6/AA0F2492A1847DB45A3A340F1B6D8D30FFAABE8A.crl
rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/6/AA0F2492A1847DB45A3A340F1B6D8D30FFAABE8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/qg8kkqGEfbRaOjQPG22NMP-qvoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:68:43:11:02:08:84:74:76:0a:6f:87:4a:23:fe:d6:39:5c:93:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa0f2492a1847db45a3a340f1b6d8d30ffaabe8a
Validity
Not Before: May 17 08:21:39 2024 GMT
Not After : May 18 10:02:39 2024 GMT
Subject: CN=FC3A3B025E70D8B79FBE1DA2942EA8468F1E9739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d4:c3:7e:ed:cc:a2:30:50:09:91:d1:2a:83:
9b:b7:b6:73:00:29:64:b1:62:ed:b0:be:c6:2c:8c:
b9:df:cb:4e:d0:73:67:b1:76:36:dd:1d:45:c9:c0:
26:6f:ac:1d:64:89:68:6b:cc:80:dc:ba:d5:a0:87:
00:dd:b3:0d:78:a3:df:f5:dd:d8:2e:6d:19:2d:b0:
40:9d:24:97:ad:48:39:9d:89:12:b2:5b:e3:4e:99:
2c:6f:a7:ab:53:c7:ca:1e:ea:30:37:52:3e:4d:95:
2c:1e:63:60:8e:52:eb:b2:50:c2:d8:e1:67:6e:a8:
6d:ff:b2:d1:26:af:f7:32:ca:63:21:46:9e:46:ee:
b6:ec:22:18:4f:4a:16:61:af:0f:55:e3:77:ca:ad:
b7:70:d5:e7:96:b8:37:f6:3e:d7:8f:69:6c:84:18:
d7:47:24:5c:84:a6:46:d8:f8:2c:57:4a:cc:b8:3a:
4f:67:ee:ac:1c:1d:f5:75:09:f7:c2:f1:60:8d:00:
33:25:96:46:ef:43:74:43:61:3b:23:61:78:83:e5:
36:4a:dd:10:41:b6:a4:da:c6:8a:44:eb:27:ae:44:
c4:09:6c:bc:5f:3d:bf:2b:14:2b:f5:13:8d:21:e8:
30:2a:09:2d:b1:a4:a5:f4:e4:81:fe:52:ce:03:47:
59:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3A:3B:02:5E:70:D8:B7:9F:BE:1D:A2:94:2E:A8:46:8F:1E:97:39
X509v3 Authority Key Identifier:
keyid:AA:0F:24:92:A1:84:7D:B4:5A:3A:34:0F:1B:6D:8D:30:FF:AA:BE:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/6/AA0F2492A1847DB45A3A340F1B6D8D30FFAABE8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qg8kkqGEfbRaOjQPG22NMP-qvoo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/6/AA0F2492A1847DB45A3A340F1B6D8D30FFAABE8A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:23:96:a9:4e:7c:dd:f3:dc:a5:79:ce:21:38:bf:31:73:7c:
ca:e1:e9:94:2c:d2:3c:28:a0:e0:3f:2a:96:76:d2:43:02:bd:
ea:d4:9b:a3:f5:03:97:78:2c:b4:1e:0a:0f:f4:a4:6b:7c:ef:
6c:1f:af:1c:a1:42:19:75:3a:19:31:f3:be:39:cb:03:82:d5:
ab:57:e7:1c:7e:70:a8:93:26:96:b7:3b:cd:87:6f:27:15:ca:
4d:5b:f8:cc:4c:a9:54:bb:17:4a:52:d4:dc:ea:ef:7e:81:e1:
ee:b8:b5:67:fb:5d:7f:6c:77:47:65:5f:84:68:6a:be:04:3a:
c2:f5:00:22:41:8e:27:8d:8c:65:2e:bf:35:6b:a6:a5:99:fb:
51:ee:01:e0:08:42:81:79:35:9b:81:ce:47:1d:98:b5:3a:02:
e9:8b:30:60:2b:a4:b0:dc:e0:84:22:1d:6d:62:88:a2:c1:0c:
3e:dc:65:1e:2e:27:cb:e9:25:2a:4d:28:de:bb:44:c2:94:4d:
eb:f1:14:e0:66:b2:98:2d:01:09:52:37:13:96:c3:e7:a9:f8:
6a:4d:9e:83:6c:53:c1:5f:9f:15:1c:22:ca:fd:1b:d5:57:2c:
f5:1d:f6:14:89:91:e1:0c:9a:de:75:4d:36:5f:f6:94:b6:53:
d0:85:02:4e
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUf2hDEQIIhHR2Cm+HSiP+1jlck2gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWEwZjI0OTJhMTg0N2RiNDVhM2EzNDBmMWI2ZDhkMzBm
ZmFhYmU4YTAeFw0yNDA1MTcwODIxMzlaFw0yNDA1MTgxMDAyMzlaMDMxMTAvBgNV
BAMTKEZDM0EzQjAyNUU3MEQ4Qjc5RkJFMURBMjk0MkVBODQ2OEYxRTk3MzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI1MN+7cyiMFAJkdEqg5u3tnMA
KWSxYu2wvsYsjLnfy07Qc2exdjbdHUXJwCZvrB1kiWhrzIDcutWghwDdsw14o9/1
3dgubRktsECdJJetSDmdiRKyW+NOmSxvp6tTx8oe6jA3Uj5NlSweY2COUuuyUMLY
4WduqG3/stEmr/cyymMhRp5G7rbsIhhPShZhrw9V43fKrbdw1eeWuDf2PtePaWyE
GNdHJFyEpkbY+CxXSsy4Ok9n7qwcHfV1CffC8WCNADMllkbvQ3RDYTsjYXiD5TZK
3RBBtqTaxopE6yeuRMQJbLxfPb8rFCv1E40h6DAqCS2xpKX05IH+Us4DR1m7AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU/Do7Al5w2Lefvh2ilC6oRo8elzkwHwYDVR0j
BBgwFoAUqg8kkqGEfbRaOjQPG22NMP+qvoowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2I1NzVlYTctNzg2Zi00YjJkLWE0NTUtNzlkN2ZjNDNl
Y2VlLzYvQUEwRjI0OTJBMTg0N0RCNDVBM0EzNDBGMUI2RDhEMzBGRkFBQkU4QS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FnOGtrcUdFZmJSYU9qUVBHMjJOTVAt
cXZvby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83YjU3NWVhNy03
ODZmLTRiMmQtYTQ1NS03OWQ3ZmM0M2VjZWUvNi9BQTBGMjQ5MkExODQ3REI0NUEz
QTM0MEYxQjZEOEQzMEZGQUFCRThBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUSOWqU583fPcpXnOITi/
MXN8yuHplCzSPCig4D8qlnbSQwK96tSbo/UDl3gstB4KD/Ska3zvbB+vHKFCGXU6
GTHzvjnLA4LVq1fnHH5wqJMmlrc7zYdvJxXKTVv4zEypVLsXSlLU3OrvfoHh7ri1
Z/tdf2x3R2VfhGhqvgQ6wvUAIkGOJ42MZS6/NWumpZn7Ue4B4AhCgXk1m4HORx2Y
tToC6YswYCuksNzghCIdbWKIosEMPtxlHi4ny+klKk0o3rtEwpRN6/EU4GaymC0B
CVI3E5bD56n4ak2eg2xTwV+fFRwiyv0b1Vcs9R32FImR4Qya3nVNNl/2lLZT0IUC
Tg==
-----END CERTIFICATE-----
Generated at Fri May 17 12:28:23 2024 by rpki-client on console-ams.rpki-client.org