Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
File: BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft (raw, json)
Hash identifier: SLDrKYIY4u18XIEpuvOOQjGJdsx3CvXQj5uO36s5obM=
Subject key identifier: 6D:81:D6:D8:9C:E1:96:53:53:0F:A1:DB:86:82:B8:3B:0D:04:71:D3
Authority key identifier: 04:90:43:47:A2:36:1A:CE:D7:C3:70:F7:44:6D:E7:08:27:7E:E6:D1
Certificate issuer: /CN=04904347a2361aced7c370f7446de708277ee6d1
Certificate serial: 019034E06D17B34F12C7B59CB900553A8334
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
Manifest number: D1
Signing time: Thu 20 Jun 2024 09:00:41 +0000
Manifest this update: Thu 20 Jun 2024 09:00:41 +0000
Manifest next update: Fri 21 Jun 2024 09:00:41 +0000
Files and hashes: 1: BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl (hash: ryIVT/ZfbPIlk22mm6ObZrQIVJ9o85DibRm6+IxjDFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:34:e0:6d:17:b3:4f:12:c7:b5:9c:b9:00:55:3a:83:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04904347a2361aced7c370f7446de708277ee6d1
Validity
Not Before: Jun 20 09:00:41 2024 GMT
Not After : Jun 21 09:00:41 2024 GMT
Subject: CN=6d81d6d89ce19653530fa1db8682b83b0d0471d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b2:ca:26:c7:40:4d:11:54:f1:d9:78:ad:89:
5a:8d:c8:0c:a4:30:88:cd:82:f9:fd:63:45:18:97:
50:77:16:e4:7b:b5:68:86:99:3e:82:2d:10:ee:d4:
a0:86:e2:0d:24:e0:8f:6d:e7:20:0d:11:f8:c2:84:
48:72:c2:2a:8c:3b:4c:f4:f5:94:08:f5:92:cf:c7:
c7:77:40:e5:ba:3d:23:cc:05:b4:74:47:95:6a:e1:
4e:d1:e2:7a:81:35:c9:47:68:26:2e:c2:6c:d3:6d:
96:43:ae:b8:e6:6d:0b:79:80:34:ac:0f:39:df:01:
fa:93:79:cd:5f:89:2f:43:bf:f5:91:23:ba:01:9a:
6f:43:4b:07:33:d5:d2:20:ff:ab:fa:53:50:58:37:
d2:78:81:81:19:6f:44:88:74:8b:a4:09:e6:40:4d:
74:af:c1:f1:51:db:20:91:08:1d:85:e4:9b:6e:ce:
e8:06:a6:1b:e2:0c:51:4b:29:a8:b4:d4:95:80:a0:
91:47:0b:19:c2:f3:22:0b:ea:e3:3e:a1:b1:8d:f6:
b3:ec:7a:50:2a:7a:e2:cc:02:68:31:f2:a1:0e:30:
35:ae:75:16:88:57:ab:0e:54:66:09:f9:5e:dc:ff:
5b:bc:13:2b:5f:ca:6f:3c:ab:03:08:83:ac:6d:c1:
16:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:81:D6:D8:9C:E1:96:53:53:0F:A1:DB:86:82:B8:3B:0D:04:71:D3
X509v3 Authority Key Identifier:
keyid:04:90:43:47:A2:36:1A:CE:D7:C3:70:F7:44:6D:E7:08:27:7E:E6:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:cd:6d:49:8b:01:95:51:62:92:7e:66:ac:12:4d:77:92:0c:
c4:bd:67:65:ee:2a:3d:84:0d:44:e5:6d:f2:91:e0:e5:c3:28:
98:41:84:11:42:47:fa:aa:15:23:45:67:f4:21:59:9f:28:50:
12:10:5c:2e:4a:3b:c9:7e:b8:64:6e:f2:77:d4:15:54:62:8d:
68:00:30:57:a5:04:0d:6f:75:44:c4:f5:25:84:a4:0f:59:9e:
5d:6b:c0:1a:44:76:63:6b:9d:9d:83:44:f7:b4:aa:5f:09:ca:
ff:c0:0e:79:4a:c6:95:ba:ba:08:38:1d:64:c8:77:93:60:2f:
70:a2:59:6e:b6:4f:5d:a0:41:f1:27:ca:f2:a5:e2:e3:b4:0b:
18:74:81:9e:c0:4a:2d:b3:95:5d:7e:d2:85:6b:d3:89:de:56:
b2:ca:5f:a4:e0:4c:05:0e:bc:70:4b:52:1a:d6:9e:e1:ae:73:
a2:12:aa:e8:32:10:3e:9f:c1:78:f6:f1:26:13:25:a9:66:72:
4e:a3:04:d4:55:67:ce:62:35:62:dd:02:b9:00:d1:57:7d:27:
a9:6d:55:82:7f:93:af:4e:11:73:82:81:01:f5:a8:41:27:7d:
66:4e:29:5f:a4:1a:78:86:50:0c:62:15:82:2c:3b:dd:44:b3:
fb:f5:3f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 13:53:01 2024 by rpki-client on console-ams.rpki-client.org