Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
File: BSQGb4Zs826cup6b5vkCZNo3Lz4.mft (raw, json)
Hash identifier: zWbQiaPUZy2xjA4uNYTC9BHVageKDawmfBs4STm4U24=
Subject key identifier: 44:36:46:D9:89:41:B2:7D:70:0F:5C:B9:FD:C6:33:44:F3:76:77:A9
Authority key identifier: 05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E
Certificate issuer: /CN=0524066f866cf36e9cba9e9be6f90264da372f3e
Certificate serial: 019038F58973E023E31F5D1B8DAED6DDD853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
Manifest number: 11D4
Signing time: Fri 21 Jun 2024 04:02:13 +0000
Manifest this update: Fri 21 Jun 2024 04:02:13 +0000
Manifest next update: Sat 22 Jun 2024 04:02:13 +0000
Files and hashes: 1: BSQGb4Zs826cup6b5vkCZNo3Lz4.crl (hash: hDjFJkxCAujs09nfTvsK7G1n3nh28AODNHvSyvuqgYA=)
2: J7Z9D30Ll-SuPpV-y_zBbtvx7Ec.roa (hash: TABzqxbm4xtSJLkCeMGwILRjMovtFAc2oiOYMujOQKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:38:f5:89:73:e0:23:e3:1f:5d:1b:8d:ae:d6:dd:d8:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0524066f866cf36e9cba9e9be6f90264da372f3e
Validity
Not Before: Jun 21 04:02:13 2024 GMT
Not After : Jun 22 04:02:13 2024 GMT
Subject: CN=443646d98941b27d700f5cb9fdc63344f37677a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:91:ee:ba:1d:08:70:52:f9:4d:a0:a6:e5:89:
35:d9:ed:e1:6e:37:36:ab:33:04:6b:97:6e:8b:27:
63:43:5b:10:92:eb:3f:94:66:45:39:5f:ec:63:c2:
f9:5b:f2:ad:77:1e:83:8c:bd:19:22:7b:b9:40:c3:
cd:bf:56:d3:28:73:37:67:3c:44:b0:36:3f:c7:82:
9b:e5:f7:73:cc:73:a2:86:fc:8c:85:a1:78:d7:13:
50:b9:18:7b:70:6e:5c:96:53:62:c0:de:33:1f:72:
21:9a:39:5c:4f:10:45:a3:07:f0:b8:3e:1f:34:99:
9b:c0:05:54:f9:06:0c:89:81:c9:5b:7c:aa:ae:c6:
7d:5e:7d:cc:cd:aa:0f:4d:4c:50:71:35:e2:95:44:
48:ec:77:38:4d:d4:40:f3:75:4a:fa:9d:23:4f:2d:
23:49:55:97:63:e5:c9:bc:0d:24:7e:f6:a2:f8:43:
26:02:65:58:0c:81:a6:a9:89:98:c2:02:87:15:56:
2b:df:45:4e:ba:5b:1c:99:fc:3d:f2:23:a3:ae:d5:
9e:fd:fd:a6:d0:63:7b:93:20:f2:97:74:af:bb:ba:
8d:fb:be:d6:9b:97:dd:43:3d:44:4b:8a:62:03:c1:
c0:80:b0:a6:48:10:d5:1b:4c:50:1b:68:01:e0:67:
50:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:36:46:D9:89:41:B2:7D:70:0F:5C:B9:FD:C6:33:44:F3:76:77:A9
X509v3 Authority Key Identifier:
keyid:05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:de:a5:9c:9d:73:62:dc:fe:18:2a:9a:2e:43:12:7f:48:42:
94:b4:dc:65:f0:48:b4:56:a7:97:95:21:0e:67:5c:b2:23:3e:
d0:ee:63:65:68:64:df:57:48:65:d6:8c:45:95:de:07:4b:f9:
03:a9:a6:97:24:a8:90:94:11:c0:e6:b8:fb:57:33:4c:9e:6f:
50:df:f5:0d:5c:34:26:29:b3:c5:f5:97:9d:2b:46:fd:36:5a:
e8:5f:e4:09:76:26:27:a8:07:b0:ca:c5:24:d5:f2:1f:05:d7:
b5:19:63:48:92:cd:8e:ee:45:ce:ec:8f:b2:43:69:92:2d:5f:
d0:66:bf:f2:6f:8e:7d:8e:88:eb:41:06:4f:0a:e5:be:5b:87:
af:de:87:26:48:b1:23:37:ce:78:e4:90:83:21:d4:bb:7c:e8:
b8:c5:d5:e4:58:60:b5:b5:4a:58:90:68:54:8b:55:e6:32:22:
12:a0:fe:ab:b1:64:da:70:34:c1:b8:99:56:19:9d:14:4e:ce:
a6:db:3e:69:d3:94:4e:4a:82:16:fe:72:bd:98:36:5a:dd:34:
4e:a6:42:bc:d0:39:c1:65:61:01:90:a3:c0:2b:2c:59:1b:49:
20:5a:c9:c5:2c:d8:32:00:de:f0:f3:00:4a:5d:6f:3e:79:93:
f7:04:b4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 05:34:35 2024 by rpki-client on console-fra.rpki-client.org