Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/kBewvZCCfeCNJP72G8xEhiAkv34.mft
File: kBewvZCCfeCNJP72G8xEhiAkv34.mft (raw, json)
Hash identifier: BPMo1g6NI2iOySKL87eIy3MjJwxbJdU1V3rIcylqFi4=
Subject key identifier: BF:2D:83:69:0A:5F:CD:E7:98:68:CC:81:0B:15:5C:56:62:51:5F:5B
Authority key identifier: 90:17:B0:BD:90:82:7D:E0:8D:24:FE:F6:1B:CC:44:86:20:24:BF:7E
Certificate issuer: /CN=9017b0bd90827de08d24fef61bcc44862024bf7e
Certificate serial: 01901DB3C3E9869616C20B5E7CB3E462C926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kBewvZCCfeCNJP72G8xEhiAkv34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/kBewvZCCfeCNJP72G8xEhiAkv34.mft
Manifest number: 085A
Signing time: Sat 15 Jun 2024 21:00:38 +0000
Manifest this update: Sat 15 Jun 2024 21:00:38 +0000
Manifest next update: Sun 16 Jun 2024 21:00:38 +0000
Files and hashes: 1: BXIARJK2zmZTWQKley8453UWGds.roa (hash: jmjmHE+H+KBFnKr/m/WyIQEyfrjEmxVbI//6dLCbosU=)
2: kBewvZCCfeCNJP72G8xEhiAkv34.crl (hash: weMjXSJp3IYbA79GTMO+hgPd2Qm7Dg5HWLsCcd9jKFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/kBewvZCCfeCNJP72G8xEhiAkv34.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/kBewvZCCfeCNJP72G8xEhiAkv34.mft
rsync://rpki.ripe.net/repository/DEFAULT/kBewvZCCfeCNJP72G8xEhiAkv34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:b3:c3:e9:86:96:16:c2:0b:5e:7c:b3:e4:62:c9:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9017b0bd90827de08d24fef61bcc44862024bf7e
Validity
Not Before: Jun 15 21:00:38 2024 GMT
Not After : Jun 16 21:00:38 2024 GMT
Subject: CN=bf2d83690a5fcde79868cc810b155c5662515f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4a:e9:51:89:a7:8e:c2:12:d0:72:61:00:ca:
1f:b0:96:e2:7a:54:82:41:95:23:80:26:b0:9a:0d:
f8:87:a1:f5:b6:ea:15:71:f0:ae:9e:78:8f:7c:1c:
f2:4f:0c:6d:d6:48:e7:e9:42:87:45:98:28:09:78:
86:5a:8c:35:ed:c8:ad:b9:35:fb:31:bc:5c:26:d1:
c8:81:a9:32:07:3b:ff:5b:03:3b:40:6c:14:3b:36:
2a:33:fd:3e:1c:e9:98:2f:ad:56:cf:a6:8c:54:36:
35:83:33:c8:83:8e:5c:98:5f:a0:4d:17:64:e5:66:
7c:2b:0a:0c:33:fe:56:74:d0:b1:cf:2d:06:51:8d:
7c:ad:9e:6b:18:44:cc:a5:88:c9:aa:65:df:30:c1:
8d:45:81:8e:77:96:1e:60:de:63:ea:b1:3b:72:10:
d4:23:bd:42:de:03:25:3c:4e:98:b2:d2:20:9d:a4:
8e:c5:41:52:1a:a9:12:e3:19:52:59:ab:00:b9:0e:
ee:f8:fa:ee:10:cd:26:a2:6d:cc:60:ff:e4:d4:7e:
d7:11:76:f3:25:64:49:7a:39:0a:cc:ae:ed:43:5a:
2b:32:cd:eb:de:4f:ba:41:3f:cc:26:f7:49:e4:23:
82:a0:1d:8d:0c:a8:eb:16:05:b3:9e:46:4f:7a:7b:
12:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2D:83:69:0A:5F:CD:E7:98:68:CC:81:0B:15:5C:56:62:51:5F:5B
X509v3 Authority Key Identifier:
keyid:90:17:B0:BD:90:82:7D:E0:8D:24:FE:F6:1B:CC:44:86:20:24:BF:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kBewvZCCfeCNJP72G8xEhiAkv34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/kBewvZCCfeCNJP72G8xEhiAkv34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/kBewvZCCfeCNJP72G8xEhiAkv34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:f6:b6:d4:b2:1a:cf:1f:bd:1b:be:da:b7:f5:13:27:17:73:
99:a7:a5:11:bf:78:f7:bb:ed:b7:6e:64:87:69:b8:5f:c9:c9:
46:7e:32:f3:db:f2:fe:6c:ed:8b:11:95:9d:6a:64:b5:29:bf:
cd:6c:9e:37:8a:3c:ab:d3:ea:46:66:01:fe:eb:3d:33:1e:4c:
38:e7:45:6f:2c:c7:45:2e:8b:04:02:10:44:09:a2:75:02:79:
ce:86:67:ed:31:9f:83:d7:3d:78:20:52:02:19:3f:c1:cd:13:
39:24:7a:b4:49:51:a9:73:0a:a5:5a:cd:94:68:8f:ca:87:35:
6c:d8:fe:9d:3a:d3:27:b2:e2:dc:51:fa:b9:a0:f0:aa:1c:c9:
50:d6:52:47:c7:3b:d4:b6:15:29:85:42:24:ef:92:24:13:0e:
86:6c:3b:97:7b:34:83:6b:09:c6:10:cc:04:a0:00:4a:12:56:
fe:8b:bb:bc:05:fc:4b:18:86:3a:09:33:fe:f7:e2:fc:3e:94:
08:1f:e8:8b:04:1d:b1:72:39:4f:95:60:39:1e:2c:b3:17:ad:
14:af:36:b7:4f:07:87:58:1e:19:20:36:d9:db:ff:d1:77:46:
c1:c7:5e:bf:ac:53:11:ce:00:a7:ea:32:06:6e:c3:7f:fd:1a:
02:5f:6f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:12:50 2024 by rpki-client on console-fra.rpki-client.org