Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.mft
File: BAfWwkhET2tcN42w_-wPiZJW66M.mft (raw, json)
Hash identifier: unkjgTGmD0uhOqtq5AlV+ei+5vcArufMzPc45RKAfOY=
Subject key identifier: 24:58:A3:21:16:EE:37:B5:D5:99:40:48:8C:E3:F5:1A:67:B6:6F:68
Authority key identifier: 04:07:D6:C2:48:44:4F:6B:5C:37:8D:B0:FF:EC:0F:89:92:56:EB:A3
Certificate issuer: /CN=0407d6c248444f6b5c378db0ffec0f899256eba3
Certificate serial: 01901DEB1D5C83015B99F97C04A2196AAE22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BAfWwkhET2tcN42w_-wPiZJW66M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.mft
Manifest number: 0499
Signing time: Sat 15 Jun 2024 22:01:06 +0000
Manifest this update: Sat 15 Jun 2024 22:01:06 +0000
Manifest next update: Sun 16 Jun 2024 22:01:06 +0000
Files and hashes: 1: BAfWwkhET2tcN42w_-wPiZJW66M.crl (hash: LubBhU0dso6YwY5URXGdJTSkvxLkNpACsyB5PhZ76+w=)
2: gjXeT_CX85V1SmXg2yVdfWdVwpo.roa (hash: d64L+GdUi1AUohMh1W/XSeAAsIEaAyrIG0zzPdnZNHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.mft
rsync://rpki.ripe.net/repository/DEFAULT/BAfWwkhET2tcN42w_-wPiZJW66M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:eb:1d:5c:83:01:5b:99:f9:7c:04:a2:19:6a:ae:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0407d6c248444f6b5c378db0ffec0f899256eba3
Validity
Not Before: Jun 15 22:01:06 2024 GMT
Not After : Jun 16 22:01:06 2024 GMT
Subject: CN=2458a32116ee37b5d59940488ce3f51a67b66f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:26:d2:4e:3d:1a:92:f3:4b:3b:41:93:20:f4:
8f:34:7b:0b:1c:f5:b2:f5:1d:1c:6b:b4:f3:51:76:
73:a8:c7:eb:52:eb:3f:56:09:fb:50:5b:78:7d:06:
9c:5e:b3:94:9c:fa:8a:76:f3:ca:fa:8e:5c:a9:41:
77:a1:13:75:d3:59:05:0c:df:a0:1e:e4:ec:44:83:
13:95:6b:04:48:5b:94:c1:3d:c3:56:39:a9:71:ed:
20:43:f0:d6:dc:de:ff:c0:b6:d6:b4:e5:54:99:57:
06:0e:09:7c:18:b3:81:9c:80:1e:45:ca:de:b8:af:
d3:7e:eb:a0:37:2c:b1:95:24:d6:84:3f:de:54:61:
de:da:14:b9:03:74:9b:e2:8f:bc:57:4d:b7:f9:c3:
d1:a0:88:a4:74:6c:fd:89:a8:4a:a2:83:f2:cb:c7:
89:9d:fa:e8:1e:de:01:82:ed:f2:27:98:1b:c7:96:
4b:4c:67:ed:d4:f7:6a:d3:aa:2e:f1:b0:9f:c8:50:
87:f5:67:7b:9c:bb:33:9c:4c:74:eb:9a:a4:e5:94:
09:50:8d:38:17:5b:09:73:03:93:5f:cc:40:5d:3e:
0a:b8:96:d2:ae:86:aa:d8:e3:32:af:4a:05:21:a4:
f2:e3:b5:61:47:d6:ba:b6:a6:54:53:1f:ac:1b:c5:
c5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:58:A3:21:16:EE:37:B5:D5:99:40:48:8C:E3:F5:1A:67:B6:6F:68
X509v3 Authority Key Identifier:
keyid:04:07:D6:C2:48:44:4F:6B:5C:37:8D:B0:FF:EC:0F:89:92:56:EB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BAfWwkhET2tcN42w_-wPiZJW66M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:e9:d5:c3:35:fd:4a:1c:57:3a:37:5a:70:33:b7:86:34:1e:
2d:d7:92:2f:8e:ce:cd:26:71:c5:78:86:f2:1f:78:76:23:d7:
ec:e6:09:f5:43:97:7c:2c:c7:33:ab:24:2c:29:ae:e4:da:1e:
61:9e:97:17:b6:a1:be:d1:ca:0b:78:e0:15:33:e7:59:8a:d7:
d6:e1:00:1b:ef:ca:c4:5a:ea:8e:36:9d:48:a9:54:0a:c2:52:
5e:e7:0e:c9:a0:5b:18:66:54:fe:1d:a6:f6:5f:63:7e:e8:e8:
94:58:80:f8:e9:49:0c:fd:d8:61:0d:70:5d:ef:4d:1e:63:42:
c1:7f:64:6e:e4:dd:cb:c8:c4:af:30:02:16:b6:1f:af:18:ed:
d8:a6:9c:06:0b:cd:28:64:bc:ec:a9:3b:f5:5f:65:79:53:f2:
a6:bd:64:f8:33:56:86:14:33:e5:ae:da:a6:b4:92:1e:22:46:
02:64:5b:35:07:a8:5c:f2:62:95:74:44:44:75:4b:1c:bc:7a:
8d:8e:65:c0:b5:8a:10:e3:f4:da:2e:13:04:59:79:30:a5:52:
cd:b0:03:99:62:13:31:36:4b:dd:58:bc:f7:15:14:3a:58:f9:
0b:b0:0b:0f:72:94:61:0e:ca:3d:f3:af:d8:12:dc:35:4e:82:
e1:7f:f4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:56:19 2024 by rpki-client on console-fra.rpki-client.org