Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.mft
File: bTdW1UDlwX8ZTEXKRzhmXVGsy2w.mft (raw, json)
Hash identifier: 0YD2RcwjMVrDaZ5vHY07qjuFvKM+HoTJjAV9zYtffNY=
Subject key identifier: 3A:FB:15:09:5A:5E:B2:40:11:40:A0:16:9C:43:79:21:CC:D4:03:39
Authority key identifier: 6D:37:56:D5:40:E5:C1:7F:19:4C:45:CA:47:38:66:5D:51:AC:CB:6C
Certificate issuer: /CN=6d3756d540e5c17f194c45ca4738665d51accb6c
Certificate serial: 01923813F9F37D679506D1536A1A2CBDE7A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.mft
Manifest number: 08CC
Signing time: Sat 28 Sep 2024 10:01:26 +0000
Manifest this update: Sat 28 Sep 2024 10:01:26 +0000
Manifest next update: Sun 29 Sep 2024 10:01:26 +0000
Files and hashes: 1: OS34xgpIU3Qko3Oy19TzuarvrKc.roa (hash: fo+pnDR0lSVVFRCobeGa3d0+dHgr1Wv+Cd4HUCqUrh8=)
2: bTdW1UDlwX8ZTEXKRzhmXVGsy2w.crl (hash: eg5DXMcNeruYFXJJrqnlda/MdrJ2uaGw1165EjfcJSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:38:13:f9:f3:7d:67:95:06:d1:53:6a:1a:2c:bd:e7:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d3756d540e5c17f194c45ca4738665d51accb6c
Validity
Not Before: Sep 28 10:01:26 2024 GMT
Not After : Sep 29 10:01:26 2024 GMT
Subject: CN=3afb15095a5eb2401140a0169c437921ccd40339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:19:a0:d0:1d:5a:ff:8b:81:09:b7:1b:8e:9a:
c2:93:d8:a2:3a:d9:89:4a:43:a2:4d:2b:1d:17:de:
48:c2:19:84:4a:e2:d5:4c:60:a2:7c:52:c9:54:96:
79:42:a7:04:04:ba:f5:e5:c5:92:f2:3f:89:3d:92:
1f:fd:60:4c:82:f6:e1:81:07:f2:19:f7:bc:72:3b:
0f:98:99:6c:ec:e4:e5:33:20:10:59:f3:de:a2:4b:
b1:d7:4b:72:50:c2:5c:61:0e:88:0b:be:18:a0:2d:
87:74:b4:99:1b:00:f8:6b:aa:b2:4f:cc:1a:cb:3c:
f3:6d:91:2d:11:f3:f8:db:f6:93:32:04:a9:e3:08:
17:61:c8:d8:f5:93:26:94:26:f7:45:c1:06:83:ee:
02:2e:3b:76:ab:10:5a:24:cc:50:aa:46:d4:f7:26:
97:01:81:00:83:aa:ed:a8:45:ff:66:38:a9:45:32:
c0:0e:eb:4d:45:98:97:66:40:16:34:4f:88:24:1c:
e2:8e:7b:29:1a:2f:ca:3f:f8:44:df:74:3b:cc:03:
c2:c4:41:57:2b:82:f6:2e:18:c7:4f:30:3b:0f:55:
0b:62:4e:f9:07:b4:56:73:74:ed:a9:14:fa:2c:f6:
7b:7b:95:1e:15:52:d2:bc:26:1f:26:84:a2:4d:d7:
e4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FB:15:09:5A:5E:B2:40:11:40:A0:16:9C:43:79:21:CC:D4:03:39
X509v3 Authority Key Identifier:
keyid:6D:37:56:D5:40:E5:C1:7F:19:4C:45:CA:47:38:66:5D:51:AC:CB:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:4a:8e:fd:18:a2:96:33:19:fa:f3:8d:34:76:5f:eb:50:ff:
4b:1b:b0:0d:92:cc:18:d1:02:45:71:ea:8e:2a:0d:1d:8a:9b:
af:4d:9e:bc:6e:a3:50:5a:ee:85:0a:cf:9d:7f:61:f1:9e:e0:
ea:ee:4d:e2:89:5a:07:39:c4:af:28:9a:24:dc:31:e8:6a:74:
3e:02:6b:02:dc:4a:1f:34:1b:3e:fe:d9:21:cf:eb:47:f2:84:
08:50:45:67:90:f7:e3:ec:80:9a:9f:30:7f:eb:6f:5b:17:b4:
8b:69:0f:44:0e:1a:f8:a8:7f:2f:76:ff:df:71:91:f6:f8:79:
53:9d:32:e5:9f:67:21:93:3d:f0:40:5a:8b:48:64:b3:0c:94:
b6:5e:37:d8:83:02:f4:cc:1f:ec:a5:ca:43:36:b7:0c:c4:a9:
26:40:5e:c3:57:b0:52:30:40:31:29:76:8a:2e:f2:35:68:c9:
f0:ab:80:fb:19:db:e6:da:22:d6:57:a1:e8:df:56:87:4b:2e:
db:6b:45:c8:ca:d6:71:ac:32:19:ce:92:06:7c:73:05:0b:0c:
f8:14:46:53:38:fa:0c:00:4d:14:ca:8c:e4:72:33:e4:dc:a5:
10:3b:59:7a:11:ce:66:c2:7b:ab:5d:b0:31:fc:49:a3:aa:4e:
84:e8:2a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 12:41:55 2024 by rpki-client on console-ams.rpki-client.org