Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
File: BmNp4nBctDPbBlirZm0ItnsVUdw.mft (raw, json)
Hash identifier: dCOi3MDo4j6gyLpxsNF82wd/rBUk033KtvkC1UPYQ/c=
Subject key identifier: 0D:85:B3:DD:41:BF:7C:22:DC:3F:A3:7D:B4:B0:1F:EA:4D:83:C5:13
Authority key identifier: 06:63:69:E2:70:5C:B4:33:DB:06:58:AB:66:6D:08:B6:7B:15:51:DC
Certificate issuer: /CN=066369e2705cb433db0658ab666d08b67b1551dc
Certificate serial: 0193640D72AED64D2D190E2E09E1566F8BFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
Manifest number: 129C
Signing time: Mon 25 Nov 2024 16:00:22 +0000
Manifest this update: Mon 25 Nov 2024 16:00:22 +0000
Manifest next update: Tue 26 Nov 2024 16:00:22 +0000
Files and hashes: 1: BmNp4nBctDPbBlirZm0ItnsVUdw.crl (hash: qRC0YFPTHjDD0qtsgYc44LpYgNbXMIgEGqVH5mi/qpY=)
2: o9LAGdnvkUiS-XyaW7g-a08TSt4.roa (hash: /j1fiOWQh3tZcIVXTVdMbSON7jLj63TMRSzEaVT42u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:64:0d:72:ae:d6:4d:2d:19:0e:2e:09:e1:56:6f:8b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=066369e2705cb433db0658ab666d08b67b1551dc
Validity
Not Before: Nov 25 16:00:22 2024 GMT
Not After : Nov 26 16:00:22 2024 GMT
Subject: CN=0d85b3dd41bf7c22dc3fa37db4b01fea4d83c513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:16:67:50:37:4e:4c:93:8e:76:75:7e:61:1e:
94:48:a9:92:6a:59:9b:47:c2:53:59:8c:b8:ce:49:
99:79:04:96:ad:14:c3:2b:23:bd:b8:04:47:3d:96:
61:d3:b0:d2:c9:9d:a0:68:e9:8c:cb:02:93:7d:e3:
f1:5d:f2:1b:d3:79:47:9a:5f:ed:de:0c:7d:75:e8:
30:3e:31:2f:cf:70:ca:4a:4a:36:5c:8b:5d:e4:f1:
91:0e:6c:c2:f9:a3:60:c2:13:0c:6c:5d:7f:77:5e:
b7:28:b6:40:20:b1:04:84:46:5f:b7:0c:98:bd:78:
09:38:0e:b7:80:00:20:03:42:df:2e:80:69:4b:5e:
6d:4f:12:4e:27:52:52:a2:5e:fa:1b:59:b6:2a:1c:
72:e7:47:09:cb:45:70:30:95:9a:db:08:8b:6d:60:
12:f0:80:67:27:3c:7d:be:bd:33:af:15:5d:5f:06:
19:69:78:dc:66:da:33:87:8b:6c:d1:3e:1b:33:cf:
8d:65:9a:c6:14:24:a9:1d:75:5f:21:09:28:d1:73:
e1:f0:da:0b:6a:62:22:7b:82:f1:ff:2a:54:2b:d7:
73:de:5f:09:22:7a:49:78:9e:73:23:be:93:73:e5:
58:ce:37:e7:84:c1:43:9f:8a:e6:f7:84:f6:bc:87:
a0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:85:B3:DD:41:BF:7C:22:DC:3F:A3:7D:B4:B0:1F:EA:4D:83:C5:13
X509v3 Authority Key Identifier:
keyid:06:63:69:E2:70:5C:B4:33:DB:06:58:AB:66:6D:08:B6:7B:15:51:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:50:de:ca:05:95:8f:c2:91:a2:cb:7b:16:78:4a:e6:88:18:
5e:91:07:18:60:89:c3:33:14:eb:5c:48:1b:79:99:46:18:f8:
c5:93:64:d4:f2:f9:47:93:59:63:74:00:80:24:84:2c:d4:42:
cc:b7:a4:fc:b7:01:b5:13:49:53:4b:f6:cf:46:90:87:2c:65:
16:63:a8:d6:15:80:39:b0:fe:af:7e:ff:14:30:00:41:5a:7f:
1d:d6:d6:b3:ce:7b:b4:16:af:dd:97:8d:84:12:9d:13:16:e4:
56:93:ea:e2:05:e1:f5:e9:79:5d:b7:70:af:ec:c5:34:7e:94:
0d:d9:e5:35:c8:93:c0:ec:07:79:20:df:57:4a:6a:cf:eb:e0:
1b:a8:62:15:87:b9:b0:c9:82:e5:24:e4:09:36:cd:a5:e5:84:
89:09:91:9a:6a:2b:a4:8d:94:35:8c:9e:d0:eb:03:36:df:31:
d4:73:3e:f3:dd:fe:3a:0c:4b:17:9d:ba:1f:90:61:51:9f:07:
db:7a:a7:1f:23:e5:ba:9c:8a:99:a1:49:42:ae:c9:97:c8:bb:
91:3c:7a:19:ef:be:e1:5b:bc:ce:91:c3:8b:6d:6d:19:f2:99:
2b:8e:1f:d6:77:7d:20:16:ff:84:f2:e5:83:6e:5a:3e:b7:90:
b5:52:a9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:29:13 2024 by rpki-client on console-fra.rpki-client.org