Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft
File: bgC7pk9Ra41jNaAc8wS4It7hrtA.mft (raw, json)
Hash identifier: 9icy1W/jhxx5YksLWvLH3cniDBxrIiu4BWYB1rGLxEA=
Subject key identifier: A4:07:BE:A0:91:87:50:FF:55:80:AB:AF:B0:84:EE:C4:20:31:0D:28
Authority key identifier: 6E:00:BB:A6:4F:51:6B:8D:63:35:A0:1C:F3:04:B8:22:DE:E1:AE:D0
Certificate issuer: /CN=6e00bba64f516b8d6335a01cf304b822dee1aed0
Certificate serial: 018F882464D29E7F6E2E4D1C888EFC6309EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bgC7pk9Ra41jNaAc8wS4It7hrtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft
Manifest number: 1176
Signing time: Fri 17 May 2024 20:00:37 +0000
Manifest this update: Fri 17 May 2024 20:00:37 +0000
Manifest next update: Sat 18 May 2024 20:00:37 +0000
Files and hashes: 1: bgC7pk9Ra41jNaAc8wS4It7hrtA.crl (hash: far7ogc+XotSsGFa1U+NDBYA02oIhBTMi1CFOF3T9Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bgC7pk9Ra41jNaAc8wS4It7hrtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:24:64:d2:9e:7f:6e:2e:4d:1c:88:8e:fc:63:09:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e00bba64f516b8d6335a01cf304b822dee1aed0
Validity
Not Before: May 17 20:00:37 2024 GMT
Not After : May 18 20:00:37 2024 GMT
Subject: CN=a407bea0918750ff5580abafb084eec420310d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:84:6c:05:43:3f:d4:38:26:7e:d1:3e:ed:26:
bd:c4:eb:a3:a0:ed:0c:91:e3:87:af:6c:37:f9:c0:
e0:76:09:81:d2:58:bf:c7:e1:8a:7c:79:1f:0a:c8:
7e:32:f4:73:a7:42:2a:67:fc:91:e8:0a:9e:12:23:
f8:50:ef:51:24:0d:59:9c:72:ec:44:a7:10:31:3c:
a0:23:e6:a2:ac:70:c1:68:a3:6d:05:ce:e0:82:21:
95:52:7a:77:42:e2:bd:c2:2b:23:f8:94:fa:a5:30:
82:68:31:8a:1a:29:7c:eb:5c:fe:35:36:ae:51:13:
8a:8b:59:86:3f:df:f2:ef:f5:45:6a:68:8d:72:7a:
09:1e:de:20:80:ff:7b:6f:f4:81:65:e7:51:bf:4d:
f2:ac:6e:e7:4e:9e:e2:29:5a:65:e0:61:7e:7e:7c:
49:f9:c8:cb:d5:86:01:ed:47:35:0a:a8:04:b9:4d:
31:39:f4:7c:f0:35:ec:02:07:2b:cb:ca:72:da:87:
96:3b:92:28:26:d0:51:03:32:7d:bb:75:82:c9:f2:
98:d2:95:e5:56:c9:0f:03:30:e0:9f:2a:aa:28:49:
9c:b1:95:ce:84:4e:76:b4:8c:47:93:0c:48:94:ee:
2a:65:0c:af:8b:87:25:69:50:b1:19:61:a5:36:82:
fa:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:07:BE:A0:91:87:50:FF:55:80:AB:AF:B0:84:EE:C4:20:31:0D:28
X509v3 Authority Key Identifier:
keyid:6E:00:BB:A6:4F:51:6B:8D:63:35:A0:1C:F3:04:B8:22:DE:E1:AE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bgC7pk9Ra41jNaAc8wS4It7hrtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:86:97:a2:99:17:89:1f:87:0b:d9:c7:a2:35:67:49:04:0d:
61:bf:7b:f7:15:dd:68:27:65:1d:90:18:06:f8:18:b3:55:e1:
94:11:34:60:fe:d8:9d:36:57:a0:4a:a4:7e:40:71:88:ec:76:
00:b3:31:dc:d8:be:56:ff:40:f7:dc:17:18:70:60:dd:f8:22:
c4:46:b3:7d:d5:c4:f5:2c:d4:f8:eb:81:4c:82:35:bf:d7:a3:
98:34:e6:bb:25:6f:28:88:e2:c7:93:b4:43:59:48:d4:ad:87:
c0:a1:ad:90:15:50:47:ff:bd:04:df:38:ff:0d:a0:92:34:37:
c4:57:71:a9:22:c6:ac:b7:a4:9d:e2:7f:ec:2d:a1:09:b3:64:
a9:4e:ed:b7:95:68:b5:87:e8:db:8d:c4:e5:d9:62:e5:f9:59:
72:c2:4d:c1:6e:81:00:b4:3a:e9:09:53:19:36:c7:e8:6d:4a:
6d:6e:3c:6c:8b:6a:c4:f0:81:2e:8e:40:4e:be:77:af:71:e8:
93:c1:fd:06:0e:4c:1d:13:60:f3:a0:c6:ed:ec:88:b7:b9:8a:
48:1d:1c:ce:27:b2:d5:19:aa:44:c6:72:54:53:41:d7:56:94:
80:36:1d:de:ad:86:bf:11:f3:fb:c1:86:64:70:8b:7e:1e:6f:
a8:f7:f5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:59:26 2024 by rpki-client on console-fra.rpki-client.org