Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
File: BGWHkB8TB5vtiYL2KendFUaM_vE.mft (raw, json)
Hash identifier: iNHWa799yF9uKGRTwCFbRpqOzo/CC5frES3wKKKuDoc=
Subject key identifier: 2C:85:87:B3:B7:F4:90:A7:3E:A1:75:33:BC:43:1B:5F:BB:B8:58:71
Authority key identifier: 04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1
Certificate issuer: /CN=046587901f13079bed8982f629e9dd15468cfef1
Certificate serial: 019365FE1692938E79E53D49AC88C4F7DF77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
Manifest number: 0D6E
Signing time: Tue 26 Nov 2024 01:02:50 +0000
Manifest this update: Tue 26 Nov 2024 01:02:50 +0000
Manifest next update: Wed 27 Nov 2024 01:02:50 +0000
Files and hashes: 1: BGWHkB8TB5vtiYL2KendFUaM_vE.crl (hash: rjcfkrcPePxnyMUHTtBR+xrWLYiAOPjSeGpyAqrN0og=)
2: JI5BsNXHahWy4QexKMedtWYzOAc.roa (hash: 3hcHDeIGOIXdjeNZw6+oIBE6iv91gdqUqHMfveUmLYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:65:fe:16:92:93:8e:79:e5:3d:49:ac:88:c4:f7:df:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046587901f13079bed8982f629e9dd15468cfef1
Validity
Not Before: Nov 26 01:02:50 2024 GMT
Not After : Nov 27 01:02:50 2024 GMT
Subject: CN=2c8587b3b7f490a73ea17533bc431b5fbbb85871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:96:b2:c9:03:a5:db:d9:43:20:3c:12:e9:fd:
15:ca:be:46:e0:03:ac:8a:25:e7:b3:c2:a4:ca:8b:
fb:cd:cf:5e:5c:ac:34:92:1e:4c:e7:2a:b4:af:0a:
ce:4a:70:09:15:d3:95:d6:aa:ef:5b:88:83:60:33:
37:e2:b7:dd:a6:a1:52:c8:53:81:4d:74:ea:d7:d1:
02:b5:f3:ff:58:c3:e0:94:d0:43:a9:cf:65:ea:58:
94:f4:0d:ca:f3:32:48:db:4f:0a:e5:46:0c:1a:72:
ae:67:8f:48:23:62:a8:ba:80:e9:c1:93:9b:ad:68:
c0:18:36:5f:df:6a:52:c4:31:f3:54:60:c4:05:53:
b3:f0:84:3d:ae:64:71:4c:f1:b3:a3:6d:76:a3:7e:
5e:30:0c:29:ec:c4:7a:95:0a:37:1a:97:6c:ff:19:
c8:c6:1f:37:dc:a5:0e:5f:8c:93:a0:3d:a4:cb:6e:
ad:1e:57:b2:20:71:29:8f:85:c9:47:63:21:65:e9:
e5:13:6b:85:b2:33:60:11:eb:84:20:66:42:d3:06:
98:18:dd:ae:f9:b9:83:26:39:17:93:f6:68:a4:9e:
44:f8:7a:bb:69:7a:81:54:20:b2:4a:35:7b:f4:fc:
1b:f4:82:26:db:1a:67:a3:9f:a9:d5:e8:91:de:42:
28:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:85:87:B3:B7:F4:90:A7:3E:A1:75:33:BC:43:1B:5F:BB:B8:58:71
X509v3 Authority Key Identifier:
keyid:04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:2b:e7:3e:ea:b9:db:0a:6d:a1:ff:67:06:8c:39:b2:b2:ca:
69:35:74:87:f6:2d:45:db:bf:55:8a:66:3d:a4:1d:d9:e0:cc:
09:df:0d:52:2a:be:d1:2d:1e:76:2d:23:b8:b1:4c:47:08:33:
1d:ef:65:d9:75:52:0f:d4:9c:b7:88:62:93:71:95:2c:8c:81:
e8:41:1f:fb:2b:4a:d6:d9:18:59:99:b6:d5:5c:8d:72:2f:c5:
c9:5a:a0:37:9e:50:42:cc:72:fa:af:9a:bf:74:2e:09:55:0d:
fe:f1:5f:a7:cc:d5:38:0a:09:6f:12:98:f5:89:d3:19:aa:b5:
45:63:f7:84:5f:ac:e7:d8:c8:56:73:8b:49:d0:78:bc:10:fa:
e6:af:2f:60:10:65:fc:b0:0b:ee:83:31:ec:81:8e:ef:09:0f:
9f:a9:da:20:7b:19:b8:9c:e6:ef:0c:5e:8b:0c:d9:d7:e8:d4:
e7:92:2e:8b:24:77:f6:c7:bd:31:1b:64:02:40:58:93:70:24:
dd:19:a8:ae:3f:eb:25:6f:50:11:65:bf:e9:2a:21:c8:a8:2b:
eb:83:84:9a:95:ed:35:d0:16:02:86:6a:f3:d9:c0:23:26:ab:
fc:0d:e1:66:71:fc:9c:ac:70:95:11:94:54:75:c0:01:c4:5b:
0b:29:88:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:51:43 2024 by rpki-client on console-fra.rpki-client.org