Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
File: BnhRF5hq2qQ3vsMKK_nxV6klffI.mft (raw, json)
Hash identifier: JeVF/+hNCV/n96dTMe8tMO8Dz+B4YamXHdu8N7EdQoo=
Subject key identifier: 2C:F1:D1:96:B5:2B:65:3D:07:2C:79:37:56:9B:70:E5:42:FE:70:BC
Authority key identifier: 06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
Certificate issuer: /CN=06785117986adaa437bec30a2bf9f157a9257df2
Certificate serial: 01936AB43C1E8EB04233118DC8373149AFD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
Manifest number: 137E
Signing time: Tue 26 Nov 2024 23:00:16 +0000
Manifest this update: Tue 26 Nov 2024 23:00:16 +0000
Manifest next update: Wed 27 Nov 2024 23:00:16 +0000
Files and hashes: 1: 1ot6mxsmtvJJZSpoQ3K5_RdeDoA.roa (hash: Y/01kguj+rJYYQkcEYGkmSlSpA/UVgWoAo7lJOlb1UM=)
2: BnhRF5hq2qQ3vsMKK_nxV6klffI.crl (hash: 6a9UREFhif0FVPNYqC5unn/PIWXuss7roGtXRIKXMvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:b4:3c:1e:8e:b0:42:33:11:8d:c8:37:31:49:af:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06785117986adaa437bec30a2bf9f157a9257df2
Validity
Not Before: Nov 26 23:00:16 2024 GMT
Not After : Nov 27 23:00:16 2024 GMT
Subject: CN=2cf1d196b52b653d072c7937569b70e542fe70bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e0:1f:5b:4c:cc:bc:25:ae:77:cc:d8:1b:f8:
dc:ea:2b:0e:db:08:f9:46:d8:7b:b7:ff:ae:d4:43:
b8:45:91:96:c9:c2:a2:46:77:3d:0a:b6:81:1d:28:
b3:95:5e:2f:f4:f6:ee:ff:d2:64:09:96:3e:f7:30:
78:53:39:12:0d:f6:f4:21:e5:17:40:e0:ac:46:d2:
de:b3:cc:b5:5a:83:33:67:d6:37:dd:43:01:4c:60:
19:24:27:fa:2e:9c:63:a8:e1:f7:b6:9b:7d:16:32:
4c:71:c2:ac:d7:4b:09:c2:32:7e:4e:40:64:92:b2:
af:0b:ed:59:57:9a:34:fa:b6:1a:b4:83:38:8e:cc:
7d:d8:51:40:21:c7:d3:50:93:3f:83:72:01:a6:a6:
a0:5f:5a:85:da:c7:f6:16:b8:38:3f:37:ea:b5:e4:
b9:43:62:4d:4e:e1:3e:e1:e0:c9:5b:40:1f:67:92:
2b:f3:cb:be:dc:e3:ce:db:59:41:07:e6:2d:c2:16:
48:ee:59:c5:84:47:84:2c:fa:77:22:78:a9:f1:3c:
db:5d:1d:7d:d4:9c:be:b7:12:ec:cc:c9:84:87:65:
56:b9:d2:69:9c:df:0a:18:1f:f6:16:36:2f:8c:b1:
ed:5a:e8:5f:2f:f0:09:00:58:70:c5:e3:32:5b:44:
da:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F1:D1:96:B5:2B:65:3D:07:2C:79:37:56:9B:70:E5:42:FE:70:BC
X509v3 Authority Key Identifier:
keyid:06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:e4:a6:8e:cf:db:48:80:bc:a6:91:2a:4a:ca:07:1e:82:38:
e3:f8:28:c1:52:7e:6d:49:32:61:a1:61:22:d9:78:dd:d2:fa:
be:9d:f9:65:37:1e:26:52:f6:b1:35:d3:db:e9:dc:6f:3f:0e:
4a:84:33:84:a1:a9:e2:c5:f6:68:8e:bf:c7:b4:c5:b9:b1:91:
db:96:46:fa:31:5d:2f:fb:3f:83:15:6b:e7:cc:ce:fd:b8:01:
2e:15:c4:de:09:2e:6b:db:bc:96:0b:a3:02:b9:30:b6:59:ef:
65:ac:65:77:58:15:95:d3:68:1c:5a:5b:eb:92:c3:e1:0f:6f:
ae:8e:f7:0c:2d:78:c2:d9:5f:ba:e6:e3:2b:e8:66:78:1b:fe:
ea:41:eb:82:e0:de:c7:7d:61:35:1d:72:c8:64:d9:89:f3:6b:
cb:39:a2:9d:60:d2:53:90:af:b1:9e:94:f1:f6:2b:aa:5d:e0:
a9:13:aa:96:d6:b1:f3:8a:f5:54:2f:17:df:50:69:df:77:c0:
94:40:0b:93:cf:42:62:44:51:a2:4d:64:56:ad:ce:d5:38:c6:
d7:e5:e4:26:2a:0e:34:76:3b:6e:6f:a6:92:d6:5f:5a:aa:7c:
fa:b5:a9:58:6f:4b:6c:f6:d3:c8:60:f5:43:11:63:a8:c7:04:
ed:23:2e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:14:38 2024 by rpki-client on console-ams.rpki-client.org