Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
File: BnhRF5hq2qQ3vsMKK_nxV6klffI.mft (raw, json)
Hash identifier: XcsWXMG9PDiDkb8/Tk/mXdgcpqNnE9TA5dxkkFQLaSs=
Subject key identifier: 27:CC:37:8A:8A:49:65:48:81:7D:F0:93:C8:60:D5:DF:8D:56:64:88
Authority key identifier: 06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
Certificate issuer: /CN=06785117986adaa437bec30a2bf9f157a9257df2
Certificate serial: 018F313D93F23091D8061FD15AA0772CBB80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
Manifest number: 114E
Signing time: Tue 30 Apr 2024 23:01:10 +0000
Manifest this update: Tue 30 Apr 2024 23:01:10 +0000
Manifest next update: Wed 01 May 2024 23:01:10 +0000
Files and hashes: 1: 1ot6mxsmtvJJZSpoQ3K5_RdeDoA.roa (hash: Y/01kguj+rJYYQkcEYGkmSlSpA/UVgWoAo7lJOlb1UM=)
2: BnhRF5hq2qQ3vsMKK_nxV6klffI.crl (hash: Iu6y1HC/c4w3lBwumqy5HJwmD80BdN+jNN8m8H8eWXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 May 2024 22:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:31:3d:93:f2:30:91:d8:06:1f:d1:5a:a0:77:2c:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06785117986adaa437bec30a2bf9f157a9257df2
Validity
Not Before: Apr 30 23:01:10 2024 GMT
Not After : May 1 23:01:10 2024 GMT
Subject: CN=27cc378a8a496548817df093c860d5df8d566488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dd:b0:3d:77:1c:c6:a0:36:12:88:76:fa:6b:
5e:c8:f6:b3:7a:5d:b1:5c:d8:b0:c0:46:10:be:de:
a1:a1:69:0f:e5:bb:bd:2d:80:1b:f9:c7:34:a0:06:
7a:93:f6:06:42:42:f8:ea:6c:0c:79:95:1e:81:61:
81:96:80:7a:39:dc:51:35:8d:26:ea:97:f3:6b:3f:
a6:f3:84:42:d7:d1:29:7b:d7:b7:9d:3c:42:a7:fe:
10:df:d8:cd:c8:e3:3f:84:d1:61:fb:33:9b:60:38:
b5:57:f5:ca:7c:05:81:6e:c0:a3:45:a5:5e:26:19:
83:3c:d7:8c:47:8e:aa:e4:38:9b:99:11:b9:0c:9f:
77:ba:81:0a:0c:cf:51:24:ac:3d:af:a6:05:8f:7b:
31:23:9c:7e:37:30:0a:5c:70:32:3e:ab:f3:1a:aa:
c2:d4:29:d8:ae:71:34:2f:3b:ca:e6:c2:83:f4:9a:
13:fb:80:ec:7b:c4:65:25:b3:cb:6f:c8:43:de:2c:
bb:6b:c4:e9:0d:52:24:a8:9e:8b:4e:e3:42:a5:9c:
dc:d1:5a:5d:39:fe:03:88:89:61:f3:6c:bc:80:b7:
ed:c6:f2:c1:f1:be:32:a0:c1:70:10:85:b1:50:8f:
24:90:e6:8c:24:cf:f7:ec:fb:0b:bf:4b:14:d6:67:
49:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:CC:37:8A:8A:49:65:48:81:7D:F0:93:C8:60:D5:DF:8D:56:64:88
X509v3 Authority Key Identifier:
keyid:06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:bc:ea:e7:cb:44:b5:de:cb:a7:cd:bf:2f:80:2b:a4:a3:d6:
24:53:cc:eb:ec:b9:bf:fc:b3:bb:e4:c0:f5:4a:34:bd:ba:a3:
8f:30:5d:05:e0:15:6c:7c:3b:5b:df:fb:89:ef:e4:4a:91:85:
b4:f6:92:9d:a2:2c:09:e1:d9:4d:c4:9a:1d:71:30:04:95:ba:
7c:f1:1f:40:46:7d:cd:3d:eb:94:8f:7b:ea:34:34:7f:90:82:
6e:3c:7e:52:2c:40:fe:2a:24:e8:9b:64:3b:5e:18:a3:b2:c8:
f9:69:b5:3d:1f:42:bd:e8:fc:b5:77:9a:cc:af:fe:a8:26:b6:
5b:8c:09:a0:02:b2:30:f5:96:57:82:6a:de:e2:9e:82:e3:88:
0e:d3:2e:55:dd:0b:a9:4f:81:da:58:39:33:49:25:c6:ab:51:
c2:6e:a2:f0:dd:d1:67:e7:f5:0c:b2:27:c1:78:c6:7b:b9:fa:
83:79:8b:e4:48:a1:fa:da:50:bc:e6:f1:73:48:96:24:61:7b:
84:79:93:76:20:dd:9b:43:8c:65:e8:40:82:43:87:40:bd:3c:
04:38:d3:f7:2b:40:96:0c:8d:cb:ed:55:22:d6:a6:21:37:65:
b4:da:fa:41:1c:8b:32:a3:fb:87:f6:ea:96:ac:b1:fd:f9:04:
93:88:52:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 02:54:18 2024 by rpki-client on console-ams.rpki-client.org