Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.mft
File: bTi1QIMcnNXfSAhRpygGZ-181kc.mft (raw, json)
Hash identifier: +eKZv5mrALy34xscf1z3rYqvFRZjZoVnJlLxezKa9Sg=
Subject key identifier: 99:47:1F:55:5A:72:C5:7A:5C:91:BE:EA:69:B2:68:36:71:5D:FD:67
Authority key identifier: 6D:38:B5:40:83:1C:9C:D5:DF:48:08:51:A7:28:06:67:ED:7C:D6:47
Certificate issuer: /CN=6d38b540831c9cd5df480851a7280667ed7cd647
Certificate serial: 01936A46778EC9C3E4AA623AE0E590563FA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTi1QIMcnNXfSAhRpygGZ-181kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.mft
Manifest number: 079A
Signing time: Tue 26 Nov 2024 21:00:23 +0000
Manifest this update: Tue 26 Nov 2024 21:00:23 +0000
Manifest next update: Wed 27 Nov 2024 21:00:23 +0000
Files and hashes: 1: bTi1QIMcnNXfSAhRpygGZ-181kc.crl (hash: wgfDuTjJiAkcwXgyLloZmfc7sqPPrhw5IoL1Ai4Kt+0=)
2: z5_TECSh3LIW4x1VOykY8-htZF8.roa (hash: It8vQpt2eeCbtz2SCrwWEoclvygcW0J0xwVn1c5UxQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bTi1QIMcnNXfSAhRpygGZ-181kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:46:77:8e:c9:c3:e4:aa:62:3a:e0:e5:90:56:3f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d38b540831c9cd5df480851a7280667ed7cd647
Validity
Not Before: Nov 26 21:00:23 2024 GMT
Not After : Nov 27 21:00:23 2024 GMT
Subject: CN=99471f555a72c57a5c91beea69b26836715dfd67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4e:d3:f7:98:72:67:ab:ac:c8:8f:cc:85:0e:
d6:ec:22:64:ae:a7:fc:ff:f1:1e:4c:7f:12:fc:ec:
08:d6:4b:a1:0f:72:12:10:76:f3:22:63:45:9a:85:
10:aa:dc:7c:64:0d:1c:42:90:48:7c:75:c4:0e:22:
ad:d5:2c:3a:8c:9f:a8:9b:a0:99:f2:6d:50:f4:ad:
5d:e4:f4:81:09:f1:98:25:20:6c:f1:8f:16:55:8a:
db:57:36:8b:c0:27:5c:8b:3b:8f:63:99:8e:3e:e5:
68:90:7b:02:b8:56:4c:1e:b3:70:d4:6c:1f:f5:6f:
cc:ea:2b:bd:d7:e5:96:91:9c:2f:eb:13:3a:fd:81:
d3:8b:e5:d4:53:51:8a:2a:80:6a:df:60:93:23:36:
13:ea:fb:17:42:7b:1e:17:9b:21:78:04:bf:d0:3c:
51:b2:2b:4a:03:a6:45:83:4c:de:10:03:04:19:c6:
9e:da:93:59:87:74:9f:76:a7:c8:e5:c3:a7:d4:2d:
53:26:4d:80:de:b2:aa:32:96:bf:43:3b:79:1d:2e:
54:03:3c:0c:93:c0:f1:71:b7:14:31:6f:59:4c:42:
fb:be:96:97:20:43:ee:b8:95:b4:0a:18:70:9d:c6:
49:1f:4f:b5:d6:ef:08:da:08:0b:1c:6d:8a:d1:0c:
7d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:47:1F:55:5A:72:C5:7A:5C:91:BE:EA:69:B2:68:36:71:5D:FD:67
X509v3 Authority Key Identifier:
keyid:6D:38:B5:40:83:1C:9C:D5:DF:48:08:51:A7:28:06:67:ED:7C:D6:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTi1QIMcnNXfSAhRpygGZ-181kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:8d:bb:ae:7d:11:d2:69:61:aa:2f:6c:af:df:f0:e3:00:65:
ee:3d:98:1c:fa:83:95:1a:c1:40:3f:0d:17:63:30:68:14:f1:
ea:cf:d3:83:fc:11:ac:b6:cc:01:ba:ec:d1:2c:d9:a4:2f:ab:
7d:fb:6f:3c:40:b6:5f:2d:e3:cf:94:bf:b8:7c:27:a9:b1:b8:
36:fc:5c:14:b9:d1:ac:7b:a0:72:ce:c7:8b:54:e3:ef:b8:ae:
3c:42:b0:2e:8d:40:46:34:16:10:00:a1:d5:ee:7a:84:72:0a:
f0:47:16:e2:a4:0a:7e:f7:c8:f2:e0:4b:ad:46:a6:17:7a:dc:
ad:72:d8:1a:26:93:21:39:e4:2c:e7:f2:4e:0d:a2:7f:39:98:
db:c7:2c:ce:50:23:d4:20:b5:01:02:46:ac:ae:b0:b2:70:c1:
81:ab:5d:9b:4b:f3:93:48:f1:7a:3e:cd:84:1e:4a:16:2a:1b:
17:68:8a:c9:ec:27:6d:89:90:e1:8c:07:17:f8:50:02:38:c2:
e1:28:04:cd:cb:f4:59:1d:ec:5b:a5:cc:47:1b:92:a4:2d:f9:
5a:54:8e:34:c6:82:82:77:6e:da:46:ab:98:80:15:02:34:86:
78:55:c7:e0:2e:f8:15:78:66:8d:fc:13:f9:e5:fa:38:eb:a5:
3e:5b:e4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:14:43 2024 by rpki-client on console-ams.rpki-client.org