Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
File: BE1l50JUsl_gDrjqBrtY--aKwZs.mft (raw, json)
Hash identifier: 7UoM/VjPBG72qKbnx4piKn0YR9CBu44CwfzMDlD6JTc=
Subject key identifier: 55:28:AD:BC:25:A4:D9:DE:2E:3A:3F:AD:AF:77:ED:79:02:3D:28:27
Authority key identifier: 04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
Certificate issuer: /CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Certificate serial: 01935877067E4F8F1347628E48EF664C9B8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
Manifest number: 0972
Signing time: Sat 23 Nov 2024 10:00:15 +0000
Manifest this update: Sat 23 Nov 2024 10:00:15 +0000
Manifest next update: Sun 24 Nov 2024 10:00:15 +0000
Files and hashes: 1: BE1l50JUsl_gDrjqBrtY--aKwZs.crl (hash: zuEa075aGgtWmaHWvBucx0IWbHmldwy67BZNtsZt8f0=)
2: WvW-4d7HrlkC8llP_HQMaTVqahQ.roa (hash: ixTrIKMOfPQY3cmMHtjph1379QCRmxEz+fHoOXR6Mp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:77:06:7e:4f:8f:13:47:62:8e:48:ef:66:4c:9b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Validity
Not Before: Nov 23 10:00:15 2024 GMT
Not After : Nov 24 10:00:15 2024 GMT
Subject: CN=5528adbc25a4d9de2e3a3fadaf77ed79023d2827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:67:2d:91:05:a3:7b:24:9a:f4:63:ec:5f:dd:
35:43:53:c3:a8:d5:0d:58:1f:1f:69:2b:67:79:4e:
bd:66:66:c6:81:c5:d7:0b:32:e4:e0:23:a7:ee:3d:
a5:93:75:00:f0:a5:06:a8:8d:0b:71:09:dc:27:2f:
f9:2a:c5:f4:91:e1:5c:7b:00:25:ee:2f:22:8d:43:
85:b0:e2:07:51:97:a9:19:6a:37:da:83:63:1c:0f:
21:13:f8:b1:47:2a:83:28:1f:a7:70:69:2b:1a:ec:
be:c4:47:93:d6:50:46:5c:96:cd:1a:46:bf:a1:d8:
03:95:02:7a:36:c3:26:c0:da:cc:3c:86:ad:38:8f:
60:d8:cf:eb:f5:c7:5f:9d:20:83:4b:18:5f:fa:c0:
5f:9e:c2:81:13:d8:cf:be:6b:ed:32:41:fc:b1:af:
52:88:ee:7d:f9:64:5d:77:63:d7:a1:75:f6:ef:05:
d9:f2:8a:11:df:0a:c7:51:80:57:34:77:3e:87:30:
3b:3a:e5:ff:b8:6d:c5:0c:a8:6a:c0:0e:52:75:5d:
af:a5:ad:d7:d9:c8:43:7e:55:3e:e1:17:11:5c:69:
bb:ef:dd:4b:8e:44:b5:9f:4a:21:8f:ae:6b:0c:a4:
6f:ba:ca:a7:63:7c:82:3c:85:17:75:2a:db:32:35:
a6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:28:AD:BC:25:A4:D9:DE:2E:3A:3F:AD:AF:77:ED:79:02:3D:28:27
X509v3 Authority Key Identifier:
keyid:04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:61:bf:b5:db:4d:38:af:a0:3f:0c:b7:c6:0d:72:d4:99:db:
d5:d3:14:c3:2d:4d:49:0f:24:08:70:7d:d2:08:fc:58:dc:af:
3c:9d:2e:4d:ee:3a:0d:99:b3:57:e0:41:45:df:fe:a0:59:0a:
b7:b5:cd:47:1d:7f:d4:5a:8d:c0:44:2d:ab:b5:05:4f:5b:ae:
d2:07:4c:5a:f0:d5:30:aa:2e:20:e1:ab:2a:da:f7:cc:67:68:
6f:4f:f8:ce:c8:d3:1d:42:9e:2b:3a:bb:54:1e:d5:4d:1e:f0:
b6:c5:27:db:ef:84:3c:a1:e7:f6:a3:51:65:cf:e1:1d:3e:a0:
f6:94:4c:57:4d:e9:70:e8:24:a6:7b:90:29:65:e3:08:4c:73:
3e:eb:21:12:c8:cf:16:77:19:9f:40:ba:1e:1c:de:8b:8d:29:
f7:9e:ff:6d:e8:26:71:85:4d:8d:e5:bc:f4:6e:c8:14:89:c7:
dd:c8:4f:16:65:5c:73:36:43:34:4a:5b:5e:0d:a0:18:2a:8b:
af:8e:92:f9:ad:8d:c1:50:35:c4:19:1b:e1:24:d8:66:8e:cc:
d5:02:0e:47:6c:da:4e:dd:6a:81:a0:1d:e6:fb:72:fb:76:0e:
07:e6:b8:54:fc:0c:d4:b9:50:3d:6b:a6:67:eb:fa:7e:b6:a6:
3a:4c:96:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:06:44 2024 by rpki-client on console-ams.rpki-client.org