Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/6b4YGqvbGVUTomxntiHimGgY0D0.mft
File: 6b4YGqvbGVUTomxntiHimGgY0D0.mft (raw, json)
Hash identifier: PwjbSA1aGcjzpOykGttATMWnIkSPuNQ9pm48WWJutAA=
Subject key identifier: B9:B9:B9:EF:77:12:6B:6B:51:F9:87:77:B6:E1:62:0E:9B:C4:29:65
Authority key identifier: E9:BE:18:1A:AB:DB:19:55:13:A2:6C:67:B6:21:E2:98:68:18:D0:3D
Certificate issuer: /CN=e9be181aabdb195513a26c67b621e2986818d03d
Certificate serial: 01935350D2F875C448A94CF0FE12827BB009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6b4YGqvbGVUTomxntiHimGgY0D0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/6b4YGqvbGVUTomxntiHimGgY0D0.mft
Manifest number: 08D7
Signing time: Fri 22 Nov 2024 10:00:25 +0000
Manifest this update: Fri 22 Nov 2024 10:00:25 +0000
Manifest next update: Sat 23 Nov 2024 10:00:25 +0000
Files and hashes: 1: 6b4YGqvbGVUTomxntiHimGgY0D0.crl (hash: Odp2Al5lWbSSzig0R7Q3CWbcL+eUVck0nk6g4X9MN6s=)
2: QJhXOV55T9ze_YObLppbGVUr_cE.roa (hash: P3l+Xo0RN0zl2r1YOkbXrS8g/MR1vJWtgn3t+aSzkBo=)
3: _QYycUlFukg85tfwDYqJ0EvSum8.roa (hash: 3jdALHgUQimr8TH11+ayjLtfRVHX5FFkIsH93xOgw4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/6b4YGqvbGVUTomxntiHimGgY0D0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/6b4YGqvbGVUTomxntiHimGgY0D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6b4YGqvbGVUTomxntiHimGgY0D0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:50:d2:f8:75:c4:48:a9:4c:f0:fe:12:82:7b:b0:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9be181aabdb195513a26c67b621e2986818d03d
Validity
Not Before: Nov 22 10:00:25 2024 GMT
Not After : Nov 23 10:00:25 2024 GMT
Subject: CN=b9b9b9ef77126b6b51f98777b6e1620e9bc42965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8a:a6:d2:1b:88:93:8f:2a:76:78:00:c8:e1:
70:4d:91:3d:92:60:5c:78:3c:f6:bd:07:cc:d7:ec:
ff:d2:88:39:bb:fb:26:78:53:02:a8:80:5a:17:f6:
f6:bf:05:db:23:11:3a:3a:7e:75:17:37:72:04:8d:
c2:3b:de:6e:fb:2e:c9:2f:0f:a9:5d:34:b1:79:fe:
dd:22:88:39:06:bb:19:d2:5c:3c:60:82:18:83:69:
ca:d1:17:7b:8b:15:9e:6f:ed:4d:bf:5b:f1:6f:57:
77:e9:66:0d:31:0f:3a:b7:69:5b:4b:28:9d:fd:63:
9c:cb:34:10:90:02:65:81:a0:3e:70:cc:ee:c3:1d:
cd:1b:b2:f9:de:0b:ff:18:2c:ee:ac:4d:d6:d9:5b:
98:dc:1b:1a:c5:38:55:1a:ee:48:b3:d5:0c:b0:61:
e4:59:32:92:cb:9a:9b:b7:b2:a6:2b:e8:de:b6:ee:
77:fb:89:dc:67:0d:66:d5:b4:e8:5a:60:34:2a:cd:
98:d6:cd:a1:7a:f3:70:d5:7a:ee:ed:e8:b8:14:16:
4b:30:9a:b5:61:4d:cf:73:4c:0e:f2:f1:80:fd:e7:
84:93:88:32:8a:bc:09:df:9d:aa:74:85:91:9e:e1:
0e:40:9d:3b:25:f9:ee:ab:7b:dd:78:25:09:0a:08:
93:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B9:B9:EF:77:12:6B:6B:51:F9:87:77:B6:E1:62:0E:9B:C4:29:65
X509v3 Authority Key Identifier:
keyid:E9:BE:18:1A:AB:DB:19:55:13:A2:6C:67:B6:21:E2:98:68:18:D0:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b4YGqvbGVUTomxntiHimGgY0D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/6b4YGqvbGVUTomxntiHimGgY0D0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/6b4YGqvbGVUTomxntiHimGgY0D0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:41:e7:ce:b0:29:35:ed:e5:ea:bb:23:09:75:04:4c:a2:a5:
07:fa:84:bc:df:7d:f0:50:89:96:f9:e1:11:db:25:69:ab:26:
4f:15:a3:2e:9e:c1:3c:1b:cc:6e:02:30:6f:55:af:52:4b:c3:
63:16:61:15:28:8d:a1:1f:d9:9d:a5:74:ef:bb:2e:4f:1b:a1:
9e:40:0a:80:c4:9f:e2:f7:d7:b6:8a:db:ef:3e:91:3d:14:fc:
d4:87:23:a2:ec:d1:6b:ba:13:a9:9b:cf:37:de:14:a4:e4:96:
17:f8:65:41:75:20:43:f6:62:db:70:2f:56:a0:c4:6f:5b:27:
cb:79:0a:21:c4:b8:29:b5:4a:24:a0:2f:62:bb:0f:d0:88:32:
e3:43:d2:63:ee:18:eb:86:79:2b:04:aa:cc:33:b0:ff:67:61:
9f:65:80:eb:bf:b9:38:df:2c:e6:9c:a8:b9:cf:56:fe:6b:93:
eb:42:62:75:7f:cc:99:58:89:92:78:1d:e0:a7:e9:8f:bb:3c:
4f:c8:2b:23:5a:57:5c:fc:4f:4e:46:69:db:2e:33:df:27:b5:
9b:d6:63:e6:a0:93:a1:01:96:93:d4:b0:0e:f1:c3:16:f3:bc:
57:68:36:4f:8a:a7:30:be:bd:b0:13:c6:02:25:9b:e8:84:33:
cf:7b:e0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:42:08 2024 by rpki-client on console-ams.rpki-client.org