Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft
File: BADXfvnqDtKVK-L2D6067MLhaKw.mft (raw, json)
Hash identifier: TwtwDhOF03MTCYWPQNb764QGaTrtuM+c45lSRtOUCT8=
Subject key identifier: 91:21:57:02:3B:49:67:AA:BB:E8:14:CB:D8:11:1B:1F:75:92:8F:1B
Authority key identifier: 04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC
Certificate issuer: /CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
Certificate serial: 018FF55D334E2719A75FA235B9DEB4D9A5D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft
Manifest number: 04D1
Signing time: Sat 08 Jun 2024 01:01:16 +0000
Manifest this update: Sat 08 Jun 2024 01:01:16 +0000
Manifest next update: Sun 09 Jun 2024 01:01:16 +0000
Files and hashes: 1: BADXfvnqDtKVK-L2D6067MLhaKw.crl (hash: pbgqZrx12OYkFCecTjlvyLyk67akV/foKJK/3fWZpCE=)
2: awnl9XiKuu9j3tKnu9qaIIdiCnI.roa (hash: 7jjlWXHPen+OV9Ao6qJem18ucqiXa3Jz2AcxNEsWTqA=)
3: p04K3WYTMOqWR1kmBzCP1x4muVE.roa (hash: 9/L3n4c7XKE0BT/9Iay7ren7cZ9Rv4un68IZJ8T27H4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f5:5d:33:4e:27:19:a7:5f:a2:35:b9:de:b4:d9:a5:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
Validity
Not Before: Jun 8 01:01:16 2024 GMT
Not After : Jun 9 01:01:16 2024 GMT
Subject: CN=912157023b4967aabbe814cbd8111b1f75928f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1f:1b:ee:df:36:44:68:3e:ea:c6:50:f6:50:
0a:35:5e:ab:56:0e:43:3b:8c:ad:3f:b5:6e:fd:59:
d4:d4:77:92:4b:8d:77:d8:be:0a:78:fd:ab:d3:1f:
71:38:f3:f9:86:9a:4e:4c:9b:09:28:5a:a0:d0:c9:
83:19:58:fd:f9:d5:89:91:75:23:4a:ac:85:40:93:
d1:af:d0:3c:6d:34:c0:37:63:68:c4:85:9e:9b:a9:
c9:95:33:ec:69:cb:d5:28:69:61:79:34:28:74:93:
e2:5f:78:8e:d2:0f:03:1b:4d:9c:eb:eb:f5:7a:dd:
65:79:4b:04:03:51:8b:77:92:81:81:86:8d:96:92:
08:f5:b1:42:8c:8c:55:e8:9a:48:94:f8:3f:f1:7d:
2d:e3:c9:e7:66:c2:e3:37:d4:7e:e0:ba:7c:3b:67:
71:8a:ce:79:25:25:2e:1a:4f:fd:ea:1e:41:de:ea:
0b:c0:93:d8:c7:2a:f4:60:42:e8:2c:cd:81:a7:55:
9b:f5:4a:43:0e:18:f1:f5:9c:25:5d:01:65:fa:7a:
e5:1e:d8:a0:e5:21:9f:e7:78:3c:3b:18:bd:61:ed:
0a:15:1f:3e:5f:73:a0:c7:6a:1c:02:a6:b3:53:32:
2c:bc:3c:5d:e5:f2:d2:f4:8e:99:9b:c9:6e:e1:5f:
3d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:21:57:02:3B:49:67:AA:BB:E8:14:CB:D8:11:1B:1F:75:92:8F:1B
X509v3 Authority Key Identifier:
keyid:04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:c1:c5:7a:a2:81:b1:3e:b4:0b:e0:55:8d:15:9b:f7:81:b9:
0f:4f:b9:af:84:e8:f5:f8:2f:1c:99:5f:29:e7:89:70:cf:7c:
df:13:66:65:6e:85:6b:b7:cd:b1:f8:e5:b0:02:39:02:81:e4:
9d:10:62:e9:98:39:55:b1:dc:06:6a:87:12:f9:a0:fa:7f:e2:
20:3e:b6:1c:b2:1b:b8:76:91:a9:09:87:df:d2:48:2a:84:66:
f3:c9:2c:e6:fa:2a:d8:dc:ce:5c:80:77:5e:b4:70:3c:06:17:
cc:49:c2:6f:8b:49:ed:01:b1:cd:32:ba:25:cc:c1:28:ae:66:
50:f5:7f:9e:a3:d8:0e:ed:31:a0:56:5e:42:51:7c:13:e2:03:
56:2c:67:84:73:88:3b:14:1f:dc:d6:0b:82:1d:ac:73:ec:66:
cf:ca:5a:07:6c:09:28:fb:db:93:0f:a8:4b:21:23:c5:06:b7:
69:77:2b:21:a6:62:19:fe:99:a0:1c:12:47:1c:f3:9f:c2:8a:
fd:71:1c:56:e6:ce:5e:a0:e0:11:d6:87:24:03:16:cf:3a:45:
2d:6e:69:5c:1e:36:20:f2:0a:72:dc:fd:65:56:60:2a:9d:11:
f5:d4:6e:d6:8a:2c:8f:d9:f0:ea:98:c9:82:05:64:56:0b:2c:
35:a3:18:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:17:59 2024 by rpki-client on console-ams.rpki-client.org