Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
File: BKSudHHI82IdUyVtdfEQt0iZeJg.mft (raw, json)
Hash identifier: /Bc4sgr6stt1o/B4YQz1TVBI/nVgA929BhFcLOzdl5Y=
Subject key identifier: C9:C8:C3:11:14:53:3F:17:B0:E0:0E:F3:35:49:0E:29:D9:66:5E:5C
Authority key identifier: 04:A4:AE:74:71:C8:F3:62:1D:53:25:6D:75:F1:10:B7:48:99:78:98
Certificate issuer: /CN=04a4ae7471c8f3621d53256d75f110b748997898
Certificate serial: 01938B895CD5B69CB0D3D3D416B4E07113DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
Manifest number: 138C
Signing time: Tue 03 Dec 2024 08:00:55 +0000
Manifest this update: Tue 03 Dec 2024 08:00:55 +0000
Manifest next update: Wed 04 Dec 2024 08:00:55 +0000
Files and hashes: 1: BKSudHHI82IdUyVtdfEQt0iZeJg.crl (hash: 21kFlgPTr1qi5E7BksrRsUlvBZPxAinFTWDbbnolSd0=)
2: T9dES4QA5UEgCPCOXVzLkXdkMG0.roa (hash: SpDZ4AG7OAR9Qa60UnrzOuasvQOTtyem6cFcydE31yA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Dec 2024 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8b:89:5c:d5:b6:9c:b0:d3:d3:d4:16:b4:e0:71:13:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a4ae7471c8f3621d53256d75f110b748997898
Validity
Not Before: Dec 3 08:00:55 2024 GMT
Not After : Dec 4 08:00:55 2024 GMT
Subject: CN=c9c8c31114533f17b0e00ef335490e29d9665e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:b0:74:39:3d:60:51:0f:b1:cf:6b:01:d5:7c:
53:b7:27:a4:ed:9d:e2:3b:81:b6:fb:1f:07:d4:d0:
7e:22:d9:84:ad:4f:ff:13:8e:ff:42:e7:49:1c:a1:
a6:bc:f2:d1:39:c4:bc:ae:ce:3a:82:5f:a3:35:17:
c2:3b:1a:99:8c:80:44:6e:20:45:5d:b4:7f:c4:9f:
3a:a1:ce:16:73:4d:73:68:31:3d:38:7e:e4:5b:a1:
7b:2f:13:69:a2:b2:4a:d3:6b:99:08:6f:66:91:6f:
89:0b:2b:71:d0:40:e9:ec:f7:c3:28:cb:50:7b:15:
c9:54:61:77:40:f0:88:ec:70:68:d0:80:5b:87:95:
80:dc:16:f9:41:3a:8a:6b:d2:ad:07:f2:52:92:df:
ea:1e:e8:ad:56:fb:0e:06:7b:01:a7:c9:6e:01:8a:
96:72:04:28:ee:b9:18:fc:21:b4:d2:26:4f:51:18:
8e:13:74:0a:86:38:4d:13:d1:ff:be:89:94:54:fa:
fa:af:7a:e6:d4:d1:2b:80:63:a6:2e:f0:7f:4c:5e:
15:9b:32:d1:e4:16:db:21:1e:43:c4:d5:c2:ad:b0:
d4:63:c2:0f:cb:8f:1e:a2:00:d9:56:d3:3b:3b:3d:
79:de:f8:8a:e3:d8:b8:34:97:4f:77:d1:ed:d4:1f:
9d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C8:C3:11:14:53:3F:17:B0:E0:0E:F3:35:49:0E:29:D9:66:5E:5C
X509v3 Authority Key Identifier:
keyid:04:A4:AE:74:71:C8:F3:62:1D:53:25:6D:75:F1:10:B7:48:99:78:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ce:42:17:a1:32:ef:11:fd:70:c7:5d:b2:17:88:4d:8d:fa:
a6:14:f6:f2:5f:da:cd:0c:62:b2:0c:d9:93:b1:47:19:53:52:
a0:31:70:22:8b:34:cf:60:26:e4:26:7b:dc:53:48:9c:85:c8:
95:8a:44:f2:cf:bf:e8:25:41:07:34:57:46:2f:7f:9d:2a:e7:
1f:7e:f3:7b:3d:f8:cb:a4:7b:0e:43:01:36:02:c7:3f:03:af:
66:19:1a:53:b9:a4:fe:a8:87:df:12:e1:97:8a:5d:07:59:01:
e3:9c:28:6b:e0:dc:9a:86:a2:de:02:ae:0d:fe:eb:61:77:cb:
d9:78:03:1f:05:94:f2:62:6f:12:a7:f5:d6:57:25:96:04:80:
f5:e3:18:f7:67:50:38:90:5c:3e:77:0c:c6:31:1d:76:49:2d:
e6:fd:e2:d5:55:f2:21:0a:dd:8a:11:d9:e5:96:03:2d:e1:03:
0c:9b:7a:2e:e2:7e:4f:94:77:ed:2f:79:bd:33:7f:22:50:dc:
c6:98:d5:56:05:b0:02:fd:a0:36:1e:3a:1f:ed:03:68:85:25:
c4:71:7c:72:b6:cd:77:9d:7e:05:a0:7e:67:42:77:25:35:85:
30:ec:a3:88:e1:85:fa:1d:f0:66:b7:ef:da:24:e4:99:6d:e5:
36:1a:5e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 18:09:33 2024 by rpki-client on console-fra.rpki-client.org