Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
File: bds4s0PaLRGTCe2qGceniHAyfr4.mft (raw, json)
Hash identifier: rPxUVXhcf+mSxzpL3SjCtwMSaHs/75uIHEb22CEYmWo=
Subject key identifier: 1F:D6:20:64:46:2D:39:D1:BC:57:F7:FC:98:3C:6D:49:85:AE:D4:83
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 018F877F4E455A1E213F01BF0E027C642CBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
Manifest number: 11CA
Signing time: Fri 17 May 2024 17:00:18 +0000
Manifest this update: Fri 17 May 2024 17:00:18 +0000
Manifest next update: Sat 18 May 2024 17:00:18 +0000
Files and hashes: 1: 3IvwZQtmrsCjl8Rtbv4N6XGscls.roa (hash: zfR4S3qnZMcaTowLHaiNWbnbIX76wfbyA2+mYttjxAQ=)
2: 6okKzfTezEQ7gvuDA2dShIEiEAE.roa (hash: At8kJkWwcNFQH0tfiv+1oDDrsuCW/3XglWD0SrPvWJY=)
3: HbHnvstxQWLtzGFXjA47WD3WMXg.roa (hash: 88tbEddozTNXpSciptmdvZeuHtkYXE/6tSM+9O2iPMU=)
4: Mft1B5scAtSQEHGUCBXl8FoxZm0.roa (hash: L9ADki8Y/a59ZVXQROr4fsjLI8Z/BO28dqBzl9XhpjY=)
5: _Zs5dE3rtK1TTG3_LHJI6Wb1b_8.roa (hash: fSNx1iyrd30OwohAZQ6ECYFOfJckOvNBtNz3nyH9oco=)
6: bds4s0PaLRGTCe2qGceniHAyfr4.crl (hash: K06Z6NOGXDaYVtLVM55plTfAXGdKm7GCZ8GVkUs7vmI=)
7: bnc1YW6byzTqgQKrvwDWerCkmEY.roa (hash: USijfAE9doJtXkVHHuBj0XEIKqKBT2IMBfO61EZAw3Y=)
8: nSbgjJcupK6sAg0Qy8uJLJUhQFE.roa (hash: hAnfSHHLhurwy7TGdCsTpbBDjRH9a8XxcWmbkNKNW6M=)
9: sfChRx2c-0nb4F0ipZxOCK9lb5s.roa (hash: udHFJQ2e/4zFqGOtuIUuD1UvTPnZiUm6w0pOQ999PV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:7f:4e:45:5a:1e:21:3f:01:bf:0e:02:7c:64:2c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: May 17 17:00:18 2024 GMT
Not After : May 18 17:00:18 2024 GMT
Subject: CN=1fd62064462d39d1bc57f7fc983c6d4985aed483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:18:bd:a9:9f:77:18:f8:bd:c7:7d:40:cd:de:
f9:80:2b:ac:d5:d3:af:2c:17:e5:c2:6b:a8:a1:aa:
17:f4:4c:9e:5b:5b:57:ea:6b:b4:a5:b7:e6:16:e2:
be:29:cc:f8:66:ee:e5:90:a7:f1:9c:49:35:a1:55:
40:58:bf:5e:ea:31:69:9f:e9:be:34:79:60:95:8b:
91:52:27:5f:9c:c4:8c:65:4d:1c:a3:57:95:a4:08:
49:8c:6a:a3:f9:08:5e:0e:1d:58:4e:25:03:2a:09:
66:d4:7b:27:f0:d3:04:e1:04:c5:eb:d8:50:6a:f6:
22:77:91:db:2d:88:e5:e3:c2:ae:94:51:39:3e:13:
ac:78:73:41:ee:38:d9:83:52:ae:68:ea:50:6d:a7:
49:9c:19:b8:f9:2e:33:ca:02:72:cb:7e:50:dc:0f:
82:a0:9a:52:7d:a5:c2:f4:ef:34:6e:0e:7c:02:16:
d6:fe:ff:9f:e3:5b:4c:ee:3f:30:b2:ed:07:cb:27:
a4:cb:66:93:6d:61:e4:6f:6e:08:b2:cf:74:d5:68:
eb:89:9c:00:e0:94:1a:48:26:a5:e3:c0:65:2e:50:
da:44:c6:da:34:76:4d:89:c6:31:46:2e:36:68:57:
cd:78:75:7a:d3:82:69:2c:dc:8e:83:99:d5:04:de:
6a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D6:20:64:46:2D:39:D1:BC:57:F7:FC:98:3C:6D:49:85:AE:D4:83
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:fd:5c:30:b6:24:20:6e:ba:d1:5e:28:21:2e:83:22:88:8f:
a1:3f:49:ea:c4:cc:55:69:47:21:de:14:39:28:aa:e0:ac:33:
57:5e:67:4c:25:e6:d6:c1:32:06:d6:0e:5d:bf:65:c9:5c:52:
5c:a7:01:85:cf:6c:f1:c2:24:a9:f2:21:17:d6:d8:fb:7e:5e:
90:d0:3f:32:00:f2:52:22:31:21:9d:06:97:46:d0:f5:e1:f1:
61:9c:22:b2:94:db:83:c0:1e:b7:f5:f6:d6:22:3e:61:16:4c:
84:aa:a8:cb:06:82:ce:a6:96:a6:d2:d6:1c:d2:9c:5d:e7:56:
b1:65:8c:7c:7a:a5:08:6b:60:30:a0:76:77:b2:9b:2d:09:c0:
51:f4:a7:69:52:4e:7e:59:fe:81:12:d2:1b:a4:e1:04:ae:ce:
18:43:ec:71:99:99:13:38:03:71:8e:3b:45:01:61:ce:ce:62:
db:34:04:cf:56:76:c8:b6:b8:6d:7d:dd:5a:88:f2:33:50:eb:
f1:bb:df:d8:f0:b7:8b:98:a3:7c:92:e0:20:f0:f4:69:f8:cf:
2d:82:08:2f:2b:91:37:44:4b:17:a1:23:b6:f0:8d:98:ad:c0:
6e:c5:1b:a9:a5:52:2c:7a:36:9e:eb:22:cb:74:b4:ac:50:20:
ff:7d:dd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:08:19 2024 by rpki-client on console-ams.rpki-client.org