Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
File: BhYY9tMA3yz1ni35f_6flWoj5jw.mft (raw, json)
Hash identifier: HPkAn5KT3kXxmDJ+F1RE+moYWb+jFX37jIKBNJqo8i8=
Subject key identifier: 4A:35:02:A1:C2:10:94:99:FA:73:AD:D8:39:D2:AD:DD:D9:0E:F7:16
Authority key identifier: 06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C
Certificate issuer: /CN=061618f6d300df2cf59e2df97ffe9f956a23e63c
Certificate serial: 0193572D5CFBE9848DEE8E960C29C5403D33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
Manifest number: 1370
Signing time: Sat 23 Nov 2024 04:00:10 +0000
Manifest this update: Sat 23 Nov 2024 04:00:10 +0000
Manifest next update: Sun 24 Nov 2024 04:00:10 +0000
Files and hashes: 1: BhYY9tMA3yz1ni35f_6flWoj5jw.crl (hash: r58xlS3221rS/C7/iJ5RMxRGO2iBm3T/lcjmi05vajw=)
2: eFXStM9IVziQNCd_R9DF-PWPJCw.roa (hash: kZYPkxZQMo2RPCiVevSC2DkIvvF6UXUNpbCz9wqCyn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2d:5c:fb:e9:84:8d:ee:8e:96:0c:29:c5:40:3d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061618f6d300df2cf59e2df97ffe9f956a23e63c
Validity
Not Before: Nov 23 04:00:10 2024 GMT
Not After : Nov 24 04:00:10 2024 GMT
Subject: CN=4a3502a1c2109499fa73add839d2adddd90ef716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7f:c2:39:0b:33:1a:a3:fa:33:c6:a9:9e:e2:
bb:83:80:87:36:f7:96:da:26:97:08:22:0b:cc:6c:
16:ef:3c:9a:01:72:cf:f0:11:74:03:b7:f0:2c:0e:
c0:45:71:ef:36:c6:3f:e1:ed:f8:f4:4a:c7:68:a0:
87:d2:41:2d:44:12:11:b4:e8:8c:14:9c:59:6c:0b:
68:48:75:73:a5:29:d5:4c:01:3f:55:27:6e:ac:62:
20:43:20:ff:fa:80:05:c3:f9:f3:c8:7f:60:e9:bd:
2a:56:ab:5d:dc:75:f7:f8:53:e0:59:45:9f:80:23:
5e:0b:3c:8b:f9:24:d2:09:6e:8b:3c:3e:5c:0f:1a:
a5:31:11:c3:8a:bf:cc:f7:c7:ab:36:33:a3:6e:3a:
9f:86:19:68:a7:40:a3:dc:b8:78:8c:fa:37:2a:9d:
22:70:44:9c:91:89:16:4d:59:96:19:29:d9:75:48:
a8:30:1b:87:9a:e6:3e:5f:60:e5:70:d8:50:0c:76:
b9:eb:f6:fa:3a:51:cf:4b:7d:0f:3b:52:1f:ae:fe:
6a:39:bc:8f:d3:4d:dc:49:ca:3d:85:ff:b0:43:4a:
f1:ec:96:27:1a:7b:55:3a:80:b6:8a:d6:ae:49:99:
b6:7f:1e:51:f2:8f:8a:05:bb:d7:14:91:53:4b:8a:
6c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:35:02:A1:C2:10:94:99:FA:73:AD:D8:39:D2:AD:DD:D9:0E:F7:16
X509v3 Authority Key Identifier:
keyid:06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:47:cc:97:f2:d4:eb:12:54:8e:86:1b:e6:d6:bb:c9:99:f8:
b0:51:79:72:56:4e:61:88:37:7e:f3:41:1d:62:14:9d:59:74:
a6:bc:68:07:23:38:ef:a1:08:8b:7a:be:a2:df:d2:35:98:4a:
88:ae:8e:59:a4:c6:7e:c6:de:01:3f:c0:47:48:ea:db:7c:73:
c8:eb:90:de:72:aa:09:b3:da:d7:21:7a:1b:66:88:91:d3:22:
01:aa:42:d6:c5:68:0c:4b:41:ee:0c:a7:87:95:30:f4:86:73:
e4:f3:a7:c6:86:43:4d:8b:60:5e:3e:14:e8:53:21:82:1b:a2:
d9:c1:26:64:ce:a7:aa:e6:a1:75:a1:46:a6:a4:03:e4:16:91:
60:db:9f:50:c1:8e:61:58:12:6f:e0:7d:a8:b9:cd:a2:47:dc:
8a:52:66:df:bd:23:3d:35:38:00:c5:03:00:d3:bf:3f:ec:82:
3c:85:f7:11:49:77:7a:df:7a:2f:25:c6:0e:23:12:2a:bd:a7:
dc:a5:55:68:74:e6:99:70:20:cc:01:e5:35:2e:cb:17:7c:0c:
62:5a:54:7b:75:5d:ac:43:36:a3:49:88:b4:77:50:33:03:83:
e8:45:f9:a7:8d:89:ab:60:eb:ff:be:48:db:9c:68:81:a4:0c:
74:10:e1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:15:21 2024 by rpki-client on console-ams.rpki-client.org