Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
File: Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft (raw, json)
Hash identifier: ijKvierl5liowYfl+YosrGaXZ+ae3FO3Fe+HYBr8v2g=
Subject key identifier: 24:24:D6:62:09:95:CD:D6:10:D8:F4:21:4E:32:BD:15:F3:0A:70:76
Authority key identifier: 06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
Certificate issuer: /CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Certificate serial: 01938C9C687F32CCE353A8CC88F4DCB51F55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
Manifest number: 138D
Signing time: Tue 03 Dec 2024 13:01:20 +0000
Manifest this update: Tue 03 Dec 2024 13:01:20 +0000
Manifest next update: Wed 04 Dec 2024 13:01:20 +0000
Files and hashes: 1: Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl (hash: LGSYk4sb95CZq/xeRNY+mt909+UsgvFOLfShvWi7aiM=)
2: t17giY7UZmxS5rVS02ZMETU5Nh4.roa (hash: edIMIL7YfBEDPE3/C8mCe/UEd75CPlBYXZwAJ9Ip2gI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Dec 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8c:9c:68:7f:32:cc:e3:53:a8:cc:88:f4:dc:b5:1f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Validity
Not Before: Dec 3 13:01:20 2024 GMT
Not After : Dec 4 13:01:20 2024 GMT
Subject: CN=2424d6620995cdd610d8f4214e32bd15f30a7076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3d:b9:2c:17:df:56:48:da:ec:cf:dc:f4:4c:
ef:bf:dd:7e:34:e7:d5:2b:62:ea:0d:bb:34:7b:29:
e8:f1:68:f3:b7:97:8a:7f:cb:ee:dd:a6:0c:49:37:
eb:6e:f7:a3:4e:f0:28:c5:fc:43:db:17:f6:9a:9c:
0a:f9:1e:99:da:df:62:1f:fb:81:6a:1a:e1:27:aa:
32:d4:30:ce:d3:f4:bc:c9:76:1b:5b:b4:5e:90:06:
b4:df:ba:a2:ad:ca:65:5f:1f:b4:28:1c:96:a6:6f:
b5:98:da:16:ac:77:c9:fa:93:19:5c:ee:8c:2e:f1:
fa:6f:e8:45:5d:9a:d7:72:3e:2f:fd:40:96:36:bf:
c5:da:36:84:97:d8:4f:0e:d5:7e:88:9f:ee:79:09:
17:ce:f1:eb:65:ed:05:e5:fa:a3:3d:67:7f:14:7a:
c7:00:54:fa:da:ba:84:a8:ab:aa:54:d3:cd:82:ee:
e9:44:5c:cb:a4:59:57:47:82:8f:3a:7d:29:5e:71:
d0:64:f9:11:49:38:be:55:a4:55:90:28:44:f4:f0:
11:65:6c:88:8b:85:38:15:83:86:9b:d4:3c:80:9f:
a1:c0:39:0d:a9:12:ad:30:0f:b8:52:b6:0f:a7:0f:
41:2d:48:21:73:56:c7:83:fa:d4:47:63:a0:fe:bc:
53:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:24:D6:62:09:95:CD:D6:10:D8:F4:21:4E:32:BD:15:F3:0A:70:76
X509v3 Authority Key Identifier:
keyid:06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:52:14:06:b8:9e:24:f4:88:5b:da:1b:aa:fd:4b:0f:45:01:
7c:e1:48:35:7c:0a:5d:cc:2f:a4:de:a5:91:29:0f:5b:d6:5b:
1f:e3:c0:73:e7:5b:75:0c:88:56:d8:d0:58:a1:07:c8:38:88:
ca:73:1b:e2:65:d8:47:ae:f9:66:fe:f4:4c:35:15:4a:ca:d9:
62:2c:05:7a:91:78:fe:2c:6a:a9:62:45:71:08:b7:98:b3:fa:
b5:47:23:54:a1:d9:c4:eb:fc:a6:1d:09:9f:3c:d5:d4:cc:79:
89:98:b6:71:f5:45:96:3d:66:20:a9:ca:c5:ba:4a:6e:9d:58:
72:2c:f7:65:dc:0a:c1:90:4f:bc:5e:b0:6c:c0:25:dc:f2:6b:
0a:97:57:3f:27:df:ba:e7:3a:13:52:02:fb:d7:c2:9b:01:e7:
c7:91:19:a0:f9:35:29:cd:26:2e:ed:51:42:0d:5e:06:5b:c2:
ff:ce:8c:05:3c:13:81:b0:55:cc:86:78:ee:31:79:71:9f:ae:
c6:d7:58:e8:ee:00:09:8b:9a:a0:f0:5f:ba:b1:3b:7b:f9:77:
dc:e3:34:6f:90:1d:79:bf:06:ba:d0:68:9e:6f:16:dd:83:17:
62:1b:84:39:fa:2b:15:30:5a:54:67:d6:fb:ac:cd:12:06:e4:
57:6a:84:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 14:40:44 2024 by rpki-client on console-fra.rpki-client.org