Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/06dd83-07dc-40fb-923f-d91dce5db93a/1/BTNgxuPokttmsd9q1H94GOne64w.mft
File: BTNgxuPokttmsd9q1H94GOne64w.mft (raw, json)
Hash identifier: 4D+IYOnGA6UvJydSbpRyOWytZP8qX/V7GRbu7wxawCc=
Subject key identifier: 12:67:D6:50:6F:25:54:3C:19:F3:71:95:9D:72:2B:0E:1D:3C:A2:85
Authority key identifier: 05:33:60:C6:E3:E8:92:DB:66:B1:DF:6A:D4:7F:78:18:E9:DE:EB:8C
Certificate issuer: /CN=053360c6e3e892db66b1df6ad47f7818e9deeb8c
Certificate serial: 018F1F6E509F9A45CE1D6B6E3D431D7B3FA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTNgxuPokttmsd9q1H94GOne64w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/06dd83-07dc-40fb-923f-d91dce5db93a/1/BTNgxuPokttmsd9q1H94GOne64w.mft
Manifest number: 05AB
Signing time: Sat 27 Apr 2024 12:01:14 +0000
Manifest this update: Sat 27 Apr 2024 12:01:14 +0000
Manifest next update: Sun 28 Apr 2024 12:01:14 +0000
Files and hashes: 1: BTNgxuPokttmsd9q1H94GOne64w.crl (hash: NnUgbSA73Xboulgt+P0nbGaz5AbwXyJTuCAq7SpKQTk=)
2: r6963khB4nmPvMNXyxxG2Tmy8mI.roa (hash: /AsEELgrEuO9I5VqUCmZj65FdBFsA+g73fP6OXXwMJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/06dd83-07dc-40fb-923f-d91dce5db93a/1/BTNgxuPokttmsd9q1H94GOne64w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/06dd83-07dc-40fb-923f-d91dce5db93a/1/BTNgxuPokttmsd9q1H94GOne64w.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTNgxuPokttmsd9q1H94GOne64w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 04:37:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:1f:6e:50:9f:9a:45:ce:1d:6b:6e:3d:43:1d:7b:3f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053360c6e3e892db66b1df6ad47f7818e9deeb8c
Validity
Not Before: Apr 27 12:01:14 2024 GMT
Not After : Apr 28 12:01:14 2024 GMT
Subject: CN=1267d6506f25543c19f371959d722b0e1d3ca285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:91:18:4b:44:56:90:28:4d:56:5c:99:86:3c:
ad:e3:b8:59:0e:e5:c7:d6:92:a5:95:b3:d2:25:4b:
ce:bf:b0:a1:91:3d:9c:c7:d7:5f:91:b3:2a:de:26:
1a:c9:c2:4d:52:02:2f:2c:62:9b:48:88:3f:80:a1:
f9:f6:b4:9a:05:0f:aa:5b:4e:59:b2:8f:15:dc:c3:
ae:97:77:e7:4e:7f:3a:71:6c:67:77:a2:65:60:a7:
d6:cb:92:bb:ab:9b:15:ae:72:1d:43:6f:75:de:36:
44:9c:2b:4b:fd:37:c8:4c:77:99:94:50:ae:ee:b8:
2e:84:5d:98:b2:1c:d0:0d:13:2f:0c:9e:64:1a:ca:
9d:98:ce:7a:18:28:cc:1c:90:b6:6d:fe:c2:04:2f:
6f:c2:8c:4b:da:ab:4b:5b:f1:66:f9:35:5b:10:fa:
ea:ed:7c:06:c2:17:e4:ce:9b:fd:70:75:ca:6c:5a:
f2:a4:29:73:12:ae:e0:15:26:4d:d6:cd:af:fc:8f:
03:0e:68:8f:e3:67:53:1d:e2:91:f3:df:52:53:53:
4c:f3:87:0b:1f:b1:07:87:78:77:08:d2:fd:a9:1b:
b1:39:68:99:09:40:04:cd:6b:97:d6:68:12:8e:f8:
e3:ba:85:95:ae:6b:90:46:4d:9c:6f:75:51:da:e9:
03:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:67:D6:50:6F:25:54:3C:19:F3:71:95:9D:72:2B:0E:1D:3C:A2:85
X509v3 Authority Key Identifier:
keyid:05:33:60:C6:E3:E8:92:DB:66:B1:DF:6A:D4:7F:78:18:E9:DE:EB:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTNgxuPokttmsd9q1H94GOne64w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/06dd83-07dc-40fb-923f-d91dce5db93a/1/BTNgxuPokttmsd9q1H94GOne64w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/06dd83-07dc-40fb-923f-d91dce5db93a/1/BTNgxuPokttmsd9q1H94GOne64w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:c0:a8:14:bd:7a:a0:98:7d:bd:69:91:87:bf:3f:4b:bc:78:
d0:67:6b:f3:4f:41:82:36:01:52:48:04:2c:13:49:ca:3b:e0:
cd:eb:e6:39:8f:70:e0:fc:1d:94:65:08:87:64:ef:73:ab:12:
f6:8b:4e:fe:ba:b2:1f:54:3d:60:07:4c:a3:cd:f4:f1:fe:18:
3b:41:ac:62:e9:9d:17:53:1a:d1:2f:28:e9:e8:63:27:0a:27:
d5:0e:93:be:d7:67:4f:d5:b1:9d:6c:72:ed:1c:61:69:f1:71:
83:c6:cd:fd:f3:50:17:f7:b0:a2:8c:3c:29:4c:c4:3a:07:1a:
10:a3:f9:ba:77:e1:59:7a:70:39:e7:11:23:d3:65:46:58:8a:
f2:b9:c4:45:af:80:ae:82:7f:0b:b4:f2:21:14:eb:31:cf:66:
47:b1:f7:88:15:46:84:2a:06:dd:f7:07:de:a8:50:38:b2:5f:
ff:ed:b4:3b:a5:16:fd:6c:dd:94:19:ff:18:fb:44:fc:58:7f:
7e:27:f9:ad:e6:4e:11:16:1a:59:30:6a:ba:87:c2:94:ed:89:
bc:25:00:8c:2f:ab:29:22:75:92:3b:82:96:1b:c1:66:26:35:
72:c6:8e:f1:08:35:7a:9f:2e:50:3c:4d:1e:c7:56:cb:c8:ee:
fd:6d:53:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 13:58:55 2024 by rpki-client on console-ams.rpki-client.org