Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/06dd83-07dc-40fb-923f-d91dce5db93a/1/BTNgxuPokttmsd9q1H94GOne64w.mft
File: BTNgxuPokttmsd9q1H94GOne64w.mft (raw, json)
Hash identifier: s7DmIj2V5XURJBA0sUEA4VfaPSW5sR2O9jO62TOwHv8=
Subject key identifier: C9:58:2F:02:04:AC:CC:50:B7:99:09:7F:04:B9:34:28:E7:5C:CF:34
Authority key identifier: 05:33:60:C6:E3:E8:92:DB:66:B1:DF:6A:D4:7F:78:18:E9:DE:EB:8C
Certificate issuer: /CN=053360c6e3e892db66b1df6ad47f7818e9deeb8c
Certificate serial: 019406B3A40E1B2747C1B9BDF44CF83B61DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTNgxuPokttmsd9q1H94GOne64w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/06dd83-07dc-40fb-923f-d91dce5db93a/1/BTNgxuPokttmsd9q1H94GOne64w.mft
Manifest number: 0837
Signing time: Fri 27 Dec 2024 06:00:23 +0000
Manifest this update: Fri 27 Dec 2024 06:00:23 +0000
Manifest next update: Sat 28 Dec 2024 06:00:23 +0000
Files and hashes: 1: 1z_CwZLMViwg2oIofdESxRMWG8o.roa (hash: k8TWgxsHOJ6DB5gkZjnpYSie9ktu14ntzSwrQbjuheU=)
2: BTNgxuPokttmsd9q1H94GOne64w.crl (hash: Fs00HYQwRapVe3dDriF6cRJ8Tq8PWTUCXqWb3P90P8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/06dd83-07dc-40fb-923f-d91dce5db93a/1/BTNgxuPokttmsd9q1H94GOne64w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/06dd83-07dc-40fb-923f-d91dce5db93a/1/BTNgxuPokttmsd9q1H94GOne64w.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTNgxuPokttmsd9q1H94GOne64w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:b3:a4:0e:1b:27:47:c1:b9:bd:f4:4c:f8:3b:61:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053360c6e3e892db66b1df6ad47f7818e9deeb8c
Validity
Not Before: Dec 27 06:00:23 2024 GMT
Not After : Dec 28 06:00:23 2024 GMT
Subject: CN=c9582f0204accc50b799097f04b93428e75ccf34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bd:62:38:bb:6f:a9:3a:c6:04:19:37:07:d7:
aa:4f:3d:43:fc:3e:3e:1f:1c:ca:56:d6:c6:77:87:
42:fa:c2:9a:8f:db:47:f4:b2:32:c8:7a:69:77:d4:
fb:1d:84:66:d4:b0:6c:f6:8e:81:b0:7a:1a:df:99:
f6:f8:ff:0d:31:39:0d:73:07:0b:f2:d4:35:f8:e2:
e0:f2:94:57:54:13:b2:2d:c8:e6:07:3a:4e:3a:00:
47:e4:bc:8a:c0:0d:4e:61:4a:21:cc:9f:73:bc:4e:
70:92:61:ce:dd:12:6f:33:0e:9e:1e:23:0a:64:89:
53:74:98:cc:6d:fb:b6:19:29:e1:32:37:0f:be:b0:
b8:4d:70:b2:e6:2e:85:c6:f2:27:0e:54:82:3b:21:
0c:c7:8e:81:1f:4c:be:22:dd:39:18:b0:bb:08:dc:
8e:cf:dd:70:64:1d:80:95:2a:3b:16:17:8d:1f:4b:
40:8a:fc:c5:00:58:a8:94:08:36:4e:5b:01:03:3a:
ca:6d:79:26:60:c0:08:99:d1:5c:8f:9f:c9:68:5f:
c1:9a:aa:1d:ce:ee:5d:86:06:b5:14:3d:bb:36:0d:
bd:4e:33:ee:e7:af:8b:52:89:7b:ed:bd:c0:2b:6c:
78:f9:63:f0:ac:12:a4:33:74:d4:81:57:84:ce:95:
23:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:58:2F:02:04:AC:CC:50:B7:99:09:7F:04:B9:34:28:E7:5C:CF:34
X509v3 Authority Key Identifier:
keyid:05:33:60:C6:E3:E8:92:DB:66:B1:DF:6A:D4:7F:78:18:E9:DE:EB:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTNgxuPokttmsd9q1H94GOne64w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/06dd83-07dc-40fb-923f-d91dce5db93a/1/BTNgxuPokttmsd9q1H94GOne64w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/06dd83-07dc-40fb-923f-d91dce5db93a/1/BTNgxuPokttmsd9q1H94GOne64w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:af:5c:c9:cd:95:56:a2:90:bf:09:a1:8a:cf:0e:48:fc:30:
be:80:1f:e6:11:79:76:37:3c:86:7e:5f:41:f4:f0:32:22:02:
a7:cd:6a:40:cf:09:cd:90:10:78:a5:2d:91:45:1a:2b:91:c6:
75:94:92:43:a0:f7:fa:89:b0:cf:25:a1:a2:fa:45:c0:34:11:
ee:92:a7:44:66:44:77:d0:27:cc:be:22:43:3d:98:fe:85:07:
0a:6a:8b:b4:97:d8:2d:30:8f:2a:b3:24:a4:70:34:6a:84:9d:
09:4e:83:b4:9c:7b:67:e8:da:74:cb:0a:40:dd:93:72:74:49:
b6:23:5e:ca:b4:40:64:01:1b:46:a3:66:e6:c1:77:d2:96:f8:
b1:14:c1:88:3f:ed:70:bb:6c:6a:22:2c:72:e5:24:fa:61:bd:
79:26:3a:87:7f:0f:3c:51:dc:8b:e3:f4:b9:30:ca:43:8e:76:
ad:96:3c:4b:cd:c9:3a:6e:7c:28:a7:95:64:1f:56:b9:be:7b:
8f:a8:1a:12:50:29:29:db:d4:19:02:b2:86:55:db:2b:b9:c8:
bb:b4:4a:90:ac:8a:c0:a3:2d:d0:92:a3:2d:2a:a5:cc:15:30:
b3:2b:06:20:5b:ed:98:93:6b:63:4f:df:9e:46:f2:ab:66:36:
56:57:17:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:53:03 2024 by rpki-client on console-fra.rpki-client.org