Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
File: BG5SgQdApuwTSZPbya0RtkVNmno.mft (raw, json)
Hash identifier: XflC7Wju0zmu2Wkkx7xlGLaIHqF5yFOkFHJzCgJwzUM=
Subject key identifier: 90:0D:B2:52:2F:F8:5C:D5:2C:8C:C0:7A:6E:CB:BB:80:32:03:D8:82
Authority key identifier: 04:6E:52:81:07:40:A6:EC:13:49:93:DB:C9:AD:11:B6:45:4D:9A:7A
Certificate issuer: /CN=046e52810740a6ec134993dbc9ad11b6454d9a7a
Certificate serial: 019357D2BCCEE48E8F3D6B44DE6026EABDC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
Manifest number: 0364
Signing time: Sat 23 Nov 2024 07:00:48 +0000
Manifest this update: Sat 23 Nov 2024 07:00:48 +0000
Manifest next update: Sun 24 Nov 2024 07:00:48 +0000
Files and hashes: 1: BG5SgQdApuwTSZPbya0RtkVNmno.crl (hash: q5hWWGtnC1Cq41FWnk71tXcviwsO7SBJnNwLFVjIURA=)
2: WPHiMng5h6h4NP3wZQr0F1jbZjQ.roa (hash: 3z0NoT9AeiuEuU+RksCSl23dxlWUUDuMPI0ejfrj8bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
rsync://rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:bc:ce:e4:8e:8f:3d:6b:44:de:60:26:ea:bd:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046e52810740a6ec134993dbc9ad11b6454d9a7a
Validity
Not Before: Nov 23 07:00:48 2024 GMT
Not After : Nov 24 07:00:48 2024 GMT
Subject: CN=900db2522ff85cd52c8cc07a6ecbbb803203d882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:00:56:10:56:e9:17:c0:ab:72:01:71:c8:02:
18:31:0f:41:ed:74:81:8e:64:54:0a:34:b6:4c:45:
de:b4:65:c8:79:8c:99:f2:81:a1:82:39:b7:ce:2a:
1e:db:6d:f0:cd:31:78:db:83:f5:bb:9b:0d:dd:ab:
0c:25:f3:27:7f:22:d2:40:3e:2a:67:29:5c:5f:f7:
92:c4:3e:38:a9:21:07:2c:93:e4:d3:89:1c:21:ca:
0b:3c:b6:f5:3b:77:5e:4c:61:19:13:e3:23:1d:5f:
e1:7f:d4:41:c1:13:a1:92:9c:e5:09:a7:9d:02:40:
5a:3c:ad:df:62:21:92:e4:65:0b:59:41:29:c0:6f:
e7:14:cd:bb:ee:02:86:72:d3:d2:0e:45:06:48:e2:
43:e6:4d:98:00:3d:93:13:32:73:94:9a:03:e1:c5:
c6:d5:80:c5:5f:e4:de:ae:73:69:47:5a:a9:a0:18:
d4:21:1b:e9:f6:25:2f:60:bb:d2:1c:e5:8d:56:78:
97:9b:cc:10:29:5e:76:47:c8:ec:0c:16:53:e2:c5:
19:50:59:a2:a4:23:e3:9c:da:ca:8b:d5:e8:44:e4:
fc:6f:32:88:4b:c4:3f:36:3c:fe:a4:b0:f7:8b:db:
fc:c8:08:19:ed:90:e7:d1:24:70:01:1f:ab:03:44:
bb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0D:B2:52:2F:F8:5C:D5:2C:8C:C0:7A:6E:CB:BB:80:32:03:D8:82
X509v3 Authority Key Identifier:
keyid:04:6E:52:81:07:40:A6:EC:13:49:93:DB:C9:AD:11:B6:45:4D:9A:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:ed:86:e7:c5:06:9a:9a:81:7d:4f:18:e9:e0:df:e1:f7:ab:
e1:c2:41:ff:31:6e:e4:88:f4:bf:3e:75:42:57:03:1e:4f:f8:
47:6e:86:3c:51:a6:46:cf:94:5b:a0:57:6a:1c:c6:66:84:33:
5c:e4:cb:f1:a7:bb:71:f5:bd:74:3e:04:9c:0f:6b:de:f4:ff:
ec:a0:dd:85:8e:11:36:d5:21:b0:73:cd:8a:91:31:8a:95:3a:
c0:88:da:e8:54:33:d2:73:ca:e6:44:0a:df:c2:97:d5:e3:81:
f7:d6:5c:da:d3:3c:19:fa:cd:1b:f9:da:5d:44:14:cd:79:f0:
54:58:ec:7f:aa:a3:cc:d6:77:a0:9a:50:ed:6c:02:30:85:d2:
a4:79:46:5f:04:d3:7c:63:e5:b7:1a:8c:6b:db:a9:18:7a:7b:
8d:f9:cf:c6:c4:1a:f9:c6:45:16:13:18:34:a4:a1:c6:68:22:
4b:49:be:90:5d:63:7d:cf:c5:5c:81:e1:64:e7:07:4f:87:cc:
7f:16:06:15:0f:cd:64:4d:86:52:42:4a:5c:53:2a:ea:74:f5:
c5:00:61:a9:ff:1f:02:09:9c:1c:42:52:02:5e:36:38:48:a9:
08:c5:8f:94:7c:07:e5:a3:b6:e1:3c:6b:10:28:b7:f9:89:06:
9d:59:43:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:42:34 2024 by rpki-client on console-ams.rpki-client.org