Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
File: BGrKxxMSOFbUrmwWBUYCaE39B8s.mft (raw, json)
Hash identifier: lrJ+hQIJD+oYaJBRT7tzMN6QLi2BQnSAGIUZtRHopFs=
Subject key identifier: AC:97:2F:32:CD:CD:81:8B:18:E5:B7:64:D6:34:73:8F:92:9F:6F:E9
Authority key identifier: 04:6A:CA:C7:13:12:38:56:D4:AE:6C:16:05:46:02:68:4D:FD:07:CB
Certificate issuer: /CN=046acac713123856d4ae6c16054602684dfd07cb
Certificate serial: 0191FA108D84D0C3513AF317F7E784CBB461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
Manifest number: 0103
Signing time: Mon 16 Sep 2024 09:01:14 +0000
Manifest this update: Mon 16 Sep 2024 09:01:14 +0000
Manifest next update: Tue 17 Sep 2024 09:01:14 +0000
Files and hashes: 1: BGrKxxMSOFbUrmwWBUYCaE39B8s.crl (hash: tvbkWfM5e9tsauQEMYEaDHj9UVWo18yQmGCl32SI09c=)
2: rWgm8VfZZaxYMrDBbTGSN-AtkDc.roa (hash: QYwHQ+ea9F5rs6muPzAO0Ozg70ZPUe8Ty3r7sre80vY=)
3: yo8pD6FHNmi3TB1jsqlsf_PRdxI.roa (hash: m3XV2y2IV94X1oNVUkfP89wDq7WBnAeCZpkHSBlpLxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Sep 2024 09:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fa:10:8d:84:d0:c3:51:3a:f3:17:f7:e7:84:cb:b4:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046acac713123856d4ae6c16054602684dfd07cb
Validity
Not Before: Sep 16 09:01:14 2024 GMT
Not After : Sep 17 09:01:14 2024 GMT
Subject: CN=ac972f32cdcd818b18e5b764d634738f929f6fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8a:70:7f:02:e0:a3:af:96:eb:e6:ad:0d:03:
17:bd:15:b2:46:9d:bc:eb:af:31:4f:e2:a0:5c:4f:
fa:0e:8a:10:02:ca:34:01:6e:5d:cd:c3:63:6e:80:
05:5d:4e:70:56:0a:99:76:81:ff:75:2a:3f:40:d7:
53:df:92:2d:2a:38:af:bd:78:e5:10:c0:e2:7f:45:
22:c3:c9:e7:b8:8b:5a:86:53:73:6a:85:86:19:8f:
13:88:fa:60:83:36:19:24:1f:78:64:0e:83:75:58:
b2:7c:49:85:5c:a0:97:a8:0c:85:19:e1:e8:d8:80:
31:b4:30:a0:81:52:1d:3a:71:0d:03:cf:3f:37:05:
b9:a6:e2:1e:33:de:01:1a:ed:4a:0d:36:8c:3f:79:
c4:ec:04:0c:f5:87:f1:d1:64:d3:2a:2b:e2:74:a5:
5f:fa:0e:7d:26:77:d7:01:c9:dc:a6:bb:18:9d:80:
9d:f7:f0:e2:17:a7:28:fe:63:90:42:f3:56:73:5c:
31:bc:55:76:b4:b2:a1:c8:ba:6e:87:55:ba:38:59:
21:dc:6e:44:0b:b5:c3:f1:ab:41:5b:ac:65:59:1c:
c1:3a:b2:fc:c0:f5:08:3c:3b:60:45:40:5c:a8:23:
f5:28:65:a1:13:0a:40:c7:0d:37:c0:bd:e2:f1:78:
a1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:97:2F:32:CD:CD:81:8B:18:E5:B7:64:D6:34:73:8F:92:9F:6F:E9
X509v3 Authority Key Identifier:
keyid:04:6A:CA:C7:13:12:38:56:D4:AE:6C:16:05:46:02:68:4D:FD:07:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:d1:32:a1:66:b8:6d:1f:25:b9:5e:5d:e9:c9:ae:0d:cb:dc:
0b:90:89:b1:13:36:7b:17:d4:ed:5f:b8:54:fd:62:e4:07:b0:
a5:a3:19:9d:d7:bd:6f:70:1e:86:9e:d6:84:67:65:92:1a:f2:
1f:95:49:f8:c4:d2:f5:17:54:13:da:2c:97:ae:68:94:4d:a4:
d4:df:11:e1:ab:46:98:2f:52:e1:ad:43:4d:81:bd:a0:aa:fa:
e0:14:12:e7:3a:6c:e0:86:f2:d3:da:0a:a0:15:66:42:6b:0b:
a6:bf:2a:2b:5a:01:eb:48:72:ca:0c:82:a7:e8:91:b1:d4:f8:
1d:f5:2b:8f:b5:2a:44:87:e0:17:fa:04:39:ca:8c:7d:e4:1c:
4b:34:5c:89:63:af:33:ad:d4:ed:5c:74:82:71:39:b2:9a:20:
95:e5:37:55:04:85:69:83:a1:83:c6:4b:d7:d7:16:18:cc:74:
f7:19:10:00:76:66:0f:9f:0b:aa:ce:37:cb:cf:ca:cd:e4:46:
b4:af:4b:34:75:7e:f9:fe:17:10:05:1a:b2:2b:b0:75:c2:55:
d5:16:53:52:56:6b:20:6a:4b:06:25:59:bf:17:c5:4e:9d:12:
62:a7:65:73:84:23:82:79:8d:c7:59:8f:36:a1:d7:e1:0f:e2:
75:95:7d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:19:25 2024 by rpki-client on console-fra.rpki-client.org