Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft
File: bqK-NzL279WcfeWrAwcqASxxte0.mft (raw, json)
Hash identifier: RpGmoblGA9u+bNiDtoON2u6oqr7FbzXFodrSBL63aGI=
Subject key identifier: 31:BE:49:29:C9:2F:23:2D:FE:91:33:29:96:EF:D8:D6:62:8F:0D:1B
Authority key identifier: 6E:A2:BE:37:32:F6:EF:D5:9C:7D:E5:AB:03:07:2A:01:2C:71:B5:ED
Certificate issuer: /CN=6ea2be3732f6efd59c7de5ab03072a012c71b5ed
Certificate serial: 019355AD1DE6A4A69554BDDACB81FF309C2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqK-NzL279WcfeWrAwcqASxxte0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft
Manifest number: 1098
Signing time: Fri 22 Nov 2024 21:00:28 +0000
Manifest this update: Fri 22 Nov 2024 21:00:28 +0000
Manifest next update: Sat 23 Nov 2024 21:00:28 +0000
Files and hashes: 1: B7g1W99nK7uH0NEKYNvXvidKyic.roa (hash: zZsN789FEZJWf1lIVgg+1Gew7Z5lLG4aXHxhvrskyQg=)
2: HWK-SEcShUxHw6Glkc7IiogVzHI.roa (hash: 0Ago7m/W/ecEXcdoQUZQEBGWLb/4rNbqwNqfHm6rb6g=)
3: bqK-NzL279WcfeWrAwcqASxxte0.crl (hash: QNNTrdQLbNOqEd3WVcWKVyMzyCHA1551ooiSmSyuy6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bqK-NzL279WcfeWrAwcqASxxte0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:ad:1d:e6:a4:a6:95:54:bd:da:cb:81:ff:30:9c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ea2be3732f6efd59c7de5ab03072a012c71b5ed
Validity
Not Before: Nov 22 21:00:28 2024 GMT
Not After : Nov 23 21:00:28 2024 GMT
Subject: CN=31be4929c92f232dfe91332996efd8d6628f0d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4e:09:61:6c:02:e5:1f:cb:f4:9b:f7:8b:3d:
78:09:1b:bb:77:7b:29:a9:13:84:1b:02:4a:79:75:
9d:44:25:f4:7f:ee:76:93:b1:fe:6b:c0:7a:7d:30:
6b:b0:86:32:d4:ca:86:30:fa:3f:2a:78:45:be:4d:
d7:ba:6f:c9:9d:f6:13:7f:5a:30:74:5b:6a:ce:af:
d2:49:0f:75:87:6d:71:10:48:dd:7c:85:c8:97:c8:
8f:0d:e6:ed:e0:09:4b:4f:78:ab:83:cc:04:9b:ba:
16:bb:be:f0:e3:d7:f6:d7:58:7b:6d:be:be:9e:ae:
8f:47:62:df:c5:89:f5:42:1c:e8:5a:ca:c4:b4:e1:
fd:1a:00:bc:06:dd:8c:65:4c:4a:e5:01:13:03:12:
c2:40:60:81:e6:52:cf:3a:3b:b0:73:40:ed:5d:4c:
d5:37:3d:9a:96:9a:04:8c:f2:e3:bf:a2:1d:95:33:
d2:e9:74:02:7f:30:c3:92:f2:c0:2b:bd:fa:52:87:
13:2e:97:c9:19:aa:b1:2f:53:f8:b3:b3:f1:3e:7a:
82:ab:41:40:88:8b:09:82:3b:25:c0:fd:b0:c8:2a:
97:9e:d9:02:af:01:ef:ec:d4:19:be:39:f9:71:91:
5b:59:0b:73:24:db:20:f9:ae:e5:ea:4d:38:9a:e6:
d4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BE:49:29:C9:2F:23:2D:FE:91:33:29:96:EF:D8:D6:62:8F:0D:1B
X509v3 Authority Key Identifier:
keyid:6E:A2:BE:37:32:F6:EF:D5:9C:7D:E5:AB:03:07:2A:01:2C:71:B5:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqK-NzL279WcfeWrAwcqASxxte0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:82:99:6a:b5:d0:7a:98:51:fe:dd:4f:4a:a3:fd:5d:93:5d:
89:2e:c1:95:38:cd:e7:c2:68:50:f4:35:6d:fa:1c:4c:51:f1:
38:4e:d8:07:5a:ce:59:cd:7e:c4:8b:d1:96:00:b9:ce:42:85:
14:e6:96:f6:5d:84:26:d5:a3:17:1e:19:e8:5a:ef:b4:1e:a6:
73:3f:da:b4:c6:b5:70:87:8d:fa:aa:82:d6:f5:0f:d9:4d:c3:
47:a4:2b:56:e1:0e:d6:9f:67:37:c4:3f:44:ad:30:01:6d:f3:
ea:fc:25:d8:4c:e2:ad:6e:3d:2c:e6:65:e1:89:9a:89:dd:1c:
ae:14:5b:32:d6:67:6a:d1:8e:7a:05:7d:aa:01:96:bc:b8:f0:
47:95:ff:1d:8c:8c:87:f3:9d:98:71:42:05:ff:fc:5d:68:ee:
ba:e8:04:a0:ff:18:8e:64:be:bf:ea:b9:96:68:2e:f8:ea:50:
fb:8b:7c:fe:55:3e:13:86:2c:c1:d9:01:9c:ad:cc:b1:a0:d0:
4b:39:ab:a9:b5:de:98:ef:0b:71:57:88:b4:43:de:cd:ef:cc:
0d:36:a2:6d:86:96:b3:36:7b:bb:84:05:49:1e:25:63:02:ed:
71:26:a2:90:77:a8:90:db:42:c9:31:58:17:60:10:8a:ca:56:
c9:d4:1e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:09:18 2024 by rpki-client on console-ams.rpki-client.org