Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.mft
File: BuLSfTDs_0J3HEq5d6gq6lina04.mft (raw, json)
Hash identifier: KpgwC/DNhnrJ3mrhoLgFkl7vBpcSKg00oV3IkXZK/68=
Subject key identifier: 4D:C8:72:48:4F:F2:3B:40:57:D0:73:00:FF:F9:88:9A:88:BD:F3:92
Authority key identifier: 06:E2:D2:7D:30:EC:FF:42:77:1C:4A:B9:77:A8:2A:EA:58:A7:6B:4E
Certificate issuer: /CN=06e2d27d30ecff42771c4ab977a82aea58a76b4e
Certificate serial: 019356898FA6AE15E2011835360FD5D1C583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuLSfTDs_0J3HEq5d6gq6lina04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.mft
Manifest number: 0141
Signing time: Sat 23 Nov 2024 01:01:16 +0000
Manifest this update: Sat 23 Nov 2024 01:01:16 +0000
Manifest next update: Sun 24 Nov 2024 01:01:16 +0000
Files and hashes: 1: BuLSfTDs_0J3HEq5d6gq6lina04.crl (hash: GC97yoOM0i4QkqhAguKnujCd60+5dhE/6Y0veA2heAU=)
2: iKlysmEIJ2fktjbhak-DPepi4Qc.roa (hash: LaGcwnQLViuo1/kZr1Adyvf0tudI00haucSEjgtEaUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.mft
rsync://rpki.ripe.net/repository/DEFAULT/BuLSfTDs_0J3HEq5d6gq6lina04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:8f:a6:ae:15:e2:01:18:35:36:0f:d5:d1:c5:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06e2d27d30ecff42771c4ab977a82aea58a76b4e
Validity
Not Before: Nov 23 01:01:16 2024 GMT
Not After : Nov 24 01:01:16 2024 GMT
Subject: CN=4dc872484ff23b4057d07300fff9889a88bdf392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ff:09:06:3d:3a:89:9d:5e:5c:55:f1:51:21:
7c:df:9d:b3:af:27:8f:ce:56:0d:db:5e:bc:e2:db:
cd:9a:c2:35:17:65:5b:62:85:1a:0f:ef:fd:0b:47:
90:ed:86:e1:3f:9f:e9:76:0b:cf:f7:bb:e5:ab:74:
48:f6:e0:6e:0d:72:fd:6a:e9:ad:46:ff:c8:c8:1b:
e3:50:da:42:c2:95:58:3e:a7:68:e1:ab:59:2a:62:
1a:f7:95:d6:a7:98:b8:ed:a9:b7:b5:7c:58:c1:70:
ac:45:f2:1d:7b:7b:de:89:07:91:81:a3:ef:50:99:
25:a0:79:d9:5f:55:9b:57:52:42:0b:e6:59:b7:02:
0a:d2:c3:90:85:96:d2:12:d9:6a:9b:f6:6d:34:97:
88:20:cc:53:d3:a8:c0:30:fe:13:5b:76:69:2b:79:
97:1c:e0:66:2c:38:5a:64:83:4a:18:04:08:bf:07:
af:51:55:bb:7f:f2:9e:a6:d2:81:3b:e6:53:bc:32:
51:e8:09:c3:51:b3:f9:30:8a:62:4c:b7:f3:08:ab:
51:d2:58:5f:91:98:a8:b6:6f:18:e5:ca:77:5e:96:
6d:42:f1:7c:b3:2f:87:ed:c0:b0:58:b6:e9:95:e2:
fc:1f:e2:95:cb:d8:47:4f:c5:6b:79:6f:b7:b5:b8:
84:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C8:72:48:4F:F2:3B:40:57:D0:73:00:FF:F9:88:9A:88:BD:F3:92
X509v3 Authority Key Identifier:
keyid:06:E2:D2:7D:30:EC:FF:42:77:1C:4A:B9:77:A8:2A:EA:58:A7:6B:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuLSfTDs_0J3HEq5d6gq6lina04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:68:09:93:96:cd:b5:49:5f:90:54:a2:67:71:72:af:52:6c:
64:51:06:f7:3d:5a:ea:c3:42:1a:83:77:e0:67:3f:03:e3:67:
cf:79:92:d0:86:11:00:f5:d9:68:e0:89:2a:fa:10:c3:b5:cc:
76:54:d9:f2:b5:d3:dc:24:4c:54:2c:5b:72:e9:7c:e4:a3:05:
49:28:ad:87:e2:1e:3d:46:6b:b4:fb:55:87:cf:d5:0e:0e:59:
82:30:26:75:50:9a:2f:a2:8b:5c:df:08:ef:5c:bb:a3:5f:e3:
22:54:27:1e:1c:df:f5:78:22:9d:6d:b9:69:b1:5c:39:78:61:
c1:35:60:6c:26:9f:eb:b3:3a:6b:8e:28:b9:c4:c0:30:d8:3b:
60:1b:3a:93:51:2e:88:c6:ae:aa:c0:8d:c4:f8:3f:9d:66:74:
4d:c5:bb:3c:07:30:15:77:09:cc:4e:d6:65:53:ca:84:7b:50:
5f:de:5e:96:6d:87:ef:74:2b:e5:4c:0b:3b:3c:04:a4:a7:b8:
74:63:44:23:af:bb:22:c7:89:12:0b:a3:82:b0:cb:8a:0a:da:
3f:6d:c3:80:c9:00:e0:24:61:de:5f:f1:a0:02:64:fb:10:be:
35:f1:5c:c0:5b:3a:6b:a0:d1:f3:15:79:b5:52:d8:85:b4:10:
43:bf:26:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:03:08 2024 by rpki-client on console-fra.rpki-client.org