Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
File: BysethAMDKVkRDcFjUL0_XIjNoE.mft (raw, json)
Hash identifier: yXA0zDqH1F5SW/dMQXRQDCNYAgNHoPt6jWb5vJQH5tw=
Subject key identifier: 0A:C9:78:20:D4:83:5C:DC:BB:60:95:5C:D5:4C:E1:7D:20:74:52:45
Authority key identifier: 07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81
Certificate issuer: /CN=072b1eb6100c0ca5644437058d42f4fd72233681
Certificate serial: 019352AC0E7F98C99E6D495E96F5A27015B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
Manifest number: 07DA
Signing time: Fri 22 Nov 2024 07:00:27 +0000
Manifest this update: Fri 22 Nov 2024 07:00:27 +0000
Manifest next update: Sat 23 Nov 2024 07:00:27 +0000
Files and hashes: 1: BysethAMDKVkRDcFjUL0_XIjNoE.crl (hash: XBcMVUW95Ch29dZtbYhjkbjYGYce9uDXB6JHtZEO+vM=)
2: mz-CCZCDbCjAbSiAEdWK5or1hIU.roa (hash: trpQqiuUMYzX7adSHWugLbz29JE8atHUwdsojz2+mo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ac:0e:7f:98:c9:9e:6d:49:5e:96:f5:a2:70:15:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=072b1eb6100c0ca5644437058d42f4fd72233681
Validity
Not Before: Nov 22 07:00:27 2024 GMT
Not After : Nov 23 07:00:27 2024 GMT
Subject: CN=0ac97820d4835cdcbb60955cd54ce17d20745245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d5:70:89:d1:92:6b:bb:4a:08:d8:bf:9b:cc:
fd:94:aa:ad:ae:1a:c9:e3:eb:c2:47:b4:f9:d0:36:
8a:71:63:0f:51:23:59:01:4b:ab:15:4f:50:cf:3f:
75:ef:8f:2f:ac:c8:92:ec:ee:44:2d:28:b2:a7:13:
21:74:a2:ff:f7:c1:06:d9:22:55:6f:e9:d5:34:88:
85:46:6d:7f:a0:b5:18:21:cf:2c:2a:23:80:1b:e6:
b9:6d:4f:5d:0d:2e:05:db:b9:d9:9e:d2:8f:6c:6d:
16:a2:19:7a:3d:0b:1c:52:4e:06:ae:80:cd:0e:f0:
c5:ad:1d:ce:25:a7:fd:03:25:80:1e:7d:02:4e:55:
1d:d3:89:d4:32:01:40:a5:59:8a:fc:95:26:a2:50:
a8:0f:4a:62:f4:a5:16:86:7d:45:52:1d:13:ee:bb:
09:23:de:e7:87:02:62:41:7d:cd:7c:20:22:d5:aa:
de:3a:3f:3a:4a:a2:78:a2:61:9b:42:a5:10:59:ef:
e5:66:eb:d7:21:f1:5d:00:2f:02:66:8f:c5:7e:4a:
70:c5:c4:25:36:18:57:19:ec:86:c2:2e:85:48:2f:
21:20:f1:cf:b7:2e:dc:1a:e8:ac:9d:2a:1d:52:41:
0e:dd:14:a4:e4:70:33:e6:7e:e2:36:61:d0:f2:e2:
9b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C9:78:20:D4:83:5C:DC:BB:60:95:5C:D5:4C:E1:7D:20:74:52:45
X509v3 Authority Key Identifier:
keyid:07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:b1:8d:08:92:d3:88:54:1d:21:d9:55:98:9d:33:a5:61:91:
f5:c6:30:47:3f:68:64:a6:79:6d:35:a3:37:b5:bc:40:f6:0b:
54:ea:9c:6f:ec:43:d8:51:8b:1e:c9:3b:5f:3f:de:26:9f:0f:
91:2d:75:c6:41:03:95:18:4e:f5:d6:b0:03:c9:81:d6:63:57:
43:eb:66:7d:cc:74:47:df:19:bd:2e:45:f1:3d:f4:94:02:4e:
ff:3b:3f:d3:06:e6:fc:27:34:c0:92:48:18:e2:ca:33:11:62:
d6:4a:15:bd:73:ad:9c:a4:7b:dd:1e:aa:4d:85:50:f8:f5:ef:
9b:97:eb:79:84:05:bd:1c:17:26:9c:f9:e5:87:b3:69:47:bf:
93:82:5d:0a:ed:96:be:5c:f3:45:a6:94:ed:d1:f7:b4:6d:9f:
cb:0b:cd:2c:ff:f4:a3:81:0f:73:a5:34:57:97:45:18:13:c1:
99:f3:75:d7:ea:67:43:33:8d:70:5f:b7:d4:29:eb:66:52:c8:
dd:a0:85:80:a1:77:67:18:0f:89:d1:3c:89:4a:ec:73:87:51:
ad:32:b9:6f:69:1e:67:94:c4:88:22:fb:b8:a6:32:75:77:f2:
f9:78:76:00:58:2a:68:d9:91:76:6d:60:ba:76:65:56:87:8e:
aa:5b:89:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:55:32 2024 by rpki-client on console-ams.rpki-client.org