Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
File: bP02Bzbx-myXcPy0i-WUvmCeWz4.mft (raw, json)
Hash identifier: Afd75BUv2oE6Cru+IdsLYFfb+npVcXIaZlxgHEapJSE=
Subject key identifier: B4:EC:F4:5D:FC:B9:65:9E:A6:3F:3A:3D:F8:11:32:33:CD:88:13:19
Authority key identifier: 6C:FD:36:07:36:F1:FA:6C:97:70:FC:B4:8B:E5:94:BE:60:9E:5B:3E
Certificate issuer: /CN=6cfd360736f1fa6c9770fcb48be594be609e5b3e
Certificate serial: 01906DF46336A6358DFFD1BC13DF2E9E2B46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
Manifest number: 11EF
Signing time: Mon 01 Jul 2024 11:00:51 +0000
Manifest this update: Mon 01 Jul 2024 11:00:51 +0000
Manifest next update: Tue 02 Jul 2024 11:00:51 +0000
Files and hashes: 1: bP02Bzbx-myXcPy0i-WUvmCeWz4.crl (hash: zYhV0IfM4d6sApCGHSNtt1I7QGyfi0a4qhRulBzJInE=)
2: jdOQZbUxmZnqEKEObfC-bupTb24.roa (hash: cnITjFgH4wgXMCIv38CvbYKdYrB+gHqk8SqDB9MTdb8=)
3: s5Eps8_YUrKaQ4a8UDie9qfWHQs.roa (hash: YbwW1mdXawWn4p9h+pcsoxL4EFGDd5xIIL6Qj0qak7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6d:f4:63:36:a6:35:8d:ff:d1:bc:13:df:2e:9e:2b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cfd360736f1fa6c9770fcb48be594be609e5b3e
Validity
Not Before: Jul 1 11:00:51 2024 GMT
Not After : Jul 2 11:00:51 2024 GMT
Subject: CN=b4ecf45dfcb9659ea63f3a3df8113233cd881319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e1:7f:d1:b3:b8:4f:c6:16:2f:15:14:64:82:
13:92:18:ea:5a:a7:a8:b0:41:6e:b3:61:70:70:35:
8c:2e:a9:9b:18:b5:da:36:27:66:91:ce:db:db:ac:
81:19:18:18:50:a4:6a:bb:c8:21:58:d3:cd:f3:ac:
c1:ea:d2:36:71:2e:c8:95:87:d8:8d:73:3f:87:81:
40:f9:e7:c8:9b:69:d0:47:4f:55:60:f7:0f:37:6f:
de:18:c9:93:9f:4e:79:ec:39:40:a7:5d:52:98:36:
12:d5:2e:68:72:a9:c8:56:29:2a:d3:d2:51:cb:7f:
c3:c3:e2:5f:4c:56:9e:41:f5:60:72:ac:d4:a9:20:
f2:e6:88:60:44:31:ce:34:d2:4c:9b:27:a6:d0:5d:
8d:c8:81:e7:38:eb:2b:a7:43:cc:17:37:19:11:89:
69:56:99:91:ea:91:d1:2d:bc:4b:b0:ce:65:41:63:
70:f4:97:09:de:25:5a:5a:6e:03:40:73:35:53:ce:
eb:b9:b0:7e:e8:0f:60:12:ef:f6:74:51:f7:5d:65:
68:83:3f:30:36:3f:30:9a:70:b4:90:b8:27:de:74:
89:1b:b7:61:09:f3:2a:0e:a5:55:95:2b:81:14:56:
1c:36:d1:8d:a1:f5:41:e7:ee:ca:1f:2b:5d:ab:22:
3c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:EC:F4:5D:FC:B9:65:9E:A6:3F:3A:3D:F8:11:32:33:CD:88:13:19
X509v3 Authority Key Identifier:
keyid:6C:FD:36:07:36:F1:FA:6C:97:70:FC:B4:8B:E5:94:BE:60:9E:5B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:1f:49:e6:7e:97:ab:75:67:60:e3:6c:3d:d7:f2:f6:71:37:
d6:7a:90:1a:ae:d0:e7:e2:86:34:53:e3:3c:77:65:b2:4e:a8:
ed:98:1d:33:59:05:e6:bd:11:0c:47:78:9e:2d:bc:2e:0b:1e:
7e:8b:2e:7e:ba:e9:b2:a3:7a:84:d3:42:55:51:63:61:21:58:
7c:05:cc:7d:7e:0f:1f:9b:be:da:cc:9e:69:aa:2c:d6:b8:52:
ca:16:e1:8a:5e:26:a3:93:6c:bc:f3:ad:4f:75:7d:e7:53:64:
03:68:1a:89:77:18:7d:49:ba:de:60:a4:1c:d3:2a:07:01:0c:
55:9f:f5:c0:e4:ab:0b:16:87:3e:a5:17:e8:2c:3b:39:16:ac:
6b:82:09:19:86:58:2d:9f:ee:2e:f9:a0:e2:fc:88:50:cf:44:
13:c1:17:8f:23:c2:b4:9f:a2:5f:2b:b9:e8:03:23:5e:19:9a:
4d:18:78:a4:cc:a1:31:a2:4b:05:3b:51:ce:80:58:4b:7d:e1:
3f:3f:b0:7e:ce:14:6f:51:ea:f3:7d:61:df:63:df:76:03:37:
7d:a8:bc:dd:eb:26:4d:04:0d:39:13:c8:3d:9f:73:e6:52:19:
7b:3a:8b:a4:d1:cf:02:d1:a3:d3:fe:2e:05:bf:49:ae:cc:35:
ec:90:db:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 16:01:07 2024 by rpki-client on console-fra.rpki-client.org