Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
File: BYmfOXZIcDij-mNDlSsUtNBysz0.mft (raw, json)
Hash identifier: 5P8Ghvqf0/wKTk4Z0DIE6uvX0bWciL4Zl4FFCOPiPE0=
Subject key identifier: 91:B9:B9:52:29:A5:74:BC:5B:34:52:D3:31:08:D4:23:2F:6B:19:BB
Authority key identifier: 05:89:9F:39:76:48:70:38:A3:FA:63:43:95:2B:14:B4:D0:72:B3:3D
Certificate issuer: /CN=05899f3976487038a3fa6343952b14b4d072b33d
Certificate serial: 019238B99E4F7D3EF1FF332093DF0007A22D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
Manifest number: 1011
Signing time: Sat 28 Sep 2024 13:02:21 +0000
Manifest this update: Sat 28 Sep 2024 13:02:21 +0000
Manifest next update: Sun 29 Sep 2024 13:02:21 +0000
Files and hashes: 1: BYmfOXZIcDij-mNDlSsUtNBysz0.crl (hash: 0H4VFrsp12Ttc5sW+058A0hQ7S6IsKiqzAwjJclel3Q=)
2: aDe6MhmkHWutBD16HcaDmkZvbmU.roa (hash: m+U6nBbEByATE5rZnT+YU7k85kTT7K9Ibs3g2wTshHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:38:b9:9e:4f:7d:3e:f1:ff:33:20:93:df:00:07:a2:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05899f3976487038a3fa6343952b14b4d072b33d
Validity
Not Before: Sep 28 13:02:21 2024 GMT
Not After : Sep 29 13:02:21 2024 GMT
Subject: CN=91b9b95229a574bc5b3452d33108d4232f6b19bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:40:9d:42:09:95:70:ef:32:6e:c1:16:9e:a1:
45:ae:3e:99:84:9e:bf:41:2b:df:42:75:f5:f2:c4:
f0:40:f0:28:cd:97:16:88:28:91:d7:e6:93:5f:00:
f8:ac:58:10:81:64:ed:16:91:62:87:28:57:5a:85:
80:0e:58:28:a1:a6:1f:97:2d:73:00:c5:44:dc:8f:
e4:cd:a2:96:6d:04:0f:5f:7f:e0:f1:c9:29:d7:20:
d2:cd:2f:12:72:f8:fb:8e:9c:c6:7a:01:1d:c5:29:
57:1e:56:0f:89:1c:73:1f:24:e4:5d:21:e6:55:10:
39:94:9a:62:63:9a:3b:d4:7e:eb:1e:d8:bf:fd:21:
a5:e6:d2:a6:11:1b:7f:d7:6f:26:bd:a0:29:3e:b7:
5d:7f:36:e9:42:12:de:96:e8:9e:c0:6f:46:40:1e:
3f:58:1b:31:af:d2:d5:26:00:04:ae:56:4c:df:46:
bf:07:b2:d5:c1:8e:3a:c0:68:b9:2a:e6:2f:8b:af:
00:ae:a5:bc:f3:9b:4e:f4:a5:8e:ba:af:93:1d:0a:
1b:3c:a1:03:e6:47:8b:29:6c:7c:b4:c8:17:a6:dd:
d0:5f:71:b8:2e:a5:d0:f5:ee:12:07:bf:c0:ec:72:
fa:66:e8:c8:a4:df:0a:20:86:80:5d:bf:c1:ae:3e:
06:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B9:B9:52:29:A5:74:BC:5B:34:52:D3:31:08:D4:23:2F:6B:19:BB
X509v3 Authority Key Identifier:
keyid:05:89:9F:39:76:48:70:38:A3:FA:63:43:95:2B:14:B4:D0:72:B3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e0:95:f7:31:71:0c:8b:08:e8:dc:d2:ec:01:f9:8e:d2:ec:
cb:60:44:83:41:f1:be:41:ce:98:e4:45:b0:52:2a:83:c3:79:
3e:d2:e4:05:58:cb:40:5c:b8:24:04:6c:a5:55:47:7c:be:a7:
29:34:90:e3:ab:0e:ac:3b:2f:69:85:14:25:7a:ce:0c:c7:a7:
21:3d:d5:93:6f:0d:f5:e9:b1:ee:8d:78:2d:1f:0f:af:ca:66:
76:d0:04:44:c8:4d:34:f2:13:3b:23:bb:0c:03:e1:5e:11:0c:
a2:17:7b:51:5d:c1:1d:7b:fd:17:eb:db:8c:b2:7e:49:6c:58:
7d:d1:4e:87:2f:c9:f6:d8:fe:db:ce:58:e4:77:10:29:58:10:
88:38:5d:e8:59:db:06:ab:c8:11:e5:ed:de:c5:cf:fc:58:c3:
60:17:64:a1:32:68:a2:4b:bf:02:a5:73:bb:1c:64:ca:97:ff:
d6:8b:4c:fd:95:34:3e:5d:8d:39:27:0e:75:ed:1b:74:7b:80:
d0:36:e0:4b:06:a8:33:92:de:e8:5a:a1:49:fc:0c:f1:3f:56:
e9:5e:4d:12:44:7d:ae:81:ed:76:88:7d:dd:69:e8:b7:aa:34:
12:a3:3b:a4:4a:73:a9:cf:76:ae:55:a1:4b:09:38:31:f2:f4:
38:02:49:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 16:14:01 2024 by rpki-client on console-fra.rpki-client.org