Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
File: BYmfOXZIcDij-mNDlSsUtNBysz0.mft (raw, json)
Hash identifier: xcXR2hIfoT33njEFnMcG82ZdLLz97vYkMIDX92AN2uc=
Subject key identifier: EA:C6:07:74:53:D8:47:F0:00:BF:54:E7:66:6E:64:EC:7C:32:7C:ED
Authority key identifier: 05:89:9F:39:76:48:70:38:A3:FA:63:43:95:2B:14:B4:D0:72:B3:3D
Certificate issuer: /CN=05899f3976487038a3fa6343952b14b4d072b33d
Certificate serial: 0193640F928168F9911096467A1C9362C541
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
Manifest number: 10AC
Signing time: Mon 25 Nov 2024 16:02:42 +0000
Manifest this update: Mon 25 Nov 2024 16:02:42 +0000
Manifest next update: Tue 26 Nov 2024 16:02:42 +0000
Files and hashes: 1: BYmfOXZIcDij-mNDlSsUtNBysz0.crl (hash: 4y83Qtthm8VeticJCdo4+XzJtGCthTT7k5OSzpIYkrA=)
2: aDe6MhmkHWutBD16HcaDmkZvbmU.roa (hash: m+U6nBbEByATE5rZnT+YU7k85kTT7K9Ibs3g2wTshHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:64:0f:92:81:68:f9:91:10:96:46:7a:1c:93:62:c5:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05899f3976487038a3fa6343952b14b4d072b33d
Validity
Not Before: Nov 25 16:02:42 2024 GMT
Not After : Nov 26 16:02:42 2024 GMT
Subject: CN=eac6077453d847f000bf54e7666e64ec7c327ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ba:49:6d:79:49:5f:21:f8:61:9f:1c:ca:d7:
f1:97:37:7a:43:4d:b1:99:fd:0d:2c:2b:fb:65:eb:
6d:24:32:01:2d:e5:62:92:7b:a6:10:dd:e0:2f:95:
c6:ab:23:b2:ca:4b:5d:4d:88:10:d1:3a:81:e3:8d:
cd:1a:72:34:ca:e0:52:06:8e:a2:9f:1f:3e:62:81:
e1:31:f5:85:ae:34:b1:e5:27:ce:63:1f:60:20:85:
2f:65:3f:15:51:37:1e:cf:4d:45:2b:2e:f8:8f:3d:
7f:0f:1e:b1:9c:41:8d:df:6d:d3:16:e1:c9:37:da:
31:cb:d6:1a:c4:3f:c7:64:25:2e:bf:72:00:24:0f:
ba:4e:33:1a:0c:8d:98:33:63:c0:e5:8f:bd:33:fe:
0e:a7:81:79:5d:e9:01:5f:00:aa:78:f8:4e:0e:99:
7d:a7:a2:bb:80:f4:7e:cd:2f:d9:85:7b:e5:ee:6a:
03:2d:56:95:9e:d7:00:f6:11:26:e0:6c:b9:bf:c7:
80:3f:62:d5:d7:06:e4:d4:bb:b0:ed:b4:20:dc:da:
a6:f5:d4:9a:bd:2c:fb:29:e8:89:c8:d0:8b:e2:3f:
b4:75:37:60:02:71:a8:16:e5:e5:14:f0:4e:70:8d:
7f:4b:45:c2:3e:7e:51:4b:74:7f:e5:04:9f:e1:97:
bd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C6:07:74:53:D8:47:F0:00:BF:54:E7:66:6E:64:EC:7C:32:7C:ED
X509v3 Authority Key Identifier:
keyid:05:89:9F:39:76:48:70:38:A3:FA:63:43:95:2B:14:B4:D0:72:B3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:bc:e6:63:7e:48:24:2d:39:9e:a4:7b:80:c3:93:d5:1d:44:
e8:09:39:cc:ef:0f:2a:38:49:d6:31:d8:cb:42:19:ad:55:44:
a3:aa:aa:52:ed:91:d6:12:9c:12:21:db:cc:3d:bf:73:9b:b5:
da:7f:70:43:93:40:d2:c9:ff:c1:19:4a:f7:f5:2f:86:58:0f:
f4:03:0d:ce:96:ce:dc:c4:00:cc:4e:ac:aa:a3:7b:28:29:75:
9e:81:5a:76:90:34:48:87:74:89:d9:11:2b:e0:13:d9:68:79:
ee:32:5a:24:89:47:89:94:4e:77:6a:3c:85:14:66:02:c6:df:
f9:be:84:fb:64:e6:ff:1a:ec:08:06:d1:fc:0a:b8:90:f7:8d:
8b:db:f3:57:f3:1b:1a:04:00:ec:cf:b2:17:15:96:4f:b9:68:
8f:fb:63:c8:ff:d2:e1:81:35:54:4a:0c:9d:3d:c5:c2:aa:85:
cb:6d:2d:75:ad:06:52:3c:61:40:c3:9c:23:34:35:53:33:cd:
28:c9:01:5b:eb:d7:f7:cd:a1:41:1c:a7:8b:36:f6:92:8a:c8:
91:e7:be:9a:f6:2c:58:3f:e8:2d:1b:15:42:44:5e:fd:8c:6d:
ad:21:55:41:24:06:f5:48:f9:5b:9e:44:e0:23:35:7f:1d:ed:
d1:08:ac:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:51:58 2024 by rpki-client on console-fra.rpki-client.org