Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
File: bPmyTywIR9BBweZqEvAeq6R4tPw.mft (raw, json)
Hash identifier: 406ASYarzqm8FXN2MaJWzYpEWBK0GMaM3Z69a2vp/CM=
Subject key identifier: BC:B8:92:73:31:79:8F:A0:8E:8A:75:31:5F:FB:E7:5C:6B:17:22:44
Authority key identifier: 6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC
Certificate issuer: /CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
Certificate serial: 018F87499DECCBB397F4D82D4723088FCD23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
Manifest number: 0EC2
Signing time: Fri 17 May 2024 16:01:39 +0000
Manifest this update: Fri 17 May 2024 16:01:39 +0000
Manifest next update: Sat 18 May 2024 16:01:39 +0000
Files and hashes: 1: ELpB27xnqDBjtz7cuFCY15QJjOk.roa (hash: 46dUd1+IiGRKMfxdezd6TC6QkKM3KDUvG7yHJXtQKAc=)
2: J4KXloaCMP2UDZiDCqkUKvTWBbo.roa (hash: 30RmeVS4RZ18Pc5MOAdCS+cUOWDS9MZ2FqI9hgnQs6o=)
3: bPmyTywIR9BBweZqEvAeq6R4tPw.crl (hash: b/tYz6WSgb3lydVHV23sKgfHCqqo+8f9KjnfObt09Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:49:9d:ec:cb:b3:97:f4:d8:2d:47:23:08:8f:cd:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
Validity
Not Before: May 17 16:01:39 2024 GMT
Not After : May 18 16:01:39 2024 GMT
Subject: CN=bcb8927331798fa08e8a75315ffbe75c6b172244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8e:f2:d2:b6:7c:74:f6:82:0d:3b:6c:03:8b:
d0:8a:df:50:f5:b2:7e:0f:ed:53:48:6a:9e:d8:9c:
69:3a:1f:fa:79:4c:c8:5b:96:1a:15:c6:b3:d9:0e:
d8:01:60:aa:dd:48:3a:70:0c:c3:1c:bd:fc:ed:30:
55:91:31:6e:79:d8:22:ff:ba:6c:59:ed:92:53:3b:
86:8a:40:7f:bf:25:b5:9e:88:6e:70:41:85:a9:c6:
46:8e:32:05:2e:c5:54:a6:37:7c:ec:1d:68:07:c2:
39:bf:40:2c:e9:a6:ee:af:52:d4:4d:42:a9:b6:d4:
56:ca:ab:9c:b8:28:98:7c:69:5a:94:80:7c:a6:e0:
03:b2:37:ce:b2:dc:4a:1d:0a:4b:e5:6b:c7:5f:5a:
27:d9:d7:08:4e:ae:73:b2:55:5f:64:aa:94:7c:a6:
57:98:2c:2a:a6:64:11:70:f6:f6:1c:87:10:a2:f0:
81:ca:e3:4d:bd:7b:b8:32:a5:74:61:d0:8c:1e:9c:
cc:a7:44:6c:ab:00:34:9d:3c:5c:c0:5b:6b:c1:d0:
31:3b:97:5b:67:ac:eb:ab:3a:ac:90:25:a8:28:8f:
44:8c:47:e5:36:fa:bf:80:dc:c2:64:36:a4:68:fe:
65:20:ec:d3:55:9a:7c:3b:50:1c:03:47:b8:03:ec:
2f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B8:92:73:31:79:8F:A0:8E:8A:75:31:5F:FB:E7:5C:6B:17:22:44
X509v3 Authority Key Identifier:
keyid:6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:fd:ae:6b:be:4b:a2:6b:f6:4d:4c:9d:c8:3d:c3:61:e8:60:
ea:9e:d9:1d:55:07:b5:4f:26:29:38:5d:40:20:d4:7b:cf:60:
fe:dc:44:5f:86:26:68:42:5c:fa:da:14:bd:f9:57:b8:50:e3:
31:5c:84:e4:f6:eb:f7:a2:b0:9d:7e:fb:c0:2c:43:35:d0:aa:
9a:ee:22:a9:56:1c:a4:8d:26:8d:90:b9:3f:3f:f1:a8:4d:13:
90:41:28:12:fe:e8:4c:c8:38:3a:ab:6b:a2:87:0f:48:c8:d5:
90:6d:38:b0:d3:9c:91:d2:b5:87:5f:fb:1a:aa:68:37:0d:6a:
da:2f:e2:81:5d:46:f6:d1:39:6b:29:fd:22:95:2e:81:c8:29:
01:fe:2a:81:01:4a:6f:10:f9:64:8a:28:d1:7c:a3:67:4f:52:
c2:a4:46:ef:b1:0c:9c:f7:26:8c:03:1c:1a:17:09:3e:9e:36:
89:7f:bc:a9:b7:8c:69:08:94:eb:ad:d6:fb:e1:ec:af:c0:ea:
ad:19:44:01:26:a8:01:b4:56:e7:f5:f1:89:a4:21:24:48:2a:
ed:78:6f:ed:2a:e6:a0:48:fc:65:75:a7:f8:a1:95:d5:14:30:
1f:b3:15:ec:ce:f9:a3:af:92:be:51:6e:ba:90:56:3d:78:c9:
4e:d5:79:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:42:59 2024 by rpki-client on console-ams.rpki-client.org