Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
File: BHMrmF-PY_-K6OrHxwgyswzugK0.mft (raw, json)
Hash identifier: MH477YLIPAwwAOlwFcHvLLzyw8CyjI7dOmChK6CaPTQ=
Subject key identifier: DA:82:11:BF:A5:EA:BD:03:79:C6:BA:4C:58:D3:D3:81:5C:1B:CD:6A
Authority key identifier: 04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
Certificate issuer: /CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Certificate serial: 019356F6BCACFB210EDD083176C09FA736B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
Manifest number: 1373
Signing time: Sat 23 Nov 2024 03:00:30 +0000
Manifest this update: Sat 23 Nov 2024 03:00:30 +0000
Manifest next update: Sun 24 Nov 2024 03:00:30 +0000
Files and hashes: 1: 476BomY9m3jW0IaLTX7PZGBCMbQ.roa (hash: ctkv84p7TVSM/vbA6R8qRGLwbdRt3J6Vg60b6FeTn28=)
2: BHMrmF-PY_-K6OrHxwgyswzugK0.crl (hash: Kp0N4h2j3gwphmvifWIbUwrvMw62RM9Mle009B1ATEE=)
3: VkZUzKMEC22O528ALAdV9pvMAJo.roa (hash: HNsqL376ulut5IiMJiwryplmbSRzaMwHvIfhCbzDW+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f6:bc:ac:fb:21:0e:dd:08:31:76:c0:9f:a7:36:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Validity
Not Before: Nov 23 03:00:30 2024 GMT
Not After : Nov 24 03:00:30 2024 GMT
Subject: CN=da8211bfa5eabd0379c6ba4c58d3d3815c1bcd6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:94:54:57:8f:4a:74:35:cf:07:27:e9:95:2d:
bf:94:d4:10:40:64:27:21:bb:e7:85:cd:35:d2:14:
7c:ad:a1:db:ed:a5:ab:88:c8:e0:38:36:4c:09:b3:
f4:54:0f:02:90:99:9b:09:8d:ba:98:fb:a3:85:71:
1d:97:74:a0:e9:4b:d7:5e:4d:b3:a7:62:64:df:bb:
8c:04:57:2b:77:ea:54:ce:f3:2b:c9:a8:8b:77:5a:
1d:58:f8:78:eb:c5:5d:02:17:8c:5b:40:54:16:cf:
c7:46:96:fb:77:3c:3d:83:2e:19:17:d9:41:00:7b:
1b:66:71:f6:46:cb:90:bd:4b:26:22:b3:cc:c9:16:
20:2e:4c:f3:30:97:3e:89:64:64:d3:09:9c:00:a5:
7f:d4:8a:aa:c8:5c:29:9c:74:8f:a6:be:ea:55:02:
79:f5:b8:1c:b6:52:ae:18:76:4f:69:cb:15:6b:4c:
db:9f:04:67:0f:91:c6:bb:60:63:c0:bc:1d:34:79:
c6:7b:ce:6e:8f:16:a0:6a:ce:b7:a9:78:bf:cf:75:
0c:75:ef:3b:6f:db:23:92:5d:76:45:c3:2c:0f:24:
75:60:33:4c:36:61:79:04:3e:20:04:5c:e3:5d:ca:
eb:6c:b4:b3:92:20:59:d8:f5:34:f2:0d:8e:9a:2e:
87:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:82:11:BF:A5:EA:BD:03:79:C6:BA:4C:58:D3:D3:81:5C:1B:CD:6A
X509v3 Authority Key Identifier:
keyid:04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:11:ef:0d:3d:cb:1e:75:53:6e:1f:f0:34:8c:ba:db:be:d3:
49:e5:75:bd:f0:7b:88:b9:11:47:81:51:31:0b:61:4f:31:2b:
9a:8c:f5:e6:7d:58:d9:ed:75:d2:34:f3:30:70:44:d6:14:fd:
31:1e:76:ff:f6:49:13:35:d3:02:0c:55:e7:9d:ef:ed:de:f6:
0d:33:79:34:d7:f7:3d:eb:52:8a:00:21:4b:8e:87:9d:75:82:
6a:e4:82:05:c9:4e:f6:00:42:e5:19:51:57:53:a3:63:2a:42:
e6:80:98:2f:6c:10:6f:b8:c5:b6:2d:fb:ab:89:1b:c8:38:03:
eb:76:50:ef:1b:1a:6f:51:e8:de:a8:dc:9e:8e:4f:d6:7b:41:
6f:2b:6b:62:f3:d9:7c:0c:01:89:5e:9e:3b:96:ac:a2:88:24:
a9:4c:05:0b:cc:16:d0:f8:01:ca:7f:33:41:ff:df:ea:97:70:
b7:9a:c8:26:23:a8:ee:21:8b:a1:53:46:f7:5b:7c:40:6d:88:
25:dc:14:a7:02:0a:7e:61:66:ac:12:02:96:6f:60:56:5a:c3:
95:8f:f3:38:96:7b:20:38:39:04:4b:80:ee:bc:9d:88:b7:b4:
44:c6:6c:f6:b9:f7:aa:95:e2:76:a8:6b:7e:71:b9:87:24:e3:
63:b7:62:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:54:24 2024 by rpki-client on console-ams.rpki-client.org