Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
File: BMXx0XeetwkJA2XbmCkXrf0PgEk.mft (raw, json)
Hash identifier: Wc25//1v1rjV35d5sqc9O/U8UvHPGSQcgbkCgYmjJg4=
Subject key identifier: 81:4D:93:38:26:5A:FB:C9:69:53:AA:B1:10:FD:4A:97:F9:12:9B:48
Authority key identifier: 04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
Certificate issuer: /CN=04c5f1d1779eb709090365db982917adfd0f8049
Certificate serial: 01936B900ACA05B907D7BF88F7D952F5586A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
Manifest number: 083F
Signing time: Wed 27 Nov 2024 03:00:22 +0000
Manifest this update: Wed 27 Nov 2024 03:00:22 +0000
Manifest next update: Thu 28 Nov 2024 03:00:22 +0000
Files and hashes: 1: BMXx0XeetwkJA2XbmCkXrf0PgEk.crl (hash: bNmTgPIcqfKd15nqAKVaP8XaTagP18pGNqnc56q2pkw=)
2: QWprQh08OMlgnpAelM05447RhmU.roa (hash: Azfz7/uI98Dj2v8aH5KWFbACsbIanG/bUwJ4MvrCoec=)
3: X2AF0wk6E2kjIj2nL8NlNMxzW0w.roa (hash: LwnHOfwkrCh5Ig67Gwudwi2KovtA9npgRnfwFvGJwik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6b:90:0a:ca:05:b9:07:d7:bf:88:f7:d9:52:f5:58:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04c5f1d1779eb709090365db982917adfd0f8049
Validity
Not Before: Nov 27 03:00:22 2024 GMT
Not After : Nov 28 03:00:22 2024 GMT
Subject: CN=814d9338265afbc96953aab110fd4a97f9129b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:df:9f:11:bb:ae:6e:8d:72:fd:5c:86:d9:58:
41:10:3e:9e:d5:1e:0a:c7:19:0d:80:23:1c:fb:73:
6c:40:3e:4e:4e:33:b7:93:a2:17:0f:cb:41:20:1c:
2c:62:99:bf:15:94:4e:a6:52:68:67:15:3c:eb:5f:
f5:37:cd:61:8c:3b:6f:60:d3:ed:c3:9f:b0:9d:d0:
c7:66:db:c6:9f:59:08:6d:8e:c4:46:c2:4e:bc:ef:
2c:3b:d0:1e:7e:73:89:5d:2e:8e:aa:da:ec:77:cc:
30:1e:fc:e3:75:1b:36:5d:a1:e7:42:30:0f:55:a1:
55:3d:f1:ef:70:26:56:7b:06:f5:d4:21:e5:b4:e8:
96:bf:8c:a8:0a:d6:30:71:97:25:03:00:77:20:51:
a0:d9:41:8b:a8:80:49:38:5a:e0:bd:a6:5c:00:e7:
f4:8a:6a:d3:f8:6c:c6:b5:69:82:1a:59:00:1c:49:
fd:e5:ff:16:a9:b8:cd:ea:75:0a:93:4f:d4:7a:88:
66:65:91:0a:71:d4:8a:74:69:70:71:a5:88:87:6e:
4a:af:e7:7b:54:65:80:9a:fa:53:b6:c4:5c:ec:17:
b5:de:35:b4:d4:a5:00:04:fd:9a:a1:ca:aa:0b:af:
fd:20:99:dd:41:c3:5c:42:85:e2:c6:16:10:08:d0:
d3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:4D:93:38:26:5A:FB:C9:69:53:AA:B1:10:FD:4A:97:F9:12:9B:48
X509v3 Authority Key Identifier:
keyid:04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:fd:45:41:96:63:98:44:57:76:06:14:2b:6b:7b:e7:9a:13:
2a:6f:e0:53:a6:4f:77:4b:f4:0c:6c:b5:56:2f:e5:d9:d6:fa:
c8:b3:93:9e:2b:31:53:ea:34:98:db:00:62:ba:55:35:2c:cb:
2b:90:66:89:9f:05:78:a4:27:65:e9:e2:e6:5b:d1:c0:bb:2a:
79:a5:dd:6d:ca:ce:6d:4c:4c:c3:5c:97:b2:63:b2:ca:34:29:
18:c1:6a:b0:fc:b9:3d:1b:48:f9:dd:46:b2:b2:88:5a:26:65:
3d:53:05:05:9d:1c:e0:a7:3d:a9:fe:c4:88:bc:b4:b6:bd:c3:
65:80:5f:d2:d4:40:18:c4:08:17:51:aa:5d:9c:99:67:9b:73:
52:85:21:86:0d:4b:eb:44:8e:e4:b9:c8:e7:22:45:a8:54:9d:
16:db:84:fd:3e:ad:28:d2:0d:d0:20:5b:0f:f4:76:b3:56:51:
9a:86:ab:3e:7e:e7:7f:1f:40:77:f2:d0:fc:a3:3f:37:be:f3:
95:e9:a0:85:f9:a4:43:d9:b7:d0:07:5c:0b:9e:1d:e3:8e:81:
98:fa:e7:55:57:f8:d1:74:31:3d:9b:e3:2e:1f:45:54:65:9b:
58:76:13:3f:c8:fd:d1:30:81:d4:fd:17:fe:61:dc:9e:87:0c:
fa:ed:13:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 04:44:59 2024 by rpki-client on console-fra.rpki-client.org