Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
File: BwkPumY7Byu1TMfUnoigOAN0y24.mft (raw, json)
Hash identifier: jmiJu2fgupGVftVHqxemNPBF44OPuvQopNDPFxcrIdM=
Subject key identifier: DF:9A:E0:91:73:2E:2C:02:2A:54:5D:F4:D0:EF:FB:A3:E7:B2:E4:61
Authority key identifier: 07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
Certificate issuer: /CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Certificate serial: 01936CA2AD5A56FDEF5030C1FB22F3EE056D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
Manifest number: 137A
Signing time: Wed 27 Nov 2024 08:00:20 +0000
Manifest this update: Wed 27 Nov 2024 08:00:20 +0000
Manifest next update: Thu 28 Nov 2024 08:00:20 +0000
Files and hashes: 1: BwkPumY7Byu1TMfUnoigOAN0y24.crl (hash: wi8HvSPgiZiVpoLco/29HypKgOxzLUzlxTbeUyjLVxY=)
2: zkiX-qKG36HzVecQXyksTqLIrW0.roa (hash: +eiHmZ0L9XXVWYdW4ydfyuSs4EPJlkYwkbTQPrlzNhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 Nov 2024 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6c:a2:ad:5a:56:fd:ef:50:30:c1:fb:22:f3:ee:05:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Validity
Not Before: Nov 27 08:00:20 2024 GMT
Not After : Nov 28 08:00:20 2024 GMT
Subject: CN=df9ae091732e2c022a545df4d0effba3e7b2e461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e8:d7:91:7d:dd:ba:ef:11:f7:a5:5e:77:64:
a8:3f:db:1a:e0:ca:f2:74:a2:47:60:78:cf:a8:9b:
f4:cb:ad:28:a9:06:61:9f:31:b7:a7:ff:64:fb:bb:
7b:14:7f:63:dd:7e:21:98:8c:11:8c:74:93:f9:73:
98:36:c4:cf:fc:16:29:54:f5:e1:a3:d7:5c:55:82:
16:fe:76:d2:2e:01:3d:74:3b:4c:bc:60:6b:56:14:
5f:03:fd:9c:52:0f:3e:ca:ad:e8:08:f1:0a:a7:88:
d3:79:29:be:cc:c3:93:4a:72:e8:5d:80:0c:6f:5c:
2c:fd:01:44:64:49:63:fc:f9:99:c2:b3:e5:75:84:
d3:39:d6:4c:7d:75:6e:df:27:f0:7b:b8:e3:35:c2:
89:0c:a3:16:c2:5f:45:68:0a:9f:57:25:81:c6:bb:
ce:43:50:79:7a:3b:6a:5c:d6:d0:74:91:f0:a6:44:
4b:59:9e:e8:91:74:b6:35:55:1f:73:1c:6d:83:d7:
b5:2d:3a:18:ca:1e:2c:fa:4a:ca:9a:c4:d4:c0:c3:
30:28:4e:6a:a9:4a:73:d9:da:9c:67:76:76:ef:e6:
93:ce:4c:71:54:ed:87:2c:b8:5d:7b:c3:74:5b:5f:
3e:df:98:d0:bf:0d:66:9f:a5:30:14:01:31:c7:a0:
c1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9A:E0:91:73:2E:2C:02:2A:54:5D:F4:D0:EF:FB:A3:E7:B2:E4:61
X509v3 Authority Key Identifier:
keyid:07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a2:1c:7f:57:a1:6a:74:c4:35:4a:61:d7:b8:51:89:7f:14:
17:89:45:a5:81:2a:54:4f:77:15:99:26:83:82:b1:84:5a:c7:
8a:4d:84:19:18:dd:1c:ec:f3:80:bf:cc:04:9f:4e:cd:17:59:
26:97:8e:93:5c:86:9e:54:31:11:66:6a:0f:f2:41:67:ff:1e:
a7:13:12:2b:0b:c8:34:5d:ec:bd:1a:8d:dc:91:7c:7f:b5:79:
fb:e1:7a:43:db:c8:95:73:f2:b5:0a:24:75:fa:8c:38:d0:9c:
f4:43:19:60:8e:6a:c4:12:41:61:dd:a6:56:fc:7d:28:46:d2:
97:07:e0:74:36:d2:f1:8e:80:f1:45:05:d6:3a:59:de:a6:72:
cd:34:c5:63:d6:b7:e0:04:41:37:83:0c:f0:76:f6:d9:25:b8:
67:0d:c2:b3:d9:fe:6b:e2:b5:27:b7:f2:a5:cf:2c:a8:f8:62:
71:2e:94:e3:63:56:09:86:82:c8:56:71:35:51:0d:d8:15:f9:
e6:f0:f0:36:ce:73:7d:b5:ac:26:fd:0c:7b:ba:43:79:2a:49:
8d:f2:98:66:59:ab:ea:20:97:48:ef:52:29:79:c5:3f:f7:a3:
6b:3e:29:70:f8:7c:0c:b4:4c:42:20:d0:50:c2:40:8c:87:1d:
f6:58:87:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 09:34:40 2024 by rpki-client on console-ams.rpki-client.org