Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/8d7e7c-db7a-465f-8032-255100f2016a/1/BzptPeXBJcH-i1--iVhGVuWGGi0.mft
File: BzptPeXBJcH-i1--iVhGVuWGGi0.mft (raw, json)
Hash identifier: Xlh0ZYL6IfYd/qfryAtU2CHxz+voOctE8/2yft6RIx8=
Subject key identifier: 5A:E1:19:82:79:7D:29:76:11:61:75:5A:1B:0E:76:1A:63:44:26:7B
Authority key identifier: 07:3A:6D:3D:E5:C1:25:C1:FE:8B:5F:BE:89:58:46:56:E5:86:1A:2D
Certificate issuer: /CN=073a6d3de5c125c1fe8b5fbe89584656e5861a2d
Certificate serial: 018F4CB4BDF181A482259E5B7835BCB5E87B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzptPeXBJcH-i1--iVhGVuWGGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/8d7e7c-db7a-465f-8032-255100f2016a/1/BzptPeXBJcH-i1--iVhGVuWGGi0.mft
Manifest number: 1160
Signing time: Mon 06 May 2024 07:01:04 +0000
Manifest this update: Mon 06 May 2024 07:01:04 +0000
Manifest next update: Tue 07 May 2024 07:01:04 +0000
Files and hashes: 1: 9oKcMDaiesNbrplqA5XM_jVahG0.roa (hash: Zjfrx4WPgo4k1uSXw5WH1H9Cp2RfWktwA9XHsrQAlGM=)
2: BzptPeXBJcH-i1--iVhGVuWGGi0.crl (hash: p1yV8OlrmK47s2qL56X8PbIpalGTEhsbVpEvkTAM718=)
3: dwBVxZ0s6xdeNh1sBPtbF-qM8L0.roa (hash: nUibzeu7rD7h6rV4IIKVuNEfbJqPTEp3C1nMSr4qx1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/8d7e7c-db7a-465f-8032-255100f2016a/1/BzptPeXBJcH-i1--iVhGVuWGGi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/8d7e7c-db7a-465f-8032-255100f2016a/1/BzptPeXBJcH-i1--iVhGVuWGGi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzptPeXBJcH-i1--iVhGVuWGGi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4c:b4:bd:f1:81:a4:82:25:9e:5b:78:35:bc:b5:e8:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073a6d3de5c125c1fe8b5fbe89584656e5861a2d
Validity
Not Before: May 6 07:01:04 2024 GMT
Not After : May 7 07:01:04 2024 GMT
Subject: CN=5ae11982797d29761161755a1b0e761a6344267b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:28:4a:3b:3e:34:85:85:c3:75:3d:bf:04:c4:
79:2b:53:e6:3f:d5:24:ce:a2:7f:75:51:d2:e5:80:
9a:d9:b4:84:62:90:60:5a:48:a1:aa:6f:f6:96:7d:
9b:a8:47:60:9f:7b:78:c4:57:57:06:cb:75:28:35:
66:d1:8e:13:15:01:13:1d:df:2d:b9:d1:44:7e:dc:
a5:f5:2d:4f:09:65:7d:f2:1b:bf:4f:48:ac:22:ae:
9b:aa:62:4b:09:6c:76:ae:f1:a8:fb:52:26:65:2f:
76:e3:30:52:98:71:32:b3:0d:38:66:fe:73:ff:e4:
5e:25:04:38:03:31:c1:87:b3:70:5c:1e:b2:8c:66:
ec:3f:c2:be:28:31:32:a8:f6:40:d4:91:b0:be:66:
19:f0:89:cc:40:bf:98:70:99:7f:ea:b3:7a:cf:84:
bb:9f:62:67:12:2c:52:3a:8d:ae:b7:f2:39:0b:e6:
f6:be:73:bf:a2:0b:db:03:ea:e6:56:03:c6:18:26:
62:15:4e:14:22:65:9b:2a:fb:60:76:f5:5e:c4:38:
0e:c2:91:94:17:31:93:26:06:07:5e:48:64:65:1c:
fa:1f:d8:c2:0f:23:f9:01:ad:74:93:8f:8b:0e:ff:
fe:1f:60:3b:e9:0c:65:4e:44:c1:e0:99:b3:1e:8a:
4e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E1:19:82:79:7D:29:76:11:61:75:5A:1B:0E:76:1A:63:44:26:7B
X509v3 Authority Key Identifier:
keyid:07:3A:6D:3D:E5:C1:25:C1:FE:8B:5F:BE:89:58:46:56:E5:86:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzptPeXBJcH-i1--iVhGVuWGGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8d7e7c-db7a-465f-8032-255100f2016a/1/BzptPeXBJcH-i1--iVhGVuWGGi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8d7e7c-db7a-465f-8032-255100f2016a/1/BzptPeXBJcH-i1--iVhGVuWGGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f8:5b:51:d4:42:b1:9f:37:f5:ca:e8:c5:99:cc:d3:3a:db:
8e:b8:35:cf:d3:c0:51:3b:34:ab:59:ef:ce:b2:33:ee:34:c7:
31:63:1b:be:46:8e:47:e3:6d:f3:7b:9f:24:00:ef:b3:96:8e:
7b:55:2a:e0:41:68:f8:a0:1e:69:6e:c6:a2:e8:99:85:ff:de:
c8:ec:52:8f:eb:41:a1:d2:c9:32:69:4f:42:a2:34:1a:54:df:
b8:a8:28:76:93:e1:89:76:3d:c3:71:89:ca:ca:da:2c:bf:2a:
f7:1c:91:44:8d:11:01:1d:ba:3e:18:ed:b8:37:a3:98:e2:3f:
50:4c:3f:4a:4d:43:45:5b:53:26:83:e1:42:9a:90:3a:12:0f:
ce:a6:ce:8a:49:e7:96:40:96:19:66:c0:e2:45:04:39:bd:4d:
38:5c:ec:3f:94:f6:d5:41:be:13:e2:83:50:9b:db:f5:c6:6a:
4e:dd:6d:e0:56:12:6b:54:dc:16:35:9f:09:e5:b9:ca:ab:71:
64:d3:ee:5a:a5:0e:10:5c:2f:23:eb:cc:c6:a6:52:b5:f3:d2:
17:fe:59:27:b1:6a:62:d5:75:12:6d:49:42:a8:a1:ad:81:8c:
d1:a3:60:1e:dd:3e:3d:da:7c:8c:aa:4a:32:8d:2b:d9:e7:42:
ac:f8:b5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:12:20 2024 by rpki-client on console-ams.rpki-client.org