Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4a0237-836b-4596-849e-2d423b81df1c/1/BkipkYBfk9JLvh7bPpYfWh0lskg.mft
File: BkipkYBfk9JLvh7bPpYfWh0lskg.mft (raw, json)
Hash identifier: NJskQdVtLf0QaF05lnyvDEA6qA1HB91v2j1jSupJ1sQ=
Subject key identifier: 1E:85:31:6D:96:5B:9E:FC:98:A9:41:F6:29:3E:28:6A:9E:D0:C1:06
Authority key identifier: 06:48:A9:91:80:5F:93:D2:4B:BE:1E:DB:3E:96:1F:5A:1D:25:B2:48
Certificate issuer: /CN=0648a991805f93d24bbe1edb3e961f5a1d25b248
Certificate serial: 018F1F02CD1A387A7C13E7011932580A4FBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkipkYBfk9JLvh7bPpYfWh0lskg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a0237-836b-4596-849e-2d423b81df1c/1/BkipkYBfk9JLvh7bPpYfWh0lskg.mft
Manifest number: 08C7
Signing time: Sat 27 Apr 2024 10:03:48 +0000
Manifest this update: Sat 27 Apr 2024 10:03:48 +0000
Manifest next update: Sun 28 Apr 2024 10:03:48 +0000
Files and hashes: 1: BkipkYBfk9JLvh7bPpYfWh0lskg.crl (hash: nRNDJZZATq02KhovlfnhBWAKIk/q4Vc5SDmD1Eh0nq0=)
2: w7W-sGG4J0pk7Vp5XIeBttxqUKE.roa (hash: /4wTCmv7rAWAlFIPvWeJRH3wIxq2LZ4FUaESrnGpC/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a0237-836b-4596-849e-2d423b81df1c/1/BkipkYBfk9JLvh7bPpYfWh0lskg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4a0237-836b-4596-849e-2d423b81df1c/1/BkipkYBfk9JLvh7bPpYfWh0lskg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkipkYBfk9JLvh7bPpYfWh0lskg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 10:03:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:1f:02:cd:1a:38:7a:7c:13:e7:01:19:32:58:0a:4f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0648a991805f93d24bbe1edb3e961f5a1d25b248
Validity
Not Before: Apr 27 10:03:48 2024 GMT
Not After : Apr 28 10:03:48 2024 GMT
Subject: CN=1e85316d965b9efc98a941f6293e286a9ed0c106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fc:0b:7b:a7:ea:69:d9:df:11:19:41:97:d6:
49:46:4a:3c:a7:84:73:50:fa:58:9b:8c:8c:99:0d:
62:8d:ac:4d:88:55:40:d7:4f:e3:fa:e3:bd:c9:1b:
f0:59:cf:52:93:8e:02:a0:5c:22:3e:92:22:e5:1f:
31:ef:40:6b:47:33:16:09:75:5a:dc:7d:ca:73:a1:
6b:3e:27:d5:45:0a:af:65:7b:51:dc:5e:44:ff:e7:
50:79:2a:de:86:aa:95:9c:5c:43:69:bb:4a:be:a6:
80:87:a0:af:ae:73:52:c8:15:5f:0c:aa:39:08:ed:
7b:90:94:38:0c:f0:63:54:91:44:82:be:88:9c:ea:
38:09:6a:39:7e:bd:6f:53:06:cf:bb:6d:39:d4:c9:
90:49:5a:2b:26:c1:6e:11:d1:74:06:31:a4:b3:3d:
8e:31:d0:89:4e:20:26:98:7a:40:c2:ff:41:5b:ec:
26:d3:86:ff:c4:0f:1c:c7:70:30:c5:a3:c7:dc:d6:
de:b4:76:c7:58:b9:68:4a:96:e6:18:24:17:82:fe:
d7:a8:e2:f4:9e:f2:34:fd:26:6f:67:50:39:db:0c:
a8:80:b8:7f:91:8e:ed:31:ef:a9:12:f2:fa:7b:37:
40:2b:9b:4c:5d:47:d9:2b:ea:c0:ce:78:71:e8:66:
c3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:85:31:6D:96:5B:9E:FC:98:A9:41:F6:29:3E:28:6A:9E:D0:C1:06
X509v3 Authority Key Identifier:
keyid:06:48:A9:91:80:5F:93:D2:4B:BE:1E:DB:3E:96:1F:5A:1D:25:B2:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkipkYBfk9JLvh7bPpYfWh0lskg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a0237-836b-4596-849e-2d423b81df1c/1/BkipkYBfk9JLvh7bPpYfWh0lskg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a0237-836b-4596-849e-2d423b81df1c/1/BkipkYBfk9JLvh7bPpYfWh0lskg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:c2:e6:1c:47:eb:26:3d:76:86:be:89:41:05:dd:db:c3:a0:
66:de:e5:18:f8:45:6e:ba:8d:41:20:ca:18:ce:74:26:48:72:
53:77:3b:13:72:5d:ee:db:61:b5:27:66:83:5e:04:84:3f:a7:
97:86:02:85:fc:61:6b:8e:fa:0f:c4:6e:a7:e6:57:e2:59:7d:
dc:7f:ca:67:49:66:7c:1e:d4:a8:b9:7b:ba:26:ad:ef:d5:11:
09:fe:41:6c:f9:b5:f0:97:58:f2:8b:cb:ce:4f:59:b9:b9:17:
e2:f3:19:47:d5:69:48:e6:c6:f9:07:92:db:a9:7d:4f:f0:04:
67:44:1c:df:8a:e4:6c:40:c0:66:b6:9b:08:58:50:e2:06:4b:
b2:4a:cf:98:9b:64:93:db:93:08:34:89:b9:cb:f8:70:62:ef:
4a:8a:e2:9b:46:61:13:52:9f:42:f7:50:76:af:6e:68:ba:19:
33:65:23:99:5f:bf:76:f4:20:3c:ab:6a:1d:5b:1b:74:35:17:
cf:1c:61:41:5c:2c:ff:87:1e:3a:ea:f9:16:e9:c8:a3:b5:12:
1c:42:a1:2b:e5:e1:bc:21:3d:fb:4d:63:d3:52:db:e9:46:3e:
a3:5f:bf:70:12:24:7a:3c:26:b0:2b:65:ac:8f:6a:dc:34:cb:
cd:7a:96:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 16:42:21 2024 by rpki-client on console-ams.rpki-client.org