Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4a0237-836b-4596-849e-2d423b81df1c/1/BkipkYBfk9JLvh7bPpYfWh0lskg.mft
File: BkipkYBfk9JLvh7bPpYfWh0lskg.mft (raw, json)
Hash identifier: lAHZM+6ET1PBBrsP539XIG+ZwKbmbMIHu4HjOw7yBik=
Subject key identifier: 0E:F9:F2:E5:1C:8F:19:AE:45:0B:8B:DC:5D:2E:D2:3F:A8:41:78:7D
Authority key identifier: 06:48:A9:91:80:5F:93:D2:4B:BE:1E:DB:3E:96:1F:5A:1D:25:B2:48
Certificate issuer: /CN=0648a991805f93d24bbe1edb3e961f5a1d25b248
Certificate serial: 0193523E19613BA7FC7589E88A2BBCD6FF97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkipkYBfk9JLvh7bPpYfWh0lskg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a0237-836b-4596-849e-2d423b81df1c/1/BkipkYBfk9JLvh7bPpYfWh0lskg.mft
Manifest number: 0AF4
Signing time: Fri 22 Nov 2024 05:00:21 +0000
Manifest this update: Fri 22 Nov 2024 05:00:21 +0000
Manifest next update: Sat 23 Nov 2024 05:00:21 +0000
Files and hashes: 1: BkipkYBfk9JLvh7bPpYfWh0lskg.crl (hash: Aa1xBve/kVJ8btRgvldTjCQl+RjEMB91JH8PxoysV2o=)
2: JhwUgwtLWVO3UZzw6YxK9nTi424.roa (hash: E5hFc5oOSZPPENxpS1R+8/xdR9fMmigzOzlolhNZEu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a0237-836b-4596-849e-2d423b81df1c/1/BkipkYBfk9JLvh7bPpYfWh0lskg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4a0237-836b-4596-849e-2d423b81df1c/1/BkipkYBfk9JLvh7bPpYfWh0lskg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkipkYBfk9JLvh7bPpYfWh0lskg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:3e:19:61:3b:a7:fc:75:89:e8:8a:2b:bc:d6:ff:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0648a991805f93d24bbe1edb3e961f5a1d25b248
Validity
Not Before: Nov 22 05:00:21 2024 GMT
Not After : Nov 23 05:00:21 2024 GMT
Subject: CN=0ef9f2e51c8f19ae450b8bdc5d2ed23fa841787d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:30:1a:e2:9d:8a:b3:59:12:6a:7c:c0:d6:79:
4d:02:cb:1f:68:06:81:f1:aa:ce:ba:95:d2:35:76:
a0:8c:7b:fc:8b:d9:54:97:87:cc:7e:9f:bf:24:78:
61:d1:dc:25:46:82:f5:9a:91:11:f6:42:da:58:49:
ed:91:a3:6c:70:e1:08:c0:c2:8d:2d:14:2c:3f:78:
b3:fd:8c:f2:6d:9c:af:18:05:f3:3a:54:7b:4b:a1:
d4:9d:16:58:39:85:0b:03:af:a6:da:a8:23:63:e3:
5c:0d:77:31:1e:28:4f:1d:ff:ea:2a:2a:05:9e:ce:
3b:34:d2:59:9d:6c:f9:5c:d5:ef:d9:f3:3e:1f:14:
b9:3b:9b:2b:cf:18:56:d8:72:1b:e8:9f:f0:19:90:
76:61:fe:2b:36:4c:d7:b3:6b:06:a1:0d:89:f4:41:
da:0d:c8:46:e4:ea:38:b9:b9:fa:74:39:c2:ed:3a:
69:10:19:ea:77:0b:a4:8f:34:30:3e:2f:1c:34:d1:
1b:f9:34:c9:51:ac:ff:66:c9:94:f9:a6:3a:26:9c:
63:87:2d:ac:18:96:a9:d7:0e:56:70:38:81:58:8c:
79:c8:d3:7c:c2:2c:25:0b:52:4a:c3:29:c1:07:b5:
34:d0:df:93:fb:fc:42:c0:5f:da:fb:d5:02:6d:2d:
0c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F9:F2:E5:1C:8F:19:AE:45:0B:8B:DC:5D:2E:D2:3F:A8:41:78:7D
X509v3 Authority Key Identifier:
keyid:06:48:A9:91:80:5F:93:D2:4B:BE:1E:DB:3E:96:1F:5A:1D:25:B2:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkipkYBfk9JLvh7bPpYfWh0lskg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a0237-836b-4596-849e-2d423b81df1c/1/BkipkYBfk9JLvh7bPpYfWh0lskg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a0237-836b-4596-849e-2d423b81df1c/1/BkipkYBfk9JLvh7bPpYfWh0lskg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:8b:d4:5e:d9:2d:3a:95:68:9c:64:f3:1a:3e:48:f5:30:a6:
1b:59:89:dc:55:ae:e8:96:f6:f8:23:ef:e3:f9:70:68:8c:9d:
b4:71:fc:19:4c:1a:e4:93:3b:3e:77:58:ef:99:70:0e:3b:af:
d5:55:1b:6f:3e:f3:b3:ba:ce:94:34:f4:40:80:f8:80:8b:7e:
40:1e:8b:12:b3:62:55:14:b7:4c:19:e1:82:0f:61:9d:0a:ed:
12:5a:98:06:3b:2d:ef:a7:1e:c7:62:f5:f4:01:de:bd:95:4c:
f3:8f:4b:42:0b:7b:97:16:8c:23:ab:9e:87:09:42:3a:bd:90:
05:c4:15:60:a7:18:01:1a:f8:66:5a:ec:b3:bf:f4:aa:52:0b:
6d:49:62:21:45:aa:c4:ed:91:78:cb:3f:4e:45:e7:e7:78:f5:
70:3a:3e:1b:75:a0:96:09:42:85:f8:d6:25:06:0d:63:ca:71:
e6:22:f4:77:97:da:1f:97:ea:5d:de:1f:d3:7a:25:18:14:d2:
98:6b:37:a9:dd:49:7a:17:69:98:12:ee:79:34:e7:df:a8:ca:
2f:da:15:0a:6f:be:dc:21:4d:c4:ee:26:39:e9:cf:31:f0:d5:
0b:a7:f5:f0:dd:ed:12:ea:c6:1d:50:09:f5:e9:ee:ca:0c:b9:
82:55:3e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:00:42 2024 by rpki-client on console-fra.rpki-client.org