Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
File: BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft (raw, json)
Hash identifier: NCm52LzDz12V/lyKuRdAlVgaOflQeEZuowg4mDXmJRk=
Subject key identifier: 83:D0:5E:62:2A:1B:AE:81:BA:A0:E1:91:AA:9F:C4:0B:16:D0:FA:E1
Authority key identifier: BC:09:F1:50:8E:1B:C1:1B:EE:CB:80:8E:5B:01:E6:F5:DB:8D:81:68
Certificate issuer: /CN=bc09f1508e1bc11beecb808e5b01e6f5db8d8168
Certificate serial: 70E98E62F7BCF1890FFD9F8C37BB608CA6990260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
Manifest number: 7D
Signing time: Fri 17 May 2024 17:38:26 +0000
Manifest this update: Fri 17 May 2024 17:33:26 +0000
Manifest next update: Sat 18 May 2024 18:39:26 +0000
Files and hashes: 1: BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl (hash: Ff1Zu6l4PCEbpcMKnV6eTIJPOWU5EEs0a3GFwpVtwqo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl
rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:e9:8e:62:f7:bc:f1:89:0f:fd:9f:8c:37:bb:60:8c:a6:99:02:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc09f1508e1bc11beecb808e5b01e6f5db8d8168
Validity
Not Before: May 17 17:33:26 2024 GMT
Not After : May 18 18:39:26 2024 GMT
Subject: CN=83D05E622A1BAE81BAA0E191AA9FC40B16D0FAE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ad:39:61:4f:81:ee:ac:88:c8:9d:3d:f4:1f:
65:ba:e2:13:8d:ed:5a:e8:cb:1e:e3:f5:ff:87:f7:
57:75:95:92:25:c8:9a:21:1f:31:e2:e9:bf:48:bd:
30:85:02:cc:28:19:7d:fa:4c:9a:53:55:8c:d6:d8:
8f:1b:65:68:a2:fe:11:44:70:ac:53:86:fa:bb:69:
e9:f0:82:53:81:c6:16:9d:5d:ea:15:c0:7a:eb:1a:
43:06:e1:35:6d:f2:b3:3c:e0:73:79:27:f1:cb:9c:
5d:fc:98:1b:ce:14:a3:08:5e:43:c7:2e:83:12:53:
35:73:60:56:1f:3b:af:f2:8c:d4:ef:ac:b9:85:fe:
3a:ec:d8:a2:3c:fc:9b:2b:04:85:32:fa:1e:d6:e3:
81:29:b7:78:04:57:b9:ca:aa:45:d4:4f:31:d8:71:
b7:bf:a0:8d:67:a0:15:db:12:a8:c4:df:78:81:95:
55:90:e4:6c:7c:1b:5f:1f:40:1b:3a:3f:61:c2:e1:
e9:21:4b:51:3f:60:8e:b3:5e:87:55:9d:92:41:7c:
b7:16:be:d7:8f:f4:96:c1:b3:b5:2b:16:b0:ae:a1:
78:26:e1:55:1c:fb:0f:65:a8:d5:ef:5a:66:37:f9:
61:69:6c:c5:cd:f2:0a:4e:f2:5d:d2:42:ef:21:e2:
a2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D0:5E:62:2A:1B:AE:81:BA:A0:E1:91:AA:9F:C4:0B:16:D0:FA:E1
X509v3 Authority Key Identifier:
keyid:BC:09:F1:50:8E:1B:C1:1B:EE:CB:80:8E:5B:01:E6:F5:DB:8D:81:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:db:85:2d:5a:f9:99:dd:72:6b:0e:fd:dc:99:49:e0:59:8f:
76:da:6f:fa:f0:d9:8a:14:3f:8c:79:7b:40:15:a5:23:63:fc:
52:52:ff:25:de:da:4b:f9:83:ee:e6:19:95:89:93:74:5a:82:
e0:ee:49:61:8a:84:c7:c8:9d:19:42:13:d3:59:ee:0e:56:dc:
78:ae:0c:12:bd:ed:71:8b:38:b7:fc:3c:7c:74:ab:03:88:67:
52:fb:f7:1d:f9:ca:56:68:b7:b3:42:aa:75:ab:07:19:18:bf:
cb:91:f3:69:af:47:fa:89:15:04:49:55:38:f6:f7:ef:f7:de:
1c:01:76:90:86:62:b4:53:28:f4:b7:82:4a:a3:41:56:6d:3f:
46:4d:1e:08:87:d0:c2:fb:35:42:7f:74:da:23:3c:69:1b:93:
71:93:a4:97:50:c3:38:59:e6:b3:4c:a4:f6:db:30:fc:64:eb:
ed:85:35:cf:92:2e:ce:ca:5d:19:ba:8a:5f:ce:2c:9b:49:36:
0f:49:4a:dd:9b:15:63:22:9c:24:56:79:e8:08:6b:36:08:c6:
72:69:8f:9c:ab:22:88:47:35:03:48:d1:24:80:ef:f2:4f:e2:
90:a2:68:90:13:66:cb:6e:72:4e:67:d7:cb:c0:61:47:dc:6f:
fe:ff:07:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:34:32 2024 by rpki-client on console-fra.rpki-client.org