Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
File: bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft (raw, json)
Hash identifier: BFzyU1IxMh+1qsgtUT3+UGwn7GQpSJb1p8A6U/CLAEc=
Subject key identifier: 4B:36:25:62:D9:59:FB:BA:A5:D3:08:2B:5A:05:F5:80:46:EE:0E:E1
Authority key identifier: 6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
Certificate issuer: /CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Certificate serial: 01901E8FC3143E23C57067215319161C7674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
Manifest number: 08A6
Signing time: Sun 16 Jun 2024 01:00:56 +0000
Manifest this update: Sun 16 Jun 2024 01:00:56 +0000
Manifest next update: Mon 17 Jun 2024 01:00:56 +0000
Files and hashes: 1: OQiJwOA2zkOzY3yO9BQbjm3PI2o.roa (hash: 116+rlN2JNfrw8W/4RmO1ASRoIdvEg2AyAin0BJfu1I=)
2: bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl (hash: xXM14sZIe+EqWDyVrjSigwhYSMtRoqOl4ctALQXpIHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:8f:c3:14:3e:23:c5:70:67:21:53:19:16:1c:76:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Validity
Not Before: Jun 16 01:00:56 2024 GMT
Not After : Jun 17 01:00:56 2024 GMT
Subject: CN=4b362562d959fbbaa5d3082b5a05f58046ee0ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2c:88:d0:95:e7:fd:7c:b7:37:af:f3:9d:79:
be:48:0a:40:5b:40:c8:8e:66:cc:fe:ed:01:39:90:
e8:30:24:ef:f5:27:61:b0:d7:54:9f:5a:9b:4b:ff:
e0:a7:27:18:33:47:8d:15:98:82:a5:61:1d:84:90:
d7:75:df:19:35:32:fe:80:5d:c1:01:d5:e0:86:18:
2e:a6:81:a7:0c:ce:e1:27:a0:97:95:1a:3c:6d:60:
74:de:22:d4:53:17:34:91:65:e4:3e:7d:df:f6:db:
dc:d9:84:b9:ef:28:db:f0:21:c6:41:17:0b:4e:97:
63:48:91:69:f7:27:68:6e:31:10:f1:24:e5:21:09:
ba:45:a9:96:6f:65:42:8a:a9:db:7c:80:3e:d9:cf:
d2:fc:09:b6:22:4b:bd:d3:3d:58:03:e5:66:fd:2b:
6e:f7:27:50:8a:9d:78:ab:d1:3f:7e:df:a1:e4:0b:
a7:0c:23:74:45:dc:1f:a0:66:58:de:5b:47:2f:06:
f7:b4:18:aa:99:4c:98:1d:12:d2:f1:72:e8:57:6b:
c3:1d:e5:1d:0d:ca:ab:09:e8:cf:b5:69:7b:fa:17:
f2:41:74:4e:5d:4a:0e:50:b3:71:40:cc:32:c9:77:
3d:e6:28:a8:3f:63:bc:82:5d:c8:e5:14:f8:86:48:
22:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:36:25:62:D9:59:FB:BA:A5:D3:08:2B:5A:05:F5:80:46:EE:0E:E1
X509v3 Authority Key Identifier:
keyid:6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:05:ff:70:99:32:a4:0b:97:81:2e:ec:18:b5:b9:01:65:51:
2b:b7:f6:7f:4d:4c:47:b8:f1:f3:75:de:88:09:36:cb:eb:05:
ad:0a:f4:7e:26:31:30:84:64:33:4c:a2:94:db:fa:8b:d4:82:
02:28:19:2a:92:10:7a:1d:93:75:e3:6b:7b:08:fa:dc:19:3b:
e2:21:b7:90:3e:20:57:0a:3e:31:35:bf:6b:5d:cf:5c:56:be:
d3:7d:a2:c0:bf:48:00:ed:4f:8d:5d:7c:de:78:ee:df:04:be:
d7:45:99:63:9d:f7:07:81:f6:eb:f6:0a:fd:ff:79:f9:6b:ff:
64:8e:4c:1d:b8:bb:5c:f2:3a:49:a6:d7:9f:6d:60:81:eb:5b:
ed:27:b9:8f:94:0e:b1:bb:25:45:22:53:8d:51:92:4b:c7:61:
a2:5c:28:2f:84:8d:15:5e:45:6f:0c:10:45:dc:26:88:05:26:
61:9f:86:73:d0:fa:f3:ac:6e:c3:1f:32:7d:6e:1d:6a:75:05:
e6:0b:05:a7:f1:4a:c2:80:1b:aa:c7:09:52:da:66:27:c2:3e:
05:c0:29:be:6b:c7:de:ba:ef:e3:56:98:1c:9e:b5:12:46:03:
5c:a4:f0:d0:c3:4b:14:65:b6:e5:45:88:e0:08:57:a0:af:36:
91:68:9a:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAej8MUPiPFcGchUxkWHHZ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNjVmZTA1NWZiN2VkMDQzZDEwOTMwNzA0NWMwYWJkZjQw
NGQwNWQwHhcNMjQwNjE2MDEwMDU2WhcNMjQwNjE3MDEwMDU2WjAzMTEwLwYDVQQD
Eyg0YjM2MjU2MmQ5NTlmYmJhYTVkMzA4MmI1YTA1ZjU4MDQ2ZWUwZWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiyI0JXn/Xy3N6/znXm+SApAW0DI
jmbM/u0BOZDoMCTv9SdhsNdUn1qbS//gpycYM0eNFZiCpWEdhJDXdd8ZNTL+gF3B
AdXghhgupoGnDM7hJ6CXlRo8bWB03iLUUxc0kWXkPn3f9tvc2YS57yjb8CHGQRcL
TpdjSJFp9ydobjEQ8STlIQm6RamWb2VCiqnbfIA+2c/S/Am2Iku90z1YA+Vm/Stu
9ydQip14q9E/ft+h5AunDCN0RdwfoGZY3ltHLwb3tBiqmUyYHRLS8XLoV2vDHeUd
DcqrCejPtWl7+hfyQXROXUoOULNxQMwyyXc95iioP2O8gl3I5RT4hkgipwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEs2JWLZWfu6pdMIK1oF9YBG7g7hMB8GA1UdIwQY
MBaAFG1l/gVft+0EPRCTBwRcCr30BNBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYldYLUJWLTM3UVE5RUpNSEJGd0t2ZlFFMEYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9mNjA3OTgtMzIwMi00ODRiLTg2NDAt
MWI3NDllOTgxMGI0LzEvYldYLUJWLTM3UVE5RUpNSEJGd0t2ZlFFMEYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9mNjA3OTgtMzIwMi00ODRiLTg2NDAtMWI3NDllOTgxMGI0
LzEvYldYLUJWLTM3UVE5RUpNSEJGd0t2ZlFFMEYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIgX/cJky
pAuXgS7sGLW5AWVRK7f2f01MR7jx83XeiAk2y+sFrQr0fiYxMIRkM0yilNv6i9SC
AigZKpIQeh2TdeNrewj63Bk74iG3kD4gVwo+MTW/a13PXFa+032iwL9IAO1PjV18
3nju3wS+10WZY533B4H26/YK/f95+Wv/ZI5MHbi7XPI6SabXn21ggetb7Se5j5QO
sbslRSJTjVGSS8dholwoL4SNFV5FbwwQRdwmiAUmYZ+Gc9D686xuwx8yfW4danUF
5gsFp/FKwoAbqscJUtpmJ8I+BcApvmvH3rrv41aYHJ61EkYDXKTw0MNLFGW25UWI
4AhXoK82kWiaow==
-----END CERTIFICATE-----
Generated at Sun Jun 16 02:57:34 2024 by rpki-client on console-fra.rpki-client.org