Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.mft
File: BcojF2aaRo1QmoqhkGvvp1v5wgE.mft (raw, json)
Hash identifier: cKu2SnLyMJBFFfh84bqQUe8N8LZRi2oeoAFM6RwWerg=
Subject key identifier: 52:9E:E7:31:2B:52:25:42:38:62:C4:CC:39:CC:B1:FD:52:A3:88:3D
Authority key identifier: 05:CA:23:17:66:9A:46:8D:50:9A:8A:A1:90:6B:EF:A7:5B:F9:C2:01
Certificate issuer: /CN=05ca2317669a468d509a8aa1906befa75bf9c201
Certificate serial: 01901DECD7539CE66813D4B97D23E0FDB2F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcojF2aaRo1QmoqhkGvvp1v5wgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.mft
Manifest number: 08FE
Signing time: Sat 15 Jun 2024 22:02:59 +0000
Manifest this update: Sat 15 Jun 2024 22:02:59 +0000
Manifest next update: Sun 16 Jun 2024 22:02:59 +0000
Files and hashes: 1: BcojF2aaRo1QmoqhkGvvp1v5wgE.crl (hash: vJLhTmZiyAAtxxroqOPuP1mKsK3C9h8+YXnEEeNkMMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BcojF2aaRo1QmoqhkGvvp1v5wgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ec:d7:53:9c:e6:68:13:d4:b9:7d:23:e0:fd:b2:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ca2317669a468d509a8aa1906befa75bf9c201
Validity
Not Before: Jun 15 22:02:59 2024 GMT
Not After : Jun 16 22:02:59 2024 GMT
Subject: CN=529ee7312b5225423862c4cc39ccb1fd52a3883d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:57:74:29:75:51:ab:43:76:b2:5f:81:d8:e0:
04:d5:44:08:11:f9:18:3d:a3:17:e5:4c:38:e1:1d:
c0:be:e7:cc:ef:91:e5:d7:3d:81:06:2c:9d:fa:41:
8f:27:35:3a:06:ae:0b:fb:f9:b4:15:5e:16:79:ca:
28:0f:a1:3a:dc:50:1c:a0:d9:f9:c3:7a:f1:f3:df:
0f:8d:a0:66:61:85:d4:f1:45:9d:9e:64:b1:cd:2d:
15:71:da:a8:3b:67:4f:d4:4b:04:df:bb:86:9a:51:
e2:47:22:0a:38:c3:ff:10:a0:99:04:fb:c7:14:f8:
c6:c8:cb:32:38:5d:a6:5d:7e:89:c5:f4:92:06:59:
7d:46:a3:ba:1e:5c:86:68:3a:9e:7f:48:22:1d:7c:
54:84:7a:b1:8f:f9:8c:3c:e4:1a:ad:18:24:c3:2c:
aa:1f:05:8f:9d:24:a4:80:24:a6:a9:e2:15:32:ef:
f2:3b:1b:f4:de:ff:21:71:5f:08:f1:fa:12:8b:26:
23:fa:e1:5c:21:eb:8e:1c:34:88:fb:20:c6:05:b7:
35:8d:54:82:5e:f9:a9:e4:06:43:96:03:48:ce:d1:
55:72:fd:58:cb:0d:dc:06:e7:f7:ab:29:ef:02:25:
fe:7b:56:3e:91:f6:55:a5:73:51:9c:bf:ab:09:07:
db:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9E:E7:31:2B:52:25:42:38:62:C4:CC:39:CC:B1:FD:52:A3:88:3D
X509v3 Authority Key Identifier:
keyid:05:CA:23:17:66:9A:46:8D:50:9A:8A:A1:90:6B:EF:A7:5B:F9:C2:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcojF2aaRo1QmoqhkGvvp1v5wgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:24:65:2a:8b:e1:3f:2f:72:58:e7:30:85:c7:8c:d2:0d:ed:
69:ee:31:80:4b:2a:80:5f:55:75:6b:c7:db:74:b0:bb:ca:28:
ed:ef:e7:6f:b1:96:0f:18:a9:3a:c4:3c:80:30:4f:55:a8:28:
e9:27:3d:60:c0:08:4d:aa:5f:9f:73:3d:bc:4a:79:f8:d6:95:
c8:eb:bb:79:21:ae:b6:ba:ce:b2:47:23:b5:fb:e1:77:02:9a:
34:2b:d7:4d:0c:9f:60:6f:af:68:5b:a5:be:65:d5:6c:6b:8b:
48:29:fc:9d:de:17:e5:95:73:09:ec:bc:0f:4f:7d:27:95:3b:
37:ab:c1:d1:82:89:3f:5b:11:fa:cb:5c:c0:83:23:5e:5d:56:
f5:56:7f:d0:4e:2f:06:bd:d1:37:84:61:e0:77:0e:6d:ac:42:
4d:12:3e:37:f5:7e:0a:81:55:66:5a:88:8c:03:e5:36:64:89:
2b:87:23:58:d4:a7:fb:6a:fb:11:ce:b8:ef:97:e9:2c:55:8d:
f8:c4:9f:9b:88:53:63:4c:08:08:ba:8f:54:da:11:6a:b9:8c:
63:55:d5:87:9d:97:de:fd:70:54:5b:06:f6:3f:ea:c2:fe:72:
6b:33:ef:24:52:52:1b:14:7d:2a:3b:e2:7d:dc:64:7d:45:2a:
0c:15:29:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7NdTnOZoE9S5fSPg/bLwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1Y2EyMzE3NjY5YTQ2OGQ1MDlhOGFhMTkwNmJlZmE3NWJm
OWMyMDEwHhcNMjQwNjE1MjIwMjU5WhcNMjQwNjE2MjIwMjU5WjAzMTEwLwYDVQQD
Eyg1MjllZTczMTJiNTIyNTQyMzg2MmM0Y2MzOWNjYjFmZDUyYTM4ODNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuld0KXVRq0N2sl+B2OAE1UQIEfkY
PaMX5Uw44R3AvufM75Hl1z2BBiyd+kGPJzU6Bq4L+/m0FV4WecooD6E63FAcoNn5
w3rx898PjaBmYYXU8UWdnmSxzS0VcdqoO2dP1EsE37uGmlHiRyIKOMP/EKCZBPvH
FPjGyMsyOF2mXX6JxfSSBll9RqO6HlyGaDqef0giHXxUhHqxj/mMPOQarRgkwyyq
HwWPnSSkgCSmqeIVMu/yOxv03v8hcV8I8foSiyYj+uFcIeuOHDSI+yDGBbc1jVSC
Xvmp5AZDlgNIztFVcv1Yyw3cBuf3qynvAiX+e1Y+kfZVpXNRnL+rCQfbNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFKe5zErUiVCOGLEzDnMsf1So4g9MB8GA1UdIwQY
MBaAFAXKIxdmmkaNUJqKoZBr76db+cIBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmNvakYyYWFSbzFRbW9xaGtHdnZwMXY1d2dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9iZGVjYWEtZDE0MS00NmIyLTlkNDAt
MTMzMWU2NTFjNzlmLzEvQmNvakYyYWFSbzFRbW9xaGtHdnZwMXY1d2dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9iZGVjYWEtZDE0MS00NmIyLTlkNDAtMTMzMWU2NTFjNzlm
LzEvQmNvakYyYWFSbzFRbW9xaGtHdnZwMXY1d2dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbSRlKovh
Py9yWOcwhceM0g3tae4xgEsqgF9VdWvH23Swu8oo7e/nb7GWDxipOsQ8gDBPVago
6Sc9YMAITapfn3M9vEp5+NaVyOu7eSGutrrOskcjtfvhdwKaNCvXTQyfYG+vaFul
vmXVbGuLSCn8nd4X5ZVzCey8D099J5U7N6vB0YKJP1sR+stcwIMjXl1W9VZ/0E4v
Br3RN4Rh4HcObaxCTRI+N/V+CoFVZlqIjAPlNmSJK4cjWNSn+2r7Ec6475fpLFWN
+MSfm4hTY0wICLqPVNoRarmMY1XVh52X3v1wVFsG9j/qwv5yazPvJFJSGxR9Kjvi
fdxkfUUqDBUpEA==
-----END CERTIFICATE-----
Generated at Sat Jun 15 23:41:43 2024 by rpki-client on console-ams.rpki-client.org