Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
File: bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft (raw, json)
Hash identifier: bi3HhZpTqbLhzz4uX7NGjQL3s/GGmvSOKL0UeoIEzcQ=
Subject key identifier: 8D:93:8D:BF:B3:4E:B3:5F:54:CF:8D:7C:66:CA:A1:1D:B1:E2:44:88
Authority key identifier: 6D:FC:3D:A2:B8:B2:E4:9C:B5:31:17:1E:91:0E:DC:EE:79:AE:58:A4
Certificate issuer: /CN=6dfc3da2b8b2e49cb531171e910edcee79ae58a4
Certificate serial: 0190456689EE71B54DAD01A2721FD99057D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
Manifest number: 03C3
Signing time: Sun 23 Jun 2024 14:01:06 +0000
Manifest this update: Sun 23 Jun 2024 14:01:06 +0000
Manifest next update: Mon 24 Jun 2024 14:01:06 +0000
Files and hashes: 1: bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl (hash: azGS8U8RFVqKGNPMGlglySSNaQ8p+U7b39kQOl6QYNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:45:66:89:ee:71:b5:4d:ad:01:a2:72:1f:d9:90:57:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfc3da2b8b2e49cb531171e910edcee79ae58a4
Validity
Not Before: Jun 23 14:01:06 2024 GMT
Not After : Jun 24 14:01:06 2024 GMT
Subject: CN=8d938dbfb34eb35f54cf8d7c66caa11db1e24488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fa:e8:e7:f7:e5:a3:df:0f:11:15:cc:84:ee:
09:a4:80:40:51:c4:14:cb:66:71:32:9f:9f:e8:e6:
36:43:ac:6c:60:d8:eb:a1:a1:a8:85:4d:98:b5:de:
b6:51:e6:4e:12:4e:08:3c:51:ba:95:76:2e:7b:85:
0c:9f:b4:ec:d5:70:2e:f6:76:87:75:3b:0b:c9:e4:
50:a4:2e:66:df:16:1e:e3:07:d2:3b:1f:d9:7a:df:
48:97:63:08:c8:25:d9:7e:2f:6a:e5:3c:43:ec:c7:
40:c7:0e:64:0d:17:a8:eb:49:54:3f:47:f6:8d:85:
3d:31:fd:2b:29:ae:b0:e4:37:1d:88:59:fb:52:e2:
06:22:cf:e1:1a:e6:1c:d3:f8:a2:a6:91:46:d9:c9:
36:13:f9:23:c2:f6:b4:86:3b:8c:15:55:09:3f:ef:
d1:57:42:0c:c1:b6:41:a6:ed:29:14:2b:01:7c:7f:
86:28:92:fa:b9:00:07:8a:74:9d:af:06:37:3d:55:
da:61:41:f4:55:b4:dd:b0:5b:7c:58:08:c5:fa:71:
0c:e2:b9:62:b7:c6:ba:b5:61:76:9f:e9:37:d7:1c:
74:b1:46:c6:f9:e8:4e:fb:ea:3b:59:f4:dc:09:a8:
02:bf:60:f4:9d:ce:69:ef:39:b6:f3:6c:d5:41:27:
48:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:93:8D:BF:B3:4E:B3:5F:54:CF:8D:7C:66:CA:A1:1D:B1:E2:44:88
X509v3 Authority Key Identifier:
keyid:6D:FC:3D:A2:B8:B2:E4:9C:B5:31:17:1E:91:0E:DC:EE:79:AE:58:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:56:5b:ea:a0:06:e3:b0:b2:95:fe:0a:f4:dc:76:1c:d2:25:
99:33:03:eb:98:89:40:c7:5a:d9:d2:ec:c8:c0:b3:55:62:0c:
73:f7:6e:7e:50:1c:ee:af:e9:be:99:ea:bf:9d:ab:5b:4b:f1:
58:6a:0d:0f:3c:93:f8:cd:99:ef:96:91:5e:ae:eb:59:0b:53:
37:06:63:8b:bb:b3:90:3d:cd:dd:b4:a9:d8:4e:6c:54:0a:04:
05:42:a2:ed:ad:3e:db:4b:bb:3d:9f:a9:78:e4:e8:84:39:f9:
44:1a:20:9f:e0:a7:71:80:ce:4d:1a:a9:2b:1b:b1:99:48:a4:
32:c9:35:b7:dc:c9:66:66:00:0b:ce:51:3d:dd:4e:4c:fd:ee:
c5:53:78:64:2a:9d:d9:4c:be:d6:92:03:6d:23:87:65:27:b1:
80:54:36:1d:36:80:9f:86:31:e2:64:bd:6d:2f:12:90:3b:23:
b5:c0:fb:67:b6:cb:c3:f1:49:f6:f3:28:91:61:32:66:92:14:
50:64:b6:c4:b7:eb:a0:47:6b:2d:b5:1a:5a:2c:02:3f:f6:36:
91:0a:5a:1e:52:35:ce:63:44:9a:51:59:7d:c7:f2:98:2e:94:
1c:cd:19:0b:f0:c3:e3:a5:8c:51:24:6a:a0:49:e7:06:9c:37:
77:dc:83:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBFZonucbVNrQGich/ZkFfQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZmMzZGEyYjhiMmU0OWNiNTMxMTcxZTkxMGVkY2VlNzlh
ZTU4YTQwHhcNMjQwNjIzMTQwMTA2WhcNMjQwNjI0MTQwMTA2WjAzMTEwLwYDVQQD
Eyg4ZDkzOGRiZmIzNGViMzVmNTRjZjhkN2M2NmNhYTExZGIxZTI0NDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPro5/flo98PERXMhO4JpIBAUcQU
y2ZxMp+f6OY2Q6xsYNjroaGohU2Ytd62UeZOEk4IPFG6lXYue4UMn7Ts1XAu9naH
dTsLyeRQpC5m3xYe4wfSOx/Zet9Il2MIyCXZfi9q5TxD7MdAxw5kDReo60lUP0f2
jYU9Mf0rKa6w5DcdiFn7UuIGIs/hGuYc0/iippFG2ck2E/kjwva0hjuMFVUJP+/R
V0IMwbZBpu0pFCsBfH+GKJL6uQAHinSdrwY3PVXaYUH0VbTdsFt8WAjF+nEM4rli
t8a6tWF2n+k31xx0sUbG+ehO++o7WfTcCagCv2D0nc5p7zm282zVQSdIpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2Tjb+zTrNfVM+NfGbKoR2x4kSIMB8GA1UdIwQY
MBaAFG38PaK4suSctTEXHpEO3O55rlikMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmZ3OW9yaXk1SnkxTVJjZWtRN2M3bm11V0tRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS83ZDlhOTgtNWZmNy00MjgyLWI1ZmQt
ZGRkNGIwYTFiOWE2LzEvYmZ3OW9yaXk1SnkxTVJjZWtRN2M3bm11V0tRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS83ZDlhOTgtNWZmNy00MjgyLWI1ZmQtZGRkNGIwYTFiOWE2
LzEvYmZ3OW9yaXk1SnkxTVJjZWtRN2M3bm11V0tRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGlZb6qAG
47Cylf4K9Nx2HNIlmTMD65iJQMda2dLsyMCzVWIMc/duflAc7q/pvpnqv52rW0vx
WGoNDzyT+M2Z75aRXq7rWQtTNwZji7uzkD3N3bSp2E5sVAoEBUKi7a0+20u7PZ+p
eOTohDn5RBogn+CncYDOTRqpKxuxmUikMsk1t9zJZmYAC85RPd1OTP3uxVN4ZCqd
2Uy+1pIDbSOHZSexgFQ2HTaAn4Yx4mS9bS8SkDsjtcD7Z7bLw/FJ9vMokWEyZpIU
UGS2xLfroEdrLbUaWiwCP/Y2kQpaHlI1zmNEmlFZfcfymC6UHM0ZC/DD46WMUSRq
oEnnBpw3d9yDoQ==
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:52:02 2024 by rpki-client on console-fra.rpki-client.org