Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
File: BCrDgmiWh7YPzlzp24h7IdaKarw.mft (raw, json)
Hash identifier: xRxBbeLCg2cuwMo6kcPIPSsEIuyvDOcNHA4ozxlRklQ=
Subject key identifier: E2:89:0D:B4:7F:5B:D6:A0:97:77:CF:BA:08:C9:4B:1C:E5:06:EB:AC
Authority key identifier: 04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
Certificate issuer: /CN=042ac382689687b60fce5ce9db887b21d68a6abc
Certificate serial: 019357D250EAD581D08681E694682CDEC6B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
Manifest number: 1375
Signing time: Sat 23 Nov 2024 07:00:21 +0000
Manifest this update: Sat 23 Nov 2024 07:00:21 +0000
Manifest next update: Sun 24 Nov 2024 07:00:21 +0000
Files and hashes: 1: BCrDgmiWh7YPzlzp24h7IdaKarw.crl (hash: Vv3aJbf51m7Gwhb5WWtBv2mmZiCIOFzyZJy92OylSOs=)
2: O0FaQjCRQ0JIK5OOQar3mtWT8MA.roa (hash: 54YmmN1D7Hg2VdkdbKMfGbX1y+vNrZ2lhYDbBxjjQUU=)
3: d1c7HRULH9tIAdlg7Fr5bJm3e1o.roa (hash: 2sCDeNMVLXYxUjd0imZUQRokYPDSfRJL/mUHPU4jHFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:50:ea:d5:81:d0:86:81:e6:94:68:2c:de:c6:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=042ac382689687b60fce5ce9db887b21d68a6abc
Validity
Not Before: Nov 23 07:00:21 2024 GMT
Not After : Nov 24 07:00:21 2024 GMT
Subject: CN=e2890db47f5bd6a09777cfba08c94b1ce506ebac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:46:d0:60:e7:d6:60:59:65:46:ea:a9:77:c4:
2a:af:20:50:5b:65:ab:45:c8:2e:da:67:03:2e:e0:
ba:96:eb:51:5f:54:cf:39:f1:0f:2c:7f:f2:7a:fa:
96:80:05:30:b8:5f:9c:77:69:42:40:62:6d:81:50:
09:c9:33:b6:91:ff:6a:c7:64:43:38:f1:46:df:5e:
e6:5f:73:62:88:f9:70:95:a7:7a:98:c1:90:b7:3a:
ec:c1:d5:71:33:09:51:48:bb:a5:41:86:4b:ac:32:
0e:ff:98:6a:fd:a2:b1:27:03:9b:d9:e0:23:ed:ff:
78:77:3a:65:ea:4e:20:5f:3a:b1:f3:e3:2e:e5:9f:
32:00:96:af:72:59:29:7f:ae:ba:02:fe:85:75:63:
52:f4:de:ae:7c:4e:6b:b9:47:33:f1:29:af:e3:03:
f2:d3:58:31:3d:e7:a6:1a:4b:ef:b9:f1:89:21:0c:
4f:7e:ad:b1:2d:25:04:aa:8a:ef:5e:44:3c:a0:2f:
2f:ec:58:c6:32:e8:96:0c:b6:c5:cf:ee:ec:fa:74:
30:55:6b:99:78:ba:bc:9e:a6:6b:57:cd:f5:e3:f1:
a6:07:2c:c8:80:83:4d:b6:1b:b4:f8:74:44:ee:62:
77:da:bd:0b:f3:d8:fb:a3:ce:f0:e0:09:08:ad:e1:
7c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:89:0D:B4:7F:5B:D6:A0:97:77:CF:BA:08:C9:4B:1C:E5:06:EB:AC
X509v3 Authority Key Identifier:
keyid:04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:cc:36:cb:0a:45:9c:5a:67:10:39:30:1f:c4:9d:3c:3c:6b:
ff:0f:1a:63:56:ad:6e:cf:e7:25:db:27:68:28:c2:f9:ba:93:
99:7a:d0:e4:5d:51:65:4e:cb:3d:24:64:83:25:bb:03:ea:e3:
6a:6d:2b:0c:12:42:aa:cf:72:13:1d:16:b6:54:1d:d6:3f:55:
2d:28:4e:c1:8a:8a:93:09:c4:d9:f0:ac:00:eb:5a:fb:27:8d:
fe:e8:c8:0c:e0:c1:16:3f:88:0f:e4:7e:1b:62:3e:1e:6d:c8:
7d:6f:50:85:7f:3e:bd:20:b9:8a:20:88:e4:0d:cc:8e:0a:a4:
25:f1:06:81:86:ff:0e:0e:a1:2f:00:26:25:bc:89:c7:3b:38:
73:fe:57:4c:83:c4:c7:0f:a2:18:dc:c0:19:30:9d:14:de:07:
47:6c:20:24:dc:ff:a1:d5:05:cf:82:99:96:9e:67:7f:a5:da:
74:d3:18:de:5d:01:09:96:67:80:fa:38:1d:ba:e3:71:a2:fd:
1d:28:88:9f:80:3f:9c:7a:c6:81:89:39:42:27:eb:07:f0:bf:
94:3c:a8:fe:06:7f:54:ea:68:d0:e8:57:1d:3e:05:21:dd:a4:
a7:a1:33:50:b0:16:6b:21:7b:c9:ea:78:71:eb:50:8a:99:fb:
52:81:17:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNX0lDq1YHQhoHmlGgs3saxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MmFjMzgyNjg5Njg3YjYwZmNlNWNlOWRiODg3YjIxZDY4
YTZhYmMwHhcNMjQxMTIzMDcwMDIxWhcNMjQxMTI0MDcwMDIxWjAzMTEwLwYDVQQD
EyhlMjg5MGRiNDdmNWJkNmEwOTc3N2NmYmEwOGM5NGIxY2U1MDZlYmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEbQYOfWYFllRuqpd8QqryBQW2Wr
Rcgu2mcDLuC6lutRX1TPOfEPLH/yevqWgAUwuF+cd2lCQGJtgVAJyTO2kf9qx2RD
OPFG317mX3NiiPlwlad6mMGQtzrswdVxMwlRSLulQYZLrDIO/5hq/aKxJwOb2eAj
7f94dzpl6k4gXzqx8+Mu5Z8yAJavclkpf666Av6FdWNS9N6ufE5ruUcz8Smv4wPy
01gxPeemGkvvufGJIQxPfq2xLSUEqorvXkQ8oC8v7FjGMuiWDLbFz+7s+nQwVWuZ
eLq8nqZrV8314/GmByzIgINNthu0+HRE7mJ32r0L89j7o87w4AkIreF8CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKJDbR/W9agl3fPugjJSxzlBuusMB8GA1UdIwQY
MBaAFAQqw4Joloe2D85c6duIeyHWimq8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkNyRGdtaVdoN1lQemx6cDI0aDdJZGFLYXJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC80NjYzYmItYzUwOS00YTlhLWJjYWUt
NzBiYzY2ODkzZTVjLzEvQkNyRGdtaVdoN1lQemx6cDI0aDdJZGFLYXJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC80NjYzYmItYzUwOS00YTlhLWJjYWUtNzBiYzY2ODkzZTVj
LzEvQkNyRGdtaVdoN1lQemx6cDI0aDdJZGFLYXJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUMw2ywpF
nFpnEDkwH8SdPDxr/w8aY1atbs/nJdsnaCjC+bqTmXrQ5F1RZU7LPSRkgyW7A+rj
am0rDBJCqs9yEx0WtlQd1j9VLShOwYqKkwnE2fCsAOta+yeN/ujIDODBFj+ID+R+
G2I+Hm3IfW9QhX8+vSC5iiCI5A3MjgqkJfEGgYb/Dg6hLwAmJbyJxzs4c/5XTIPE
xw+iGNzAGTCdFN4HR2wgJNz/odUFz4KZlp5nf6XadNMY3l0BCZZngPo4HbrjcaL9
HSiIn4A/nHrGgYk5QifrB/C/lDyo/gZ/VOpo0OhXHT4FId2kp6EzULAWayF7yep4
cetQipn7UoEXiw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:51:56 2024 by rpki-client on console-fra.rpki-client.org