Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
File: BKMSumXpC_is9PVzJKMMC2y9HC8.mft (raw, json)
Hash identifier: nnD8aDPrVZwBWd6dZmzozFQNYFtOFZCr0KwvKpC/u0I=
Subject key identifier: 6B:B9:73:E0:BC:03:8E:F4:2D:BF:80:9A:70:5C:9F:48:AF:B3:BC:8E
Authority key identifier: 04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
Certificate issuer: /CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Certificate serial: 018F30CF1761D2CD431ED9502C562A6E9315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
Manifest number: 114C
Signing time: Tue 30 Apr 2024 21:00:29 +0000
Manifest this update: Tue 30 Apr 2024 21:00:29 +0000
Manifest next update: Wed 01 May 2024 21:00:29 +0000
Files and hashes: 1: BKMSumXpC_is9PVzJKMMC2y9HC8.crl (hash: 3j5+GmkdkGfa06L8s3cHSPK1hyuaQN4b3SIrCrAtauA=)
2: GRX7aSDzGvRVcqg7jfH3TH4U7Dk.roa (hash: q9wYh51gB8PofG2fa0az//xwwk+ZfAWANlQdLPUPIkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 May 2024 13:40:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:30:cf:17:61:d2:cd:43:1e:d9:50:2c:56:2a:6e:93:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Validity
Not Before: Apr 30 21:00:29 2024 GMT
Not After : May 1 21:00:29 2024 GMT
Subject: CN=6bb973e0bc038ef42dbf809a705c9f48afb3bc8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8a:0a:ac:b4:fa:d1:44:a5:d8:6c:4a:e7:aa:
1a:04:9c:b6:6a:1e:74:5b:0c:c5:07:3f:f7:f4:1e:
3a:87:67:18:e3:e8:fd:73:10:17:ee:ab:9c:3b:b4:
35:55:ed:97:0c:b5:03:40:0e:ee:67:a5:09:95:45:
cc:a9:3c:87:d4:5e:dc:cf:9b:10:2b:a7:54:f3:f5:
61:29:35:f4:34:45:6e:46:6c:5f:53:76:7d:ce:38:
78:a9:5e:2d:97:6f:0f:2e:d3:36:92:50:1f:2f:43:
0f:e0:6e:88:db:44:17:19:b2:13:4f:15:a1:45:a6:
ef:47:20:e3:1d:1e:04:a0:ea:00:9d:4d:3a:1c:fb:
62:17:b2:4e:51:74:33:0d:4a:82:68:90:47:0c:3c:
3e:14:95:ce:6c:20:7f:7b:f4:bf:2d:17:aa:38:d6:
e8:81:e3:4b:3b:10:99:9d:ed:e5:0c:09:c0:bb:2d:
60:f6:db:e2:28:9a:ec:c1:87:b9:2c:ef:c8:f5:00:
68:12:e4:09:78:1a:df:82:98:3c:8d:24:d1:a3:22:
10:32:73:8e:e8:c0:a1:35:9e:df:d4:ea:74:1a:aa:
fa:6f:fb:4b:c4:58:ff:18:d4:45:db:c9:80:b4:bb:
fd:5a:21:45:de:68:34:65:c6:70:4b:93:76:4b:99:
ed:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B9:73:E0:BC:03:8E:F4:2D:BF:80:9A:70:5C:9F:48:AF:B3:BC:8E
X509v3 Authority Key Identifier:
keyid:04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:62:66:11:04:b1:db:7d:65:bf:20:33:fb:df:58:6b:99:4a:
46:94:14:cf:13:ca:27:af:41:aa:09:16:51:ed:da:92:7f:e7:
ac:05:86:23:31:11:ea:c3:5b:9f:0a:0b:d3:a4:30:84:78:ba:
50:39:f7:1e:c8:21:6a:2b:af:b0:35:fc:25:47:ec:78:aa:fc:
38:07:8a:cb:e6:ae:a1:a2:62:f4:33:80:78:b9:6f:c0:25:b2:
c0:64:94:e7:72:7b:39:e9:e4:3a:c9:8d:f9:c7:fd:a5:03:48:
72:df:19:70:94:88:89:8b:95:1f:4f:36:fe:46:47:b4:1f:08:
b0:6d:45:6f:5e:f4:85:db:10:7a:49:25:2e:9c:79:b7:2c:37:
33:1e:ae:08:db:78:8e:6e:18:f4:b6:f3:c4:0c:5b:29:62:d3:
30:d9:5b:18:0f:46:86:dd:b4:57:ec:77:9e:cc:3b:c5:bf:23:
3b:ed:45:70:96:5c:15:17:28:42:d5:6e:d2:26:9d:df:2a:b4:
73:9f:b3:83:09:5f:b7:0d:ee:f2:4f:e8:39:f5:81:12:fc:e1:
3f:65:e2:73:12:2d:ba:53:35:5f:10:96:a4:39:8b:52:74:a5:
4e:24:3b:54:9c:8a:87:e0:d5:ed:f4:bd:21:85:09:42:5b:ef:
19:45:11:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8wzxdh0s1DHtlQLFYqbpMVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YTMxMmJhNjVlOTBiZjhhY2Y0ZjU3MzI0YTMwYzBiNmNi
ZDFjMmYwHhcNMjQwNDMwMjEwMDI5WhcNMjQwNTAxMjEwMDI5WjAzMTEwLwYDVQQD
Eyg2YmI5NzNlMGJjMDM4ZWY0MmRiZjgwOWE3MDVjOWY0OGFmYjNiYzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnooKrLT60USl2GxK56oaBJy2ah50
WwzFBz/39B46h2cY4+j9cxAX7qucO7Q1Ve2XDLUDQA7uZ6UJlUXMqTyH1F7cz5sQ
K6dU8/VhKTX0NEVuRmxfU3Z9zjh4qV4tl28PLtM2klAfL0MP4G6I20QXGbITTxWh
RabvRyDjHR4EoOoAnU06HPtiF7JOUXQzDUqCaJBHDDw+FJXObCB/e/S/LReqONbo
geNLOxCZne3lDAnAuy1g9tviKJrswYe5LO/I9QBoEuQJeBrfgpg8jSTRoyIQMnOO
6MChNZ7f1Op0Gqr6b/tLxFj/GNRF28mAtLv9WiFF3mg0ZcZwS5N2S5ntQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGu5c+C8A470Lb+AmnBcn0ivs7yOMB8GA1UdIwQY
MBaAFASjErpl6Qv4rPT1cySjDAtsvRwvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQktNU3VtWHBDX2lzOVBWekpLTU1DMnk5SEM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lM2NmNzUtNDBiOS00MDM0LTg0Yjkt
Y2NjYmMyYWU2OTQ4LzEvQktNU3VtWHBDX2lzOVBWekpLTU1DMnk5SEM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9lM2NmNzUtNDBiOS00MDM0LTg0YjktY2NjYmMyYWU2OTQ4
LzEvQktNU3VtWHBDX2lzOVBWekpLTU1DMnk5SEM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABGJmEQSx
231lvyAz+99Ya5lKRpQUzxPKJ69BqgkWUe3akn/nrAWGIzER6sNbnwoL06QwhHi6
UDn3HsghaiuvsDX8JUfseKr8OAeKy+auoaJi9DOAeLlvwCWywGSU53J7OenkOsmN
+cf9pQNIct8ZcJSIiYuVH082/kZHtB8IsG1Fb170hdsQekklLpx5tyw3Mx6uCNt4
jm4Y9LbzxAxbKWLTMNlbGA9Ght20V+x3nsw7xb8jO+1FcJZcFRcoQtVu0iad3yq0
c5+zgwlftw3u8k/oOfWBEvzhP2XicxItulM1XxCWpDmLUnSlTiQ7VJyKh+DV7fS9
IYUJQlvvGUURSQ==
-----END CERTIFICATE-----
Generated at Tue Apr 30 21:46:57 2024 by rpki-client on console-fra.rpki-client.org