Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
File: BKMSumXpC_is9PVzJKMMC2y9HC8.mft (raw, json)
Hash identifier: YUuik8r9Mqus54Gi5NsRj38aIP0BTkFA6wJnrnyriuE=
Subject key identifier: 36:F5:F5:3E:A3:6B:1D:8E:63:34:67:E9:BE:B7:79:07:C4:FD:AF:96
Authority key identifier: 04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
Certificate issuer: /CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Certificate serial: 01936C34BB38B0EF647B360656317C98D08A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
Manifest number: 137D
Signing time: Wed 27 Nov 2024 06:00:15 +0000
Manifest this update: Wed 27 Nov 2024 06:00:15 +0000
Manifest next update: Thu 28 Nov 2024 06:00:15 +0000
Files and hashes: 1: BKMSumXpC_is9PVzJKMMC2y9HC8.crl (hash: FIrloTKXQQqH+qpgkVdl+76SQTErXV2XUi7QWZUAHCY=)
2: GRX7aSDzGvRVcqg7jfH3TH4U7Dk.roa (hash: q9wYh51gB8PofG2fa0az//xwwk+ZfAWANlQdLPUPIkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 Nov 2024 06:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6c:34:bb:38:b0:ef:64:7b:36:06:56:31:7c:98:d0:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Validity
Not Before: Nov 27 06:00:15 2024 GMT
Not After : Nov 28 06:00:15 2024 GMT
Subject: CN=36f5f53ea36b1d8e633467e9beb77907c4fdaf96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b9:5a:28:ef:7e:2d:e5:07:59:9e:59:09:2b:
59:c3:32:83:0f:e8:a9:fc:76:fd:3d:8c:ec:aa:3e:
90:de:4d:09:37:85:8c:2c:7a:21:28:19:18:c9:b2:
4a:7d:65:2e:c9:ef:cc:9f:23:df:ca:c5:7d:58:04:
77:f5:ba:03:40:c2:f4:02:86:b5:d0:25:30:07:2c:
36:7d:e8:ba:79:3f:c3:45:3f:19:f6:bf:3c:b1:ca:
01:7c:67:f7:19:97:9d:65:c1:b2:a1:22:89:e1:bf:
c4:93:4d:0c:90:f9:95:32:e6:0c:8e:28:7f:6b:c7:
55:66:3c:23:43:93:93:82:d0:8f:7e:8f:0c:45:3a:
72:58:3a:92:f2:9b:20:f4:8f:0d:fd:2a:11:4b:21:
6d:90:25:84:86:89:d6:cd:78:32:f1:7b:b9:2d:ff:
f7:31:6a:75:e1:08:70:86:de:0e:78:86:f4:dd:22:
33:80:88:33:fa:5a:3c:79:e3:a0:11:68:d4:32:ca:
23:fe:29:74:43:f3:a5:da:86:0f:d6:b3:c4:64:7e:
17:8c:7b:e1:c9:49:97:cc:6c:9c:51:7d:74:8f:38:
fe:b9:1a:8f:f6:d5:52:fc:67:1f:b4:ea:79:e8:63:
8b:d5:1a:b8:3e:46:65:86:ea:39:ec:f5:de:f5:89:
cd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F5:F5:3E:A3:6B:1D:8E:63:34:67:E9:BE:B7:79:07:C4:FD:AF:96
X509v3 Authority Key Identifier:
keyid:04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:24:d4:a4:42:91:b2:c9:8f:a7:51:d2:89:a2:4f:77:f6:ca:
56:f8:b0:e7:a3:09:8b:45:d5:8e:bd:ed:83:9b:7b:b4:26:3e:
1b:37:05:38:7b:0c:19:93:d1:76:03:f5:64:b4:0d:53:91:ad:
16:99:36:de:4a:44:25:af:98:df:34:28:f4:97:80:ac:65:6b:
46:b6:a4:6b:d3:3d:73:cc:ae:72:f9:b3:14:81:14:4d:11:66:
69:1f:e1:86:28:79:3a:e9:33:a9:ec:82:a5:66:90:30:c8:7f:
4c:4a:80:f0:03:7f:15:f7:2c:93:3f:26:16:98:17:d1:c2:0f:
dd:fa:2d:1f:7e:79:48:77:de:7c:22:66:e8:62:3a:de:9a:9c:
1c:be:45:4c:b8:f3:d8:dc:4a:01:d0:00:29:11:16:1e:4d:77:
43:64:f4:1e:9f:a8:ae:6e:8e:c2:68:03:ae:3f:77:82:33:32:
f7:ed:6f:61:63:9f:1a:fd:a6:e3:44:aa:75:94:fd:dd:f6:58:
00:4b:0c:1b:63:1a:b9:83:40:a4:33:72:a4:26:1f:b6:72:ac:
db:39:6e:8e:31:81:1b:a2:39:51:8f:e7:fe:e2:bd:4a:36:66:
40:67:83:6f:2d:13:95:e3:c8:99:a8:89:dd:ad:0b:65:1e:91:
4c:37:05:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNsNLs4sO9kezYGVjF8mNCKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YTMxMmJhNjVlOTBiZjhhY2Y0ZjU3MzI0YTMwYzBiNmNi
ZDFjMmYwHhcNMjQxMTI3MDYwMDE1WhcNMjQxMTI4MDYwMDE1WjAzMTEwLwYDVQQD
EygzNmY1ZjUzZWEzNmIxZDhlNjMzNDY3ZTliZWI3NzkwN2M0ZmRhZjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyblaKO9+LeUHWZ5ZCStZwzKDD+ip
/Hb9PYzsqj6Q3k0JN4WMLHohKBkYybJKfWUuye/MnyPfysV9WAR39boDQML0Aoa1
0CUwByw2fei6eT/DRT8Z9r88scoBfGf3GZedZcGyoSKJ4b/Ek00MkPmVMuYMjih/
a8dVZjwjQ5OTgtCPfo8MRTpyWDqS8psg9I8N/SoRSyFtkCWEhonWzXgy8Xu5Lf/3
MWp14Qhwht4OeIb03SIzgIgz+lo8eeOgEWjUMsoj/il0Q/Ol2oYP1rPEZH4XjHvh
yUmXzGycUX10jzj+uRqP9tVS/GcftOp56GOL1Rq4PkZlhuo57PXe9YnNsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDb19T6jax2OYzRn6b63eQfE/a+WMB8GA1UdIwQY
MBaAFASjErpl6Qv4rPT1cySjDAtsvRwvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQktNU3VtWHBDX2lzOVBWekpLTU1DMnk5SEM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lM2NmNzUtNDBiOS00MDM0LTg0Yjkt
Y2NjYmMyYWU2OTQ4LzEvQktNU3VtWHBDX2lzOVBWekpLTU1DMnk5SEM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9lM2NmNzUtNDBiOS00MDM0LTg0YjktY2NjYmMyYWU2OTQ4
LzEvQktNU3VtWHBDX2lzOVBWekpLTU1DMnk5SEM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqSTUpEKR
ssmPp1HSiaJPd/bKVviw56MJi0XVjr3tg5t7tCY+GzcFOHsMGZPRdgP1ZLQNU5Gt
Fpk23kpEJa+Y3zQo9JeArGVrRraka9M9c8yucvmzFIEUTRFmaR/hhih5OukzqeyC
pWaQMMh/TEqA8AN/Ffcskz8mFpgX0cIP3fotH355SHfefCJm6GI63pqcHL5FTLjz
2NxKAdAAKREWHk13Q2T0Hp+orm6OwmgDrj93gjMy9+1vYWOfGv2m40SqdZT93fZY
AEsMG2MauYNApDNypCYftnKs2zlujjGBG6I5UY/n/uK9SjZmQGeDby0TlePImaiJ
3a0LZR6RTDcF2Q==
-----END CERTIFICATE-----
Generated at Wed Nov 27 12:33:35 2024 by rpki-client on console-fra.rpki-client.org