Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft
File: BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft (raw, json)
Hash identifier: F5Eb9UcKnLL2k8nFXY3lxZs6bM0u1KNY6sa2tRHaTq4=
Subject key identifier: D2:B0:DF:8C:27:20:E7:7B:32:A8:D0:87:DE:F7:26:11:30:B2:9A:0E
Authority key identifier: 06:6B:A2:09:C5:0C:02:A8:58:B5:43:08:C8:2A:E5:BF:30:2E:FA:A4
Certificate issuer: /CN=066ba209c50c02a858b54308c82ae5bf302efaa4
Certificate serial: 018F47904D70C1B446C7C4FF68D727D15396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft
Manifest number: 0E28
Signing time: Sun 05 May 2024 07:03:10 +0000
Manifest this update: Sun 05 May 2024 07:03:10 +0000
Manifest next update: Mon 06 May 2024 07:03:10 +0000
Files and hashes: 1: BmuiCcUMAqhYtUMIyCrlvzAu-qQ.crl (hash: cE/L3pUnDUKu4fB79zw/O1MU4y4FBSqOWG/+XUGJLUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 07:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:47:90:4d:70:c1:b4:46:c7:c4:ff:68:d7:27:d1:53:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=066ba209c50c02a858b54308c82ae5bf302efaa4
Validity
Not Before: May 5 07:03:10 2024 GMT
Not After : May 6 07:03:10 2024 GMT
Subject: CN=d2b0df8c2720e77b32a8d087def7261130b29a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7d:a5:2d:78:cb:9c:06:bb:d6:cf:f7:d7:6b:
07:83:cf:36:24:35:c4:9d:95:41:dd:3d:38:d6:02:
74:72:72:9a:ce:3e:f4:54:1a:47:be:16:cb:15:d3:
c0:eb:6a:7b:38:07:22:93:19:8d:85:0d:e2:73:15:
17:72:45:5a:f9:31:a0:f0:6a:1f:d3:3a:1b:4b:ea:
77:2e:98:ca:0c:8a:ee:2b:63:ef:8d:e1:45:05:3c:
a2:ce:a0:bd:a1:8f:8b:95:9e:c8:74:d4:d2:d6:91:
b9:0c:e2:fc:c5:0c:f3:fc:50:47:40:37:fa:0e:db:
d0:8e:91:73:42:8e:f1:65:b1:c7:3b:e6:28:59:13:
d8:3a:00:98:7d:a0:82:3c:5f:5c:79:46:78:f4:c1:
8b:28:9d:c8:53:26:1f:e9:9b:ab:cf:d0:20:78:f8:
01:6e:e9:b9:34:ed:a8:e4:d1:c9:7a:88:9b:e6:36:
ba:aa:24:41:06:44:ca:77:34:8a:67:ff:a4:51:8d:
5b:67:62:a7:fc:55:a4:aa:1b:b9:01:c6:d9:4d:2b:
88:92:47:b1:5f:89:1f:91:db:cb:d5:fb:57:b2:9a:
04:71:ee:9e:4d:83:17:19:63:d5:4a:c3:8a:82:ff:
f6:09:b5:28:9a:cd:80:a4:6e:01:61:e8:6b:be:80:
63:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B0:DF:8C:27:20:E7:7B:32:A8:D0:87:DE:F7:26:11:30:B2:9A:0E
X509v3 Authority Key Identifier:
keyid:06:6B:A2:09:C5:0C:02:A8:58:B5:43:08:C8:2A:E5:BF:30:2E:FA:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:50:d5:29:13:4d:e3:38:ca:30:d3:72:c4:a5:98:54:09:ae:
02:61:53:ab:da:0a:94:3f:ab:cd:3d:73:9b:42:6e:78:9b:47:
f0:2e:c7:4b:68:27:22:1e:20:b0:e6:5f:e4:ce:94:ba:b8:23:
75:33:76:41:d9:cd:d3:ae:e0:82:1d:73:b2:a9:4e:20:a5:8e:
9d:ff:82:9d:6d:6a:ef:e4:e3:ed:17:1f:7a:fd:ac:6a:66:9b:
5b:77:b8:01:f4:d3:08:e7:9f:86:e9:52:c2:58:a8:0f:22:2b:
ca:db:7c:e1:52:ee:91:1b:11:bf:b1:42:e6:82:66:5c:7f:fc:
fe:2c:3d:37:2a:51:03:a5:af:40:48:2d:18:c8:d5:1b:ce:bf:
8c:e7:d1:35:9c:4e:fd:d6:38:8c:b7:06:57:15:39:53:c2:b5:
ea:b4:f8:68:66:75:ec:69:57:7c:5f:e4:e4:72:3a:be:13:a6:
59:ff:21:32:86:60:06:6d:e8:f1:b0:b7:4f:ae:d0:47:9f:ab:
9c:21:cc:04:99:48:fb:d3:73:e6:e6:69:05:4a:c4:17:c6:97:
6a:be:54:28:ea:fa:50:fd:db:fe:c7:b8:6e:d3:53:7b:a7:42:
b9:87:56:e4:e9:22:ee:8f:71:8f:67:08:63:83:0c:bd:6d:2d:
05:49:a9:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9HkE1wwbRGx8T/aNcn0VOWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NmJhMjA5YzUwYzAyYTg1OGI1NDMwOGM4MmFlNWJmMzAy
ZWZhYTQwHhcNMjQwNTA1MDcwMzEwWhcNMjQwNTA2MDcwMzEwWjAzMTEwLwYDVQQD
EyhkMmIwZGY4YzI3MjBlNzdiMzJhOGQwODdkZWY3MjYxMTMwYjI5YTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH2lLXjLnAa71s/312sHg882JDXE
nZVB3T041gJ0cnKazj70VBpHvhbLFdPA62p7OAcikxmNhQ3icxUXckVa+TGg8Gof
0zobS+p3LpjKDIruK2PvjeFFBTyizqC9oY+LlZ7IdNTS1pG5DOL8xQzz/FBHQDf6
DtvQjpFzQo7xZbHHO+YoWRPYOgCYfaCCPF9ceUZ49MGLKJ3IUyYf6Zurz9AgePgB
bum5NO2o5NHJeoib5ja6qiRBBkTKdzSKZ/+kUY1bZ2Kn/FWkqhu5AcbZTSuIkkex
X4kfkdvL1ftXspoEce6eTYMXGWPVSsOKgv/2CbUoms2ApG4BYehrvoBjPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKw34wnIOd7MqjQh973JhEwspoOMB8GA1UdIwQY
MBaAFAZrognFDAKoWLVDCMgq5b8wLvqkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm11aUNjVU1BcWhZdFVNSXlDcmx2ekF1LXFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8zMTUxYjgtZDhmMS00MTAyLTkzNmYt
OTNmZmVjNWMzYzgxLzEvQm11aUNjVU1BcWhZdFVNSXlDcmx2ekF1LXFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8zMTUxYjgtZDhmMS00MTAyLTkzNmYtOTNmZmVjNWMzYzgx
LzEvQm11aUNjVU1BcWhZdFVNSXlDcmx2ekF1LXFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWlDVKRNN
4zjKMNNyxKWYVAmuAmFTq9oKlD+rzT1zm0JueJtH8C7HS2gnIh4gsOZf5M6Uurgj
dTN2QdnN067ggh1zsqlOIKWOnf+CnW1q7+Tj7Rcfev2samabW3e4AfTTCOefhulS
wlioDyIrytt84VLukRsRv7FC5oJmXH/8/iw9NypRA6WvQEgtGMjVG86/jOfRNZxO
/dY4jLcGVxU5U8K16rT4aGZ17GlXfF/k5HI6vhOmWf8hMoZgBm3o8bC3T67QR5+r
nCHMBJlI+9Nz5uZpBUrEF8aXar5UKOr6UP3b/se4btNTe6dCuYdW5Oki7o9xj2cI
Y4MMvW0tBUmpAQ==
-----END CERTIFICATE-----
Generated at Sun May 5 12:06:15 2024 by rpki-client on console-ams.rpki-client.org