Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
File: BDqcNdnhovTTSnVPom0gNleEchg.mft (raw, json)
Hash identifier: b3DF5B9xlkUlqzE+KcdMVUs8Gqse7/V0PGVZjNMlfbU=
Subject key identifier: A7:00:F0:8E:3E:68:08:3C:02:DB:C0:08:E1:4D:C3:C3:5B:B3:D2:C7
Authority key identifier: 04:3A:9C:35:D9:E1:A2:F4:D3:4A:75:4F:A2:6D:20:36:57:84:72:18
Certificate issuer: /CN=043a9c35d9e1a2f4d34a754fa26d203657847218
Certificate serial: 01936AB46759E5DDF9587F4688B5CA987F74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
Manifest number: 11B3
Signing time: Tue 26 Nov 2024 23:00:27 +0000
Manifest this update: Tue 26 Nov 2024 23:00:27 +0000
Manifest next update: Wed 27 Nov 2024 23:00:27 +0000
Files and hashes: 1: BDqcNdnhovTTSnVPom0gNleEchg.crl (hash: KgG9hpWEp0EJ4wnJsr1OGnXa+M26I/sppivlix+vU54=)
2: JN-PgRWx3Nr_Av2B0U8ZhejGm3c.roa (hash: GDHYA46KHFddID/WN0k830C4UX+Cvpnza5sk72ZgWWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:b4:67:59:e5:dd:f9:58:7f:46:88:b5:ca:98:7f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=043a9c35d9e1a2f4d34a754fa26d203657847218
Validity
Not Before: Nov 26 23:00:27 2024 GMT
Not After : Nov 27 23:00:27 2024 GMT
Subject: CN=a700f08e3e68083c02dbc008e14dc3c35bb3d2c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2a:55:23:f0:3c:e3:e7:9a:81:c9:3c:f4:c7:
d3:d1:c2:dc:31:70:3b:66:6f:13:ac:86:60:d6:09:
9d:be:62:68:3d:02:27:7b:87:e2:8a:6d:73:7b:16:
47:3e:cf:2a:4c:4d:d6:5b:41:ff:02:3b:78:36:61:
2d:95:2e:10:52:51:e4:7e:b6:15:18:c1:9c:bb:24:
30:63:52:f2:eb:bc:ef:54:11:a8:7b:f6:b0:02:ee:
51:d5:6d:18:0e:de:2c:80:a5:13:f7:85:ca:42:9d:
16:54:5e:05:8b:a9:31:3b:c7:b3:8b:cd:5a:d8:45:
00:c1:94:99:a0:97:d9:02:04:f6:ac:2b:c4:1c:d0:
1e:ee:37:bb:49:20:17:2d:da:dd:2f:5a:d1:cf:c9:
d9:ca:16:70:49:24:2e:fb:12:73:a2:a4:65:fb:8a:
75:3a:76:c6:70:b5:29:14:62:b2:34:a9:7a:6b:e5:
7f:5e:38:85:92:35:1d:99:c4:3b:77:0d:51:7e:c1:
dd:12:73:38:75:68:72:7b:61:22:73:fc:c4:bd:7a:
62:f1:e0:d1:fb:7c:2c:b3:ed:68:79:56:83:a1:4c:
71:e7:54:6b:4b:5a:cc:49:77:4a:a7:3c:7d:d9:8e:
10:b9:cd:5f:61:3f:99:6d:7f:0c:c2:61:7f:4c:89:
39:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:00:F0:8E:3E:68:08:3C:02:DB:C0:08:E1:4D:C3:C3:5B:B3:D2:C7
X509v3 Authority Key Identifier:
keyid:04:3A:9C:35:D9:E1:A2:F4:D3:4A:75:4F:A2:6D:20:36:57:84:72:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:f7:7a:e9:6e:94:03:3a:10:e9:b1:8d:c4:bc:d2:2d:6e:84:
61:12:0b:ee:ca:fd:ca:1e:96:b3:31:5e:07:f2:2d:bc:fd:bf:
b6:6c:d9:84:6d:b1:15:14:b0:e2:f3:14:2e:d3:e6:dd:d9:23:
8c:b6:24:5e:41:2c:ba:17:e1:02:1b:f1:06:b5:1b:8d:79:3a:
ce:63:a8:e6:3a:dc:78:63:00:de:9c:85:a0:91:12:2d:79:72:
1e:73:74:3b:07:ea:3a:03:76:eb:5a:21:a4:1a:5f:24:5e:0d:
ac:ad:61:58:00:cd:cc:18:be:f3:7e:47:43:e2:3f:35:b9:18:
07:d1:31:aa:5a:13:5b:66:84:e9:42:cc:a3:f5:a5:6e:1d:ec:
61:5d:ee:9e:88:ab:5a:38:36:25:67:da:50:05:6a:cf:e8:02:
56:a0:7d:6d:16:5c:ec:fa:01:25:c7:43:a0:ea:c6:af:c7:29:
b4:c0:09:69:02:a2:29:5c:4b:5a:89:f3:6c:39:84:98:14:c1:
68:20:65:74:23:9c:8c:69:86:f2:c2:ee:a8:1c:ae:24:53:cf:
ba:49:c6:ab:ef:bc:34:63:1a:5f:12:91:9d:8e:c4:c5:d1:69:
17:f8:4c:a4:4e:c5:b8:21:4d:51:be:02:6e:85:57:11:62:02:
31:4b:6e:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqtGdZ5d35WH9GiLXKmH90MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0M2E5YzM1ZDllMWEyZjRkMzRhNzU0ZmEyNmQyMDM2NTc4
NDcyMTgwHhcNMjQxMTI2MjMwMDI3WhcNMjQxMTI3MjMwMDI3WjAzMTEwLwYDVQQD
EyhhNzAwZjA4ZTNlNjgwODNjMDJkYmMwMDhlMTRkYzNjMzViYjNkMmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSpVI/A84+eagck89MfT0cLcMXA7
Zm8TrIZg1gmdvmJoPQIne4fiim1zexZHPs8qTE3WW0H/Ajt4NmEtlS4QUlHkfrYV
GMGcuyQwY1Ly67zvVBGoe/awAu5R1W0YDt4sgKUT94XKQp0WVF4Fi6kxO8ezi81a
2EUAwZSZoJfZAgT2rCvEHNAe7je7SSAXLdrdL1rRz8nZyhZwSSQu+xJzoqRl+4p1
OnbGcLUpFGKyNKl6a+V/XjiFkjUdmcQ7dw1RfsHdEnM4dWhye2Eic/zEvXpi8eDR
+3wss+1oeVaDoUxx51RrS1rMSXdKpzx92Y4Quc1fYT+ZbX8MwmF/TIk51QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKcA8I4+aAg8AtvACOFNw8Nbs9LHMB8GA1UdIwQY
MBaAFAQ6nDXZ4aL000p1T6JtIDZXhHIYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkRxY05kbmhvdlRUU25WUG9tMGdObGVFY2hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8zYjEwNGEtYzAzOS00MmMyLTlmZjEt
ODVjYmQyMDY4ZThmLzEvQkRxY05kbmhvdlRUU25WUG9tMGdObGVFY2hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8zYjEwNGEtYzAzOS00MmMyLTlmZjEtODVjYmQyMDY4ZThm
LzEvQkRxY05kbmhvdlRUU25WUG9tMGdObGVFY2hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp/d66W6U
AzoQ6bGNxLzSLW6EYRIL7sr9yh6WszFeB/ItvP2/tmzZhG2xFRSw4vMULtPm3dkj
jLYkXkEsuhfhAhvxBrUbjXk6zmOo5jrceGMA3pyFoJESLXlyHnN0OwfqOgN261oh
pBpfJF4NrK1hWADNzBi+835HQ+I/NbkYB9ExqloTW2aE6ULMo/Wlbh3sYV3unoir
Wjg2JWfaUAVqz+gCVqB9bRZc7PoBJcdDoOrGr8cptMAJaQKiKVxLWonzbDmEmBTB
aCBldCOcjGmG8sLuqByuJFPPuknGq++8NGMaXxKRnY7ExdFpF/hMpE7FuCFNUb4C
boVXEWICMUtu5A==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:38:06 2024 by rpki-client on console-fra.rpki-client.org