Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
File: BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft (raw, json)
Hash identifier: lc+C1D4CP5SSlRGJq6Kzw77nDBC7DueeIFdR6pzYGHE=
Subject key identifier: 43:0F:D7:D9:28:E6:6A:89:9D:08:C1:16:5D:B8:9F:DC:4B:B9:69:D0
Authority key identifier: 04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A
Certificate issuer: /CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a
Certificate serial: 018F3588649C2C935EECADB28F51BC77348F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
Manifest number: 114D
Signing time: Wed 01 May 2024 19:01:22 +0000
Manifest this update: Wed 01 May 2024 19:01:22 +0000
Manifest next update: Thu 02 May 2024 19:01:22 +0000
Files and hashes: 1: Am-tfOATkcJfTFLCpyvOuTzLSxY.roa (hash: bZoZrsLfNkzn6o35c+K/Xwhtba5eV2o5JcIPeA8KVII=)
2: BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl (hash: Fhj+RmxIf4+gP2UMmURiJYkedPhSeDfSlyRh3cegs/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:35:88:64:9c:2c:93:5e:ec:ad:b2:8f:51:bc:77:34:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a
Validity
Not Before: May 1 19:01:22 2024 GMT
Not After : May 2 19:01:22 2024 GMT
Subject: CN=430fd7d928e66a899d08c1165db89fdc4bb969d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:30:c8:a6:87:fd:b9:bc:08:2c:82:81:1c:4e:
60:d0:cf:57:c4:9f:e6:7b:63:e8:dd:29:2b:2d:04:
17:70:b5:0c:7d:72:15:d6:9d:26:79:52:32:94:c2:
15:c3:0d:56:90:ac:69:94:14:84:83:10:82:1f:d1:
14:3d:82:cd:da:f2:2f:c3:71:22:54:2a:27:f4:3e:
c5:a6:5c:48:2c:a7:bc:15:50:e9:32:df:cb:32:f7:
0f:3c:96:48:ff:b5:fc:a8:5e:99:7b:97:c3:59:cf:
3d:6f:85:90:28:38:a5:2b:69:1b:dd:b8:d8:68:53:
1a:61:31:03:bf:c7:6a:e2:c7:03:db:3f:cc:f1:01:
84:3f:75:ab:39:50:25:cb:00:a4:bf:b9:d5:86:90:
03:06:3f:87:33:d9:ec:7e:8f:9d:62:b4:6d:27:fd:
47:7a:f2:84:40:e5:e7:88:eb:e5:0d:48:bd:4c:0a:
f0:7f:7b:bd:d5:68:f1:7a:84:e3:fa:1a:b0:b5:b0:
18:a7:8a:09:d0:ac:b0:f8:22:eb:12:5d:7f:a0:a7:
dd:93:c4:19:45:e0:41:d7:f3:56:6a:56:be:cb:0b:
77:f4:6c:52:ea:51:4b:70:31:d5:ba:a6:34:f1:7b:
72:a2:93:32:d5:ef:91:f0:4e:b8:1d:b9:23:f0:d7:
76:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0F:D7:D9:28:E6:6A:89:9D:08:C1:16:5D:B8:9F:DC:4B:B9:69:D0
X509v3 Authority Key Identifier:
keyid:04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:8c:c1:ec:5b:7b:fe:2d:bf:67:2a:11:90:22:fb:45:03:a1:
92:92:c8:85:64:dd:6f:30:0e:11:a3:0c:95:cb:ff:73:9a:56:
ac:85:e8:b5:1e:c4:03:8e:84:48:eb:ab:0c:1d:4c:24:95:1f:
a2:89:01:f8:2b:35:9b:09:45:14:78:00:8d:13:ff:67:14:11:
9e:e8:5f:33:ef:61:41:4b:7f:58:82:f1:83:19:f4:a9:d4:06:
92:de:2d:59:6a:9e:d6:83:66:25:e8:25:b1:48:48:96:4a:1b:
a1:03:64:69:34:2d:38:69:30:a3:82:4c:b9:8a:57:59:6e:af:
f6:10:9f:ff:07:a6:32:39:2b:7e:ee:3d:ef:c4:2a:c4:31:9c:
91:ec:0b:c1:64:2f:94:a8:52:e6:7a:37:22:69:1b:8d:cc:b6:
d0:7b:b7:df:31:59:de:cb:ef:cb:3f:48:21:02:7f:bd:1c:70:
9d:e1:74:67:dc:9f:63:2b:3e:07:74:e8:e3:c2:20:ae:c5:10:
b2:c9:20:d2:41:d7:aa:21:1b:fd:80:cb:b5:57:6c:be:cf:23:
0f:d1:2c:ec:c1:1e:bb:ad:93:b7:56:76:ea:ec:29:88:fd:94:
53:41:35:d7:97:cc:ce:c7:5c:77:9e:6d:18:d2:72:a7:19:51:
f5:6b:7e:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY81iGScLJNe7K2yj1G8dzSPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0OGIwYzMzNzc2NjYzY2I0MzIxYTEwOGYyZjRkMTYzNWI1
ZDJkOGEwHhcNMjQwNTAxMTkwMTIyWhcNMjQwNTAyMTkwMTIyWjAzMTEwLwYDVQQD
Eyg0MzBmZDdkOTI4ZTY2YTg5OWQwOGMxMTY1ZGI4OWZkYzRiYjk2OWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DDIpof9ubwILIKBHE5g0M9XxJ/m
e2Po3SkrLQQXcLUMfXIV1p0meVIylMIVww1WkKxplBSEgxCCH9EUPYLN2vIvw3Ei
VCon9D7FplxILKe8FVDpMt/LMvcPPJZI/7X8qF6Ze5fDWc89b4WQKDilK2kb3bjY
aFMaYTEDv8dq4scD2z/M8QGEP3WrOVAlywCkv7nVhpADBj+HM9nsfo+dYrRtJ/1H
evKEQOXniOvlDUi9TArwf3u91WjxeoTj+hqwtbAYp4oJ0Kyw+CLrEl1/oKfdk8QZ
ReBB1/NWala+ywt39GxS6lFLcDHVuqY08XtyopMy1e+R8E64Hbkj8Nd2CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMP19ko5mqJnQjBFl24n9xLuWnQMB8GA1UdIwQY
MBaAFASLDDN3ZmPLQyGhCPL00WNbXS2KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQklzTU0zZG1ZOHRESWFFSTh2VFJZMXRkTFlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC80YmI3ZjQtOTcwOS00MTA5LWIzMGUt
MjQxMTZjYjZlOTg2LzEvQklzTU0zZG1ZOHRESWFFSTh2VFJZMXRkTFlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC80YmI3ZjQtOTcwOS00MTA5LWIzMGUtMjQxMTZjYjZlOTg2
LzEvQklzTU0zZG1ZOHRESWFFSTh2VFJZMXRkTFlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm4zB7Ft7
/i2/ZyoRkCL7RQOhkpLIhWTdbzAOEaMMlcv/c5pWrIXotR7EA46ESOurDB1MJJUf
ookB+Cs1mwlFFHgAjRP/ZxQRnuhfM+9hQUt/WILxgxn0qdQGkt4tWWqe1oNmJegl
sUhIlkoboQNkaTQtOGkwo4JMuYpXWW6v9hCf/wemMjkrfu4978QqxDGckewLwWQv
lKhS5no3Imkbjcy20Hu33zFZ3svvyz9IIQJ/vRxwneF0Z9yfYys+B3To48IgrsUQ
sskg0kHXqiEb/YDLtVdsvs8jD9Es7MEeu62Tt1Z26uwpiP2UU0E115fMzsdcd55t
GNJypxlR9Wt+/Q==
-----END CERTIFICATE-----
Generated at Wed May 1 22:45:48 2024 by rpki-client on console-fra.rpki-client.org