Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
File: BKSudHHI82IdUyVtdfEQt0iZeJg.mft (raw, json)
Hash identifier: hF6ylFsa99STykgbhgDvw7YNQhD2FustF0ZYCI+mcHI=
Subject key identifier: 7B:43:82:63:84:69:D7:39:EB:03:34:02:5D:61:49:13:E2:74:8A:0A
Authority key identifier: 04:A4:AE:74:71:C8:F3:62:1D:53:25:6D:75:F1:10:B7:48:99:78:98
Certificate issuer: /CN=04a4ae7471c8f3621d53256d75f110b748997898
Certificate serial: 018F40B117B5203038D2CCC836B8E62FE399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
Manifest number: 1153
Signing time: Fri 03 May 2024 23:01:38 +0000
Manifest this update: Fri 03 May 2024 23:01:38 +0000
Manifest next update: Sat 04 May 2024 23:01:38 +0000
Files and hashes: 1: BKSudHHI82IdUyVtdfEQt0iZeJg.crl (hash: 2PGw4AliShhztB5EqDr+go+VMQD2oTeC3l5qEsjWXzk=)
2: T9dES4QA5UEgCPCOXVzLkXdkMG0.roa (hash: SpDZ4AG7OAR9Qa60UnrzOuasvQOTtyem6cFcydE31yA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:40:b1:17:b5:20:30:38:d2:cc:c8:36:b8:e6:2f:e3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a4ae7471c8f3621d53256d75f110b748997898
Validity
Not Before: May 3 23:01:38 2024 GMT
Not After : May 4 23:01:38 2024 GMT
Subject: CN=7b4382638469d739eb0334025d614913e2748a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a8:75:60:89:8e:f7:13:e9:15:c6:66:ea:f8:
a1:4c:9c:9c:bc:61:d4:a5:ed:39:17:5e:4a:67:f5:
c7:cf:f3:4b:8a:49:1e:5d:52:be:d8:fd:74:58:07:
e1:d1:bd:c7:40:03:1e:fe:2a:1a:91:65:2c:98:f8:
53:63:32:ea:01:60:8c:d6:64:e3:d9:db:35:b7:72:
af:ab:e7:c5:3e:a2:1a:36:30:ee:e3:d4:b6:65:19:
9e:31:b1:de:6f:8d:95:c6:a4:87:29:36:4f:05:b0:
d2:95:7b:f7:36:1d:bb:e5:5c:e2:0a:14:a3:a5:75:
e3:a2:c8:21:4d:3a:78:8f:41:3e:dd:68:19:06:88:
df:fc:fc:d5:4c:f9:e6:a6:31:8a:58:2e:1d:ff:2d:
b3:79:2c:82:3e:0e:17:3a:94:3b:22:bc:f4:46:07:
2c:16:a7:d7:b1:1f:32:7e:2f:1d:86:c4:fa:83:47:
20:e4:f4:59:d9:fa:dd:97:3c:db:24:0b:2d:d9:6a:
01:10:72:52:81:c5:06:21:f9:b4:a7:35:ba:2b:5b:
bb:18:52:fd:c3:6f:f0:0a:ea:95:79:b5:9e:33:b1:
b9:42:f9:cc:be:35:d0:01:08:11:05:70:7c:c9:3a:
73:47:7a:cf:79:d9:8a:85:70:ff:1d:d8:68:1b:3e:
7f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:43:82:63:84:69:D7:39:EB:03:34:02:5D:61:49:13:E2:74:8A:0A
X509v3 Authority Key Identifier:
keyid:04:A4:AE:74:71:C8:F3:62:1D:53:25:6D:75:F1:10:B7:48:99:78:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:12:c0:15:d6:09:46:59:f1:1c:92:7a:01:2f:6a:e0:ab:ad:
6b:37:43:50:3b:de:ec:1d:34:32:50:6a:bb:91:43:04:a6:1a:
5d:75:73:fa:33:4d:57:ee:00:bf:b9:6b:ac:80:ec:8d:0d:51:
58:f9:2c:ed:a7:16:00:ad:72:9e:f6:9d:54:8c:c3:99:e9:25:
70:61:52:f6:c6:95:b8:27:03:26:fd:3b:c5:0f:0e:78:d8:73:
00:39:b7:b1:e1:e2:45:92:26:58:45:0f:77:5c:ae:7c:18:9d:
49:d0:07:13:e6:fb:8f:2a:c0:60:44:92:5d:78:c6:92:a5:54:
e5:eb:51:3f:75:21:f8:25:ad:9e:3a:0e:ba:03:77:c6:26:1a:
eb:7c:32:e6:72:c1:11:bd:0f:27:6a:51:85:53:94:eb:bc:63:
64:28:6f:a3:37:34:57:83:3c:6a:7b:5b:39:f9:5f:0f:ad:8c:
ad:10:6d:6a:2a:88:74:89:0f:ec:0e:ab:ac:e7:57:9e:f6:27:
65:9b:06:6c:b8:ec:f7:54:44:78:b7:8c:6e:fd:67:fa:eb:d8:
96:ad:dd:97:fc:af:24:b8:70:f8:ac:2a:ad:b1:f4:fd:c5:e5:
70:11:16:9d:76:58:20:5c:33:0b:d8:92:aa:a6:e7:69:30:ec:
13:bf:d7:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9AsRe1IDA40szINrjmL+OZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YTRhZTc0NzFjOGYzNjIxZDUzMjU2ZDc1ZjExMGI3NDg5
OTc4OTgwHhcNMjQwNTAzMjMwMTM4WhcNMjQwNTA0MjMwMTM4WjAzMTEwLwYDVQQD
Eyg3YjQzODI2Mzg0NjlkNzM5ZWIwMzM0MDI1ZDYxNDkxM2UyNzQ4YTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6h1YImO9xPpFcZm6vihTJycvGHU
pe05F15KZ/XHz/NLikkeXVK+2P10WAfh0b3HQAMe/ioakWUsmPhTYzLqAWCM1mTj
2ds1t3Kvq+fFPqIaNjDu49S2ZRmeMbHeb42VxqSHKTZPBbDSlXv3Nh275VziChSj
pXXjosghTTp4j0E+3WgZBojf/PzVTPnmpjGKWC4d/y2zeSyCPg4XOpQ7Irz0Rgcs
FqfXsR8yfi8dhsT6g0cg5PRZ2frdlzzbJAst2WoBEHJSgcUGIfm0pzW6K1u7GFL9
w2/wCuqVebWeM7G5QvnMvjXQAQgRBXB8yTpzR3rPedmKhXD/HdhoGz5/TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHtDgmOEadc56wM0Al1hSRPidIoKMB8GA1UdIwQY
MBaAFASkrnRxyPNiHVMlbXXxELdImXiYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQktTdWRISEk4MklkVXlWdGRmRVF0MGlaZUpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mM2JhNWUtODk4Yy00ZmU5LWJkODgt
M2MzNjczZDQ0OTA1LzEvQktTdWRISEk4MklkVXlWdGRmRVF0MGlaZUpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9mM2JhNWUtODk4Yy00ZmU5LWJkODgtM2MzNjczZDQ0OTA1
LzEvQktTdWRISEk4MklkVXlWdGRmRVF0MGlaZUpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgRLAFdYJ
RlnxHJJ6AS9q4KutazdDUDve7B00MlBqu5FDBKYaXXVz+jNNV+4Av7lrrIDsjQ1R
WPks7acWAK1ynvadVIzDmeklcGFS9saVuCcDJv07xQ8OeNhzADm3seHiRZImWEUP
d1yufBidSdAHE+b7jyrAYESSXXjGkqVU5etRP3Uh+CWtnjoOugN3xiYa63wy5nLB
Eb0PJ2pRhVOU67xjZChvozc0V4M8antbOflfD62MrRBtaiqIdIkP7A6rrOdXnvYn
ZZsGbLjs91REeLeMbv1n+uvYlq3dl/yvJLhw+KwqrbH0/cXlcBEWnXZYIFwzC9iS
qqbnaTDsE7/Xww==
-----END CERTIFICATE-----
Generated at Sat May 4 00:18:21 2024 by rpki-client on console-fra.rpki-client.org