Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
File: BMXx0XeetwkJA2XbmCkXrf0PgEk.mft (raw, json)
Hash identifier: uy5jI5KJlCYgCbqjwIS5SMeKWSZw1xrGN2jWSiFavI0=
Subject key identifier: 8F:F6:8F:66:06:87:91:4F:31:65:6A:26:88:9A:8A:9A:CC:9C:21:6C
Authority key identifier: 04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
Certificate issuer: /CN=04c5f1d1779eb709090365db982917adfd0f8049
Certificate serial: 018F34071071616EEEAF0F44A13A369BAE2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
Manifest number: 0610
Signing time: Wed 01 May 2024 12:00:29 +0000
Manifest this update: Wed 01 May 2024 12:00:29 +0000
Manifest next update: Thu 02 May 2024 12:00:29 +0000
Files and hashes: 1: BMXx0XeetwkJA2XbmCkXrf0PgEk.crl (hash: Vz9hF9R3WfSFUwOgdsJT2692Rqe8expRVCUN1su9mFA=)
2: QWprQh08OMlgnpAelM05447RhmU.roa (hash: Azfz7/uI98Dj2v8aH5KWFbACsbIanG/bUwJ4MvrCoec=)
3: X2AF0wk6E2kjIj2nL8NlNMxzW0w.roa (hash: LwnHOfwkrCh5Ig67Gwudwi2KovtA9npgRnfwFvGJwik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:34:07:10:71:61:6e:ee:af:0f:44:a1:3a:36:9b:ae:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04c5f1d1779eb709090365db982917adfd0f8049
Validity
Not Before: May 1 12:00:29 2024 GMT
Not After : May 2 12:00:29 2024 GMT
Subject: CN=8ff68f660687914f31656a26889a8a9acc9c216c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:08:28:2b:ad:ed:21:e2:4f:7a:e5:46:54:4d:
25:89:70:5a:54:11:51:be:3c:33:30:2b:f2:a3:6e:
66:f1:62:c6:f7:98:d1:2e:3b:74:47:db:bd:6d:d8:
4d:6a:10:af:d2:09:45:49:bb:d6:32:60:6d:c2:f5:
56:7c:95:ab:a0:40:11:56:1c:7a:c0:05:af:96:2b:
67:e2:42:b2:7e:b7:85:b0:02:8e:b6:ae:53:62:8e:
61:6b:ba:57:45:b6:7f:e1:f3:be:93:95:6f:57:23:
5c:e8:67:8b:05:ed:70:77:e2:13:d1:5a:b5:2a:d7:
70:4f:1f:b9:09:43:d2:4f:8e:b8:20:38:3b:b3:2f:
02:a4:d2:4f:e7:89:d9:f4:f1:e3:4c:84:43:0f:38:
db:60:da:10:8c:86:c1:6f:da:de:fa:9f:f0:52:2f:
1a:07:71:79:8b:7a:90:bf:48:af:16:63:39:d2:1b:
8e:61:18:d5:8b:66:f0:e8:13:c4:df:32:01:85:ff:
bd:fa:4e:d4:77:b6:ce:75:c5:b1:76:a4:8f:77:4d:
cf:d3:b2:30:3e:5b:35:71:05:75:27:32:4c:0c:de:
21:51:02:ff:51:84:8b:47:c1:3c:9d:39:89:cc:75:
27:cd:76:b8:84:d2:b9:52:dc:31:e2:17:bc:e8:76:
00:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F6:8F:66:06:87:91:4F:31:65:6A:26:88:9A:8A:9A:CC:9C:21:6C
X509v3 Authority Key Identifier:
keyid:04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f3:c0:51:55:40:16:6a:75:a6:62:15:d8:9b:36:6c:9c:30:
f8:69:10:6a:31:5c:fc:13:ca:b2:c2:2c:d6:4d:d7:23:e8:ba:
79:a1:9a:60:43:e1:b8:7d:bf:22:50:29:9f:bb:c3:b5:18:ba:
2e:50:d0:19:0f:4b:c7:77:79:d3:d6:a6:e7:50:61:19:f3:8b:
38:d9:1b:9f:cc:7e:e7:ef:e6:48:90:c7:e3:26:5e:3e:38:a7:
0c:05:5e:2c:77:12:35:7e:c4:4d:e3:d3:eb:18:c3:2e:df:1a:
0e:7e:13:66:1f:3a:47:5a:8a:7c:0f:9c:c0:03:4b:53:8d:a4:
27:01:23:22:cd:d0:bf:90:64:96:49:c3:b9:be:c8:cb:61:a5:
53:50:f5:cd:e4:17:c6:94:55:d5:6c:0c:a6:bf:3e:cb:fe:4b:
5f:10:35:0d:77:98:d7:3f:35:86:1f:25:46:9d:37:dc:90:1e:
e1:47:23:3c:52:c1:79:b2:85:e1:6e:86:8f:97:f7:99:d0:49:
54:6a:85:0d:8a:ad:c9:bd:a0:aa:ff:1e:f8:ec:df:43:b5:11:
6d:14:fa:46:8e:77:d5:77:a8:50:2f:54:02:07:28:5b:ba:68:
ab:82:7a:22:e8:42:45:3b:f3:1b:f3:4e:80:23:af:c0:a6:d6:
73:dd:a4:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY80BxBxYW7urw9EoTo2m64qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YzVmMWQxNzc5ZWI3MDkwOTAzNjVkYjk4MjkxN2FkZmQw
ZjgwNDkwHhcNMjQwNTAxMTIwMDI5WhcNMjQwNTAyMTIwMDI5WjAzMTEwLwYDVQQD
Eyg4ZmY2OGY2NjA2ODc5MTRmMzE2NTZhMjY4ODlhOGE5YWNjOWMyMTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AgoK63tIeJPeuVGVE0liXBaVBFR
vjwzMCvyo25m8WLG95jRLjt0R9u9bdhNahCv0glFSbvWMmBtwvVWfJWroEARVhx6
wAWvlitn4kKyfreFsAKOtq5TYo5ha7pXRbZ/4fO+k5VvVyNc6GeLBe1wd+IT0Vq1
KtdwTx+5CUPST464IDg7sy8CpNJP54nZ9PHjTIRDDzjbYNoQjIbBb9re+p/wUi8a
B3F5i3qQv0ivFmM50huOYRjVi2bw6BPE3zIBhf+9+k7Ud7bOdcWxdqSPd03P07Iw
Pls1cQV1JzJMDN4hUQL/UYSLR8E8nTmJzHUnzXa4hNK5Utwx4he86HYAlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/2j2YGh5FPMWVqJoiaiprMnCFsMB8GA1UdIwQY
MBaAFATF8dF3nrcJCQNl25gpF639D4BJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk1YeDBYZWV0d2tKQTJYYm1Da1hyZjBQZ0VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC83MGIzM2ItZDFlYi00YmJiLTk3ZDYt
MDU5MjQ1M2RmN2QyLzEvQk1YeDBYZWV0d2tKQTJYYm1Da1hyZjBQZ0VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC83MGIzM2ItZDFlYi00YmJiLTk3ZDYtMDU5MjQ1M2RmN2Qy
LzEvQk1YeDBYZWV0d2tKQTJYYm1Da1hyZjBQZ0VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/PAUVVA
Fmp1pmIV2Js2bJww+GkQajFc/BPKssIs1k3XI+i6eaGaYEPhuH2/IlApn7vDtRi6
LlDQGQ9Lx3d509am51BhGfOLONkbn8x+5+/mSJDH4yZePjinDAVeLHcSNX7ETePT
6xjDLt8aDn4TZh86R1qKfA+cwANLU42kJwEjIs3Qv5BklknDub7Iy2GlU1D1zeQX
xpRV1WwMpr8+y/5LXxA1DXeY1z81hh8lRp033JAe4UcjPFLBebKF4W6Gj5f3mdBJ
VGqFDYqtyb2gqv8e+OzfQ7URbRT6Ro531XeoUC9UAgcoW7poq4J6IuhCRTvzG/NO
gCOvwKbWc92kDg==
-----END CERTIFICATE-----
Generated at Wed May 1 14:56:50 2024 by rpki-client on console-fra.rpki-client.org