Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.mft
File: BjnEhGuIwtcOMc5MD8y0z03qVDY.mft (raw, json)
Hash identifier: dSj/R3zbyknAfXaoDVrJqs5spOWyAH/J9KYeJxCVIks=
Subject key identifier: 1C:01:2A:24:05:BE:5F:19:96:C5:56:F8:1B:11:BF:A5:C6:65:63:DF
Authority key identifier: 06:39:C4:84:6B:88:C2:D7:0E:31:CE:4C:0F:CC:B4:CF:4D:EA:54:36
Certificate issuer: /CN=0639c4846b88c2d70e31ce4c0fccb4cf4dea5436
Certificate serial: 0194BABB29D2193B90F298C47239810A63C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjnEhGuIwtcOMc5MD8y0z03qVDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 05:00:15 +0000
Manifest this update: Fri 31 Jan 2025 05:00:15 +0000
Manifest next update: Sat 01 Feb 2025 05:00:15 +0000
Files and hashes: 1: BjnEhGuIwtcOMc5MD8y0z03qVDY.crl (hash: XbwKLVPI/OFzjXSz3WtIN7P+SZsYLkYMNeO8mUiULLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjnEhGuIwtcOMc5MD8y0z03qVDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:29:d2:19:3b:90:f2:98:c4:72:39:81:0a:63:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0639c4846b88c2d70e31ce4c0fccb4cf4dea5436
Validity
Not Before: Jan 31 05:00:15 2025 GMT
Not After : Feb 1 05:00:15 2025 GMT
Subject: CN=1c012a2405be5f1996c556f81b11bfa5c66563df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a5:ad:ef:c1:45:b8:e5:e2:92:e3:c3:75:95:
5e:73:9d:a0:e5:34:29:bc:2b:96:9a:91:97:e6:2c:
05:97:c4:d2:87:8a:4c:6b:be:8a:a4:b8:d0:a4:af:
dd:f3:00:f5:e6:31:6c:d2:7d:f2:4a:41:9f:76:80:
04:36:e3:ce:ec:96:48:47:11:82:37:34:e1:f5:91:
16:61:a2:9f:09:62:7a:bc:0b:35:50:e8:46:66:e3:
45:a3:cd:eb:81:b8:69:38:c7:e1:4a:2e:75:00:1f:
35:c9:60:dc:c6:ad:b8:5a:ad:aa:b9:93:2c:00:bf:
5b:07:1a:48:9d:94:1d:ae:d5:06:f1:2a:74:ae:b5:
43:52:03:83:37:76:ef:8d:cb:c7:1e:36:2c:bc:64:
18:29:b7:f5:2e:43:c4:26:f0:d9:0b:cf:e8:25:e1:
c6:f1:47:75:c9:fe:59:88:6b:34:20:bf:9a:cf:0c:
3d:57:5f:9a:db:74:a0:63:b0:9c:c7:f4:dd:92:9a:
2f:6f:b2:fc:cb:25:18:de:08:87:fc:ee:60:22:fb:
11:52:ee:06:9b:ab:63:f7:ba:44:a1:38:d3:dc:9a:
db:1b:12:ab:4c:d0:a2:90:81:e4:7c:c1:15:7a:5e:
4c:8b:7f:27:fc:dc:7a:6f:70:37:cd:ab:d7:5d:18:
7e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:01:2A:24:05:BE:5F:19:96:C5:56:F8:1B:11:BF:A5:C6:65:63:DF
X509v3 Authority Key Identifier:
keyid:06:39:C4:84:6B:88:C2:D7:0E:31:CE:4C:0F:CC:B4:CF:4D:EA:54:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjnEhGuIwtcOMc5MD8y0z03qVDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d7:17:41:d4:1b:02:5a:7d:d1:cc:f1:7b:2e:d0:17:52:f0:
6a:5a:62:97:01:32:9f:ee:c4:51:35:d3:9c:9d:ca:fa:0d:6f:
04:56:67:59:1e:1c:bd:51:dc:7e:a6:94:1e:a5:94:3b:a9:2a:
62:50:1f:b3:bb:28:e0:2a:43:d1:f3:ee:b7:d8:05:78:0e:00:
fb:9c:7e:32:78:88:5d:63:a1:01:3e:63:80:89:02:56:69:bd:
01:f0:20:b1:13:9a:b9:c4:8e:df:91:ec:ac:c9:c1:99:df:19:
32:6c:8e:0a:48:53:d1:02:c5:fb:a2:aa:3d:0d:34:4e:ab:31:
21:b8:32:d3:22:b5:10:4e:33:b9:69:dd:d2:6d:32:db:1b:96:
67:10:a1:02:f9:dd:4e:7e:5d:a5:dc:a6:e5:b5:54:9b:18:6d:
3e:0a:17:80:f9:40:23:f0:d8:df:cb:ba:cd:a9:11:6c:f5:4c:
4a:ce:2c:36:df:b4:5f:15:2d:de:be:35:ee:cd:65:7d:6a:49:
a0:58:8c:3b:d3:42:c3:01:34:5a:48:3e:9f:86:d1:70:d2:3e:
08:e5:ae:e0:d7:89:d1:1d:d7:1d:9b:40:c6:9d:61:f2:60:dd:
7f:29:96:a2:de:14:e6:43:ca:e7:1a:b7:aa:de:c1:93:0e:55:
3b:04:48:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6uynSGTuQ8pjEcjmBCmPAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MzljNDg0NmI4OGMyZDcwZTMxY2U0YzBmY2NiNGNmNGRl
YTU0MzYwHhcNMjUwMTMxMDUwMDE1WhcNMjUwMjAxMDUwMDE1WjAzMTEwLwYDVQQD
EygxYzAxMmEyNDA1YmU1ZjE5OTZjNTU2ZjgxYjExYmZhNWM2NjU2M2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKWt78FFuOXikuPDdZVec52g5TQp
vCuWmpGX5iwFl8TSh4pMa76KpLjQpK/d8wD15jFs0n3ySkGfdoAENuPO7JZIRxGC
NzTh9ZEWYaKfCWJ6vAs1UOhGZuNFo83rgbhpOMfhSi51AB81yWDcxq24Wq2quZMs
AL9bBxpInZQdrtUG8Sp0rrVDUgODN3bvjcvHHjYsvGQYKbf1LkPEJvDZC8/oJeHG
8Ud1yf5ZiGs0IL+azww9V1+a23SgY7Ccx/Tdkpovb7L8yyUY3giH/O5gIvsRUu4G
m6tj97pEoTjT3JrbGxKrTNCikIHkfMEVel5Mi38n/Nx6b3A3zavXXRh+HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwBKiQFvl8ZlsVW+BsRv6XGZWPfMB8GA1UdIwQY
MBaAFAY5xIRriMLXDjHOTA/MtM9N6lQ2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmpuRWhHdUl3dGNPTWM1TUQ4eTB6MDNxVkRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9jZjAyNTQtMmI4OC00YjNmLThkMzAt
MTk0OWQ2YjgwNDkxLzEvQmpuRWhHdUl3dGNPTWM1TUQ4eTB6MDNxVkRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9jZjAyNTQtMmI4OC00YjNmLThkMzAtMTk0OWQ2YjgwNDkx
LzEvQmpuRWhHdUl3dGNPTWM1TUQ4eTB6MDNxVkRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfdcXQdQb
Alp90czxey7QF1LwalpilwEyn+7EUTXTnJ3K+g1vBFZnWR4cvVHcfqaUHqWUO6kq
YlAfs7so4CpD0fPut9gFeA4A+5x+MniIXWOhAT5jgIkCVmm9AfAgsROaucSO35Hs
rMnBmd8ZMmyOCkhT0QLF+6KqPQ00TqsxIbgy0yK1EE4zuWnd0m0y2xuWZxChAvnd
Tn5dpdym5bVUmxhtPgoXgPlAI/DY38u6zakRbPVMSs4sNt+0XxUt3r417s1lfWpJ
oFiMO9NCwwE0Wkg+n4bRcNI+COWu4NeJ0R3XHZtAxp1h8mDdfymWot4U5kPK5xq3
qt7Bkw5VOwRISQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:51 2025 by rpki-client on console-fra.rpki-client.org