Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
File: BqTXfcLhnm-WAydMCSOmGordtJY.mft (raw, json)
Hash identifier: N5vj1pBl2yQsrZy8i4EyNMWHKkKLNWOA5tzFR4FatqI=
Subject key identifier: 05:39:53:29:36:9F:49:0B:00:32:A6:73:EA:E4:F5:2D:53:4E:EA:0B
Authority key identifier: 06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96
Certificate issuer: /CN=06a4d77dc2e19e6f9603274c0923a61a8addb496
Certificate serial: 0194BAF243E6200A34D37C8A05AEBF2A6C65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
Manifest number: 08B7
Signing time: Fri 31 Jan 2025 06:00:26 +0000
Manifest this update: Fri 31 Jan 2025 06:00:26 +0000
Manifest next update: Sat 01 Feb 2025 06:00:26 +0000
Files and hashes: 1: BqTXfcLhnm-WAydMCSOmGordtJY.crl (hash: Qx5lgqQR+ANtCgO4alKYcBiey7Ogo7Ao7oSJCgEWTK8=)
2: cZHYHiGd6PIrfuySObNNa9cF_qc.roa (hash: uKrwrqOr4nsQ7JI8tFB0iH3uyz/0QpuKeozXQRhmsYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:43:e6:20:0a:34:d3:7c:8a:05:ae:bf:2a:6c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a4d77dc2e19e6f9603274c0923a61a8addb496
Validity
Not Before: Jan 31 06:00:26 2025 GMT
Not After : Feb 1 06:00:26 2025 GMT
Subject: CN=05395329369f490b0032a673eae4f52d534eea0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:af:c6:36:3b:4b:95:ea:d8:6b:f2:73:0a:d1:
e7:b3:c0:06:b3:f9:aa:27:58:84:72:66:c2:36:18:
f7:b2:ce:8d:de:26:f9:6c:56:ca:b7:b2:3f:1b:20:
b3:04:e6:92:70:bc:31:d1:d8:a9:97:aa:51:42:d6:
c7:47:dc:ea:b8:98:75:d0:19:1d:2e:b3:d2:b0:bb:
c5:bc:a0:c7:31:89:ce:55:bf:b3:f2:b9:6a:11:35:
20:5a:33:32:f3:cc:06:61:3f:61:ae:a1:af:e1:e0:
12:e4:75:c3:16:e2:cf:e7:d2:89:45:71:b4:f7:71:
e6:6b:8f:d5:52:03:89:5c:ab:43:91:58:c3:1e:b3:
c7:9a:d1:f4:bd:44:86:68:b7:86:34:2e:0a:71:aa:
f2:30:36:2f:ea:a8:58:20:0f:77:51:3f:65:f9:34:
dd:a9:3f:20:2a:04:da:1b:82:64:ce:d3:41:3d:70:
e6:07:0f:bd:ec:f0:64:29:21:e5:64:96:6c:60:d5:
71:b4:30:5b:b8:8b:48:d5:3f:23:99:c9:c8:12:fb:
5e:40:0a:bd:e2:a8:09:92:49:44:66:e3:8c:f3:6b:
f3:c4:66:7d:e3:7c:2c:49:a3:a2:bc:46:5a:49:5a:
57:b5:87:00:51:e6:8b:e7:9a:4d:88:01:00:5a:34:
67:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:39:53:29:36:9F:49:0B:00:32:A6:73:EA:E4:F5:2D:53:4E:EA:0B
X509v3 Authority Key Identifier:
keyid:06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a6:b8:eb:d9:7a:e6:65:b5:f8:20:3c:a0:bf:07:e1:59:d1:
cd:8f:4e:ba:1e:d7:90:ce:5d:97:56:28:f1:af:c4:1e:3d:2a:
dd:6f:ca:0c:11:bf:47:0d:5a:54:83:58:ad:33:d5:28:43:94:
e5:93:d7:77:60:12:b8:41:e9:75:8c:ee:27:ec:0c:32:46:30:
b5:b8:1a:09:d1:1e:86:6a:8d:3b:7a:7a:f7:68:67:5d:64:a1:
6e:0a:74:1a:df:f4:1b:54:7d:bc:ae:1a:77:d8:a5:63:95:da:
8f:c0:57:c0:76:23:d7:27:43:63:b9:88:4b:74:4c:cf:a3:2d:
24:03:de:61:fe:ee:62:a7:ac:fa:2c:33:e3:5d:17:71:f9:e2:
98:ff:c5:6e:45:bf:56:1e:ce:97:53:85:0c:2f:2b:5a:2c:f4:
4f:4f:22:33:ef:53:27:90:f8:0b:0a:c7:8d:37:bd:11:cc:7f:
69:37:e9:cf:51:cb:d5:82:0b:7d:27:e4:d7:1b:da:ef:e7:7b:
c9:f3:f1:fd:eb:d2:42:0d:9e:fa:56:d9:5a:c8:cf:80:3f:cc:
18:98:10:ea:47:bd:c7:9f:96:94:4e:3b:db:c1:af:1a:b4:45:
67:a6:90:ba:df:14:96:66:94:1f:9f:23:8b:2d:a9:47:52:a6:
a0:63:7f:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS68kPmIAo003yKBa6/KmxlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2YTRkNzdkYzJlMTllNmY5NjAzMjc0YzA5MjNhNjFhOGFk
ZGI0OTYwHhcNMjUwMTMxMDYwMDI2WhcNMjUwMjAxMDYwMDI2WjAzMTEwLwYDVQQD
EygwNTM5NTMyOTM2OWY0OTBiMDAzMmE2NzNlYWU0ZjUyZDUzNGVlYTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwK/GNjtLlerYa/JzCtHns8AGs/mq
J1iEcmbCNhj3ss6N3ib5bFbKt7I/GyCzBOaScLwx0dipl6pRQtbHR9zquJh10Bkd
LrPSsLvFvKDHMYnOVb+z8rlqETUgWjMy88wGYT9hrqGv4eAS5HXDFuLP59KJRXG0
93Hma4/VUgOJXKtDkVjDHrPHmtH0vUSGaLeGNC4KcaryMDYv6qhYIA93UT9l+TTd
qT8gKgTaG4JkztNBPXDmBw+97PBkKSHlZJZsYNVxtDBbuItI1T8jmcnIEvteQAq9
4qgJkklEZuOM82vzxGZ943wsSaOivEZaSVpXtYcAUeaL55pNiAEAWjRnWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAU5Uyk2n0kLADKmc+rk9S1TTuoLMB8GA1UdIwQY
MBaAFAak133C4Z5vlgMnTAkjphqK3bSWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnFUWGZjTGhubS1XQXlkTUNTT21Hb3JkdEpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9kM2I1NDItNmYyMS00ZGM4LTllNmYt
NDQ5MmQ5ZjJmNDM4LzEvQnFUWGZjTGhubS1XQXlkTUNTT21Hb3JkdEpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9kM2I1NDItNmYyMS00ZGM4LTllNmYtNDQ5MmQ5ZjJmNDM4
LzEvQnFUWGZjTGhubS1XQXlkTUNTT21Hb3JkdEpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHqa469l6
5mW1+CA8oL8H4VnRzY9Ouh7XkM5dl1Yo8a/EHj0q3W/KDBG/Rw1aVINYrTPVKEOU
5ZPXd2ASuEHpdYzuJ+wMMkYwtbgaCdEehmqNO3p692hnXWShbgp0Gt/0G1R9vK4a
d9ilY5Xaj8BXwHYj1ydDY7mIS3RMz6MtJAPeYf7uYqes+iwz410XcfnimP/FbkW/
Vh7Ol1OFDC8rWiz0T08iM+9TJ5D4CwrHjTe9Ecx/aTfpz1HL1YILfSfk1xva7+d7
yfPx/evSQg2e+lbZWsjPgD/MGJgQ6ke9x5+WlE4728GvGrRFZ6aQut8UlmaUH58j
iy2pR1KmoGN/qw==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:43:48 2025 by rpki-client on console-fra.rpki-client.org