Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
File: B0rSOkz6MbbVXryhbF0UxAS6bK0.mft (raw, json)
Hash identifier: eZED1KiJ9TUd9exM25jUWdxX2t4EhWdTvG3lJggG/TE=
Subject key identifier: 19:9A:7B:61:1E:74:4C:B3:B4:E9:E1:F4:A8:12:0A:F9:30:43:33:4D
Authority key identifier: 07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD
Certificate issuer: /CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
Certificate serial: 0196A164244812F0246975F16673BF9A9046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
Manifest number: 0FBA
Signing time: Mon 05 May 2025 17:00:16 +0000
Manifest this update: Mon 05 May 2025 17:00:16 +0000
Manifest next update: Tue 06 May 2025 17:00:16 +0000
Files and hashes: 1: B0rSOkz6MbbVXryhbF0UxAS6bK0.crl (hash: kueJLWGBVutCW+wR7+hGAYY+z0FDaJbUETTk78K+QqA=)
2: by6raZCZNNtEi9tbGKEvnYOsqYE.roa (hash: aOGc7df3nlEJOygOWFL3hI418E+YoyI9nyziWKFPXfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 17:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:64:24:48:12:f0:24:69:75:f1:66:73:bf:9a:90:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
Validity
Not Before: May 5 17:00:16 2025 GMT
Not After : May 6 17:00:16 2025 GMT
Subject: CN=199a7b611e744cb3b4e9e1f4a8120af93043334d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b5:a8:6f:6b:a9:96:8f:78:e2:d3:41:1b:15:
d9:8b:3e:8d:e4:b3:fe:7e:ba:b0:51:17:aa:e7:3a:
bf:5d:fe:66:2c:78:89:31:7b:4a:15:26:d6:a8:f8:
88:51:4a:a3:b4:04:eb:12:76:f9:16:bd:f8:1b:c4:
d0:d0:d0:77:a9:65:0c:3c:75:57:59:9a:cd:19:89:
74:f7:43:e3:90:bb:48:38:57:35:3b:80:7e:9c:14:
c6:5d:39:64:85:6f:92:d3:7d:dc:34:71:3d:3c:07:
65:bc:6e:fc:d3:9f:d7:5d:ca:bb:3c:aa:2b:7e:b1:
d0:00:f9:bc:9e:10:9d:3c:95:5b:3a:2e:cd:67:2d:
5c:af:20:02:fa:e8:b3:6d:ca:b1:9a:fd:6b:bc:2e:
02:8f:c2:fb:4d:5a:c8:52:2c:ba:80:f2:dc:82:d2:
6d:95:ac:3a:b2:f3:2d:e8:88:16:62:1e:74:20:a7:
ab:fc:3d:70:66:6d:d0:e8:b7:fa:49:16:2a:78:6a:
68:15:c5:c4:52:1d:0e:48:77:47:75:53:75:cb:ae:
c1:af:e0:70:75:90:00:2c:b1:3f:aa:d8:34:01:c2:
02:79:f9:8f:8d:7a:ff:32:5f:47:f5:f2:37:81:de:
1b:5d:77:9c:3d:27:2c:3e:8d:3a:fe:02:75:95:e9:
bc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9A:7B:61:1E:74:4C:B3:B4:E9:E1:F4:A8:12:0A:F9:30:43:33:4D
X509v3 Authority Key Identifier:
keyid:07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:02:0c:9b:9d:ae:b5:c3:d1:3a:37:ed:69:09:02:56:ad:c0:
ca:a5:26:03:1b:5e:88:e8:ff:bc:b5:d7:0d:75:4c:c5:f3:5c:
ad:6e:f4:ff:88:3b:43:39:e7:ad:a5:23:8d:e9:2f:a0:a1:77:
9f:84:0f:f6:c2:d4:0b:fa:d1:d2:3d:bb:c1:11:21:7b:ab:ee:
40:6a:7c:9c:d0:68:a2:46:0b:ee:32:e9:09:d6:a5:aa:db:bb:
5e:ed:b0:c9:41:2e:e9:16:fa:37:23:8e:ec:d6:23:cb:23:3a:
5c:f2:73:91:77:a8:d0:53:88:6f:64:b9:4b:15:03:47:ca:0a:
5b:6c:12:31:c0:e4:08:80:9a:4c:98:51:a2:98:5e:eb:98:56:
c3:1b:61:dc:72:2e:14:d1:0f:fd:41:d5:09:96:3d:d8:f0:a9:
a9:f0:b0:63:8c:4d:d5:c6:6a:a3:af:e3:6b:d0:ef:e9:20:c7:
9d:7a:6d:58:3b:ed:bd:4d:01:df:2f:a4:64:3c:fe:75:38:2b:
9a:f2:09:58:f3:49:6e:91:8e:84:2d:50:76:df:26:7c:d2:aa:
91:f9:93:41:99:fe:a8:fc:ad:83:7e:d1:1a:a7:02:64:57:5c:
06:f4:b8:9a:d6:4c:8b:49:fb:04:76:2a:cd:b6:1c:d0:0f:72:
43:eb:11:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZahZCRIEvAkaXXxZnO/mpBGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NGFkMjNhNGNmYTMxYjZkNTVlYmNhMTZjNWQxNGM0MDRi
YTZjYWQwHhcNMjUwNTA1MTcwMDE2WhcNMjUwNTA2MTcwMDE2WjAzMTEwLwYDVQQD
EygxOTlhN2I2MTFlNzQ0Y2IzYjRlOWUxZjRhODEyMGFmOTMwNDMzMzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurWob2uplo944tNBGxXZiz6N5LP+
frqwUReq5zq/Xf5mLHiJMXtKFSbWqPiIUUqjtATrEnb5Fr34G8TQ0NB3qWUMPHVX
WZrNGYl090PjkLtIOFc1O4B+nBTGXTlkhW+S033cNHE9PAdlvG7805/XXcq7PKor
frHQAPm8nhCdPJVbOi7NZy1cryAC+uizbcqxmv1rvC4Cj8L7TVrIUiy6gPLcgtJt
law6svMt6IgWYh50IKer/D1wZm3Q6Lf6SRYqeGpoFcXEUh0OSHdHdVN1y67Br+Bw
dZAALLE/qtg0AcICefmPjXr/Ml9H9fI3gd4bXXecPScsPo06/gJ1lem8LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBmae2EedEyztOnh9KgSCvkwQzNNMB8GA1UdIwQY
MBaAFAdK0jpM+jG21V68oWxdFMQEumytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjByU09rejZNYmJWWHJ5aGJGMFV4QVM2YkswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9iZDNhNDYtNzI3Yi00NzZjLWE3ODkt
YzhjOTkxY2Q4OWQ1LzEvQjByU09rejZNYmJWWHJ5aGJGMFV4QVM2YkswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9iZDNhNDYtNzI3Yi00NzZjLWE3ODktYzhjOTkxY2Q4OWQ1
LzEvQjByU09rejZNYmJWWHJ5aGJGMFV4QVM2YkswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVAIMm52u
tcPROjftaQkCVq3AyqUmAxteiOj/vLXXDXVMxfNcrW70/4g7QznnraUjjekvoKF3
n4QP9sLUC/rR0j27wREhe6vuQGp8nNBookYL7jLpCdalqtu7Xu2wyUEu6Rb6NyOO
7NYjyyM6XPJzkXeo0FOIb2S5SxUDR8oKW2wSMcDkCICaTJhRophe65hWwxth3HIu
FNEP/UHVCZY92PCpqfCwY4xN1cZqo6/ja9Dv6SDHnXptWDvtvU0B3y+kZDz+dTgr
mvIJWPNJbpGOhC1Qdt8mfNKqkfmTQZn+qPytg37RGqcCZFdcBvS4mtZMi0n7BHYq
zbYc0A9yQ+sR5g==
-----END CERTIFICATE-----
Generated at Tue May 6 02:34:36 2025 by rpki-client