Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft
File: bgC7pk9Ra41jNaAc8wS4It7hrtA.mft (raw, json)
Hash identifier: UyDXIgyFTTC4KY9Je4LhTughIX+WbVERXgXOZ9a30vM=
Subject key identifier: 33:0A:BE:E5:53:E7:15:02:E8:2E:9C:95:AC:36:42:33:60:2A:AE:11
Authority key identifier: 6E:00:BB:A6:4F:51:6B:8D:63:35:A0:1C:F3:04:B8:22:DE:E1:AE:D0
Certificate issuer: /CN=6e00bba64f516b8d6335a01cf304b822dee1aed0
Certificate serial: 0196B89171AD3FDB6D07B3D4E8CC7F31947A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bgC7pk9Ra41jNaAc8wS4It7hrtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft
Manifest number: 152F
Signing time: Sat 10 May 2025 05:01:01 +0000
Manifest this update: Sat 10 May 2025 05:01:01 +0000
Manifest next update: Sun 11 May 2025 05:01:01 +0000
Files and hashes: 1: bgC7pk9Ra41jNaAc8wS4It7hrtA.crl (hash: AY7sKFuhL/Bt+2bO4I4bzsLTaf4D/uLM/E7qLtpxBwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bgC7pk9Ra41jNaAc8wS4It7hrtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:91:71:ad:3f:db:6d:07:b3:d4:e8:cc:7f:31:94:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e00bba64f516b8d6335a01cf304b822dee1aed0
Validity
Not Before: May 10 05:01:01 2025 GMT
Not After : May 11 05:01:01 2025 GMT
Subject: CN=330abee553e71502e82e9c95ac364233602aae11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:58:c4:fb:11:cb:b0:f2:ed:8e:8e:fa:a1:5b:
11:4d:14:94:90:a7:be:91:db:77:34:73:f2:e4:4f:
0f:6e:45:c5:97:5e:7e:1a:f5:c9:cd:30:a1:82:2d:
01:af:8e:8b:6f:b4:16:bd:94:0e:e6:83:40:5f:fc:
ba:11:7f:9c:0a:bd:7d:07:da:d5:29:10:1a:12:3c:
ff:83:df:52:7a:4e:b7:f0:4a:c8:77:63:4f:94:a6:
6a:6d:d0:5f:dd:25:92:83:69:8c:18:58:32:36:78:
a7:0d:93:e9:e5:bc:01:85:36:a1:8d:e3:ba:41:55:
41:3a:80:8d:38:d7:d7:01:ac:34:5b:fa:84:3f:f2:
6b:aa:95:f3:fa:bd:49:6f:25:e5:b7:20:f6:36:68:
ba:35:85:4a:4c:9c:c5:ef:2b:0e:9b:4e:a8:be:fd:
f9:07:d4:31:07:2f:d1:14:b5:b7:ee:1f:df:b9:04:
71:e8:24:fb:e5:55:6d:bc:46:32:c1:56:94:89:ff:
a6:57:fa:15:28:58:ec:2e:27:87:ba:d8:53:f7:b6:
ea:8e:aa:81:e3:5b:a4:d7:f3:b7:a7:46:6b:64:1d:
c0:fb:2f:db:9c:32:49:b0:27:7d:68:c5:ff:bf:8b:
5a:3f:ea:4d:86:49:4e:0f:f2:0e:73:0c:d6:71:03:
13:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:0A:BE:E5:53:E7:15:02:E8:2E:9C:95:AC:36:42:33:60:2A:AE:11
X509v3 Authority Key Identifier:
keyid:6E:00:BB:A6:4F:51:6B:8D:63:35:A0:1C:F3:04:B8:22:DE:E1:AE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bgC7pk9Ra41jNaAc8wS4It7hrtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:84:8a:fa:05:77:f7:6d:92:f2:9a:b1:86:f8:55:61:8f:1e:
8d:87:88:f3:44:82:2a:3e:8d:df:6e:0e:5a:fa:0e:8d:4d:b2:
7f:05:a3:5c:12:8a:f7:55:52:d7:76:fc:72:1c:49:65:5e:bf:
50:3e:d5:05:2b:59:f1:dd:92:83:e9:06:1e:f3:5a:ee:3d:30:
6e:69:3a:08:bd:c6:b1:ec:08:24:c8:4a:2d:16:c0:c2:66:0d:
bb:f6:cf:50:c5:08:c8:e2:cc:90:26:43:94:39:78:3b:ac:03:
54:56:4c:12:f7:d3:a8:41:fa:7d:cb:c0:a0:52:32:eb:38:76:
ab:22:35:58:68:63:20:f8:85:24:c9:9f:3e:f8:1a:98:9c:3a:
6d:aa:75:ee:02:fc:b9:8c:65:29:f3:7d:02:ad:0b:4e:22:7f:
17:fd:63:cd:7c:8a:68:b9:7b:1d:87:0c:dc:65:a0:e3:dc:ba:
68:83:cd:22:e9:37:e6:6d:6d:94:55:81:1e:22:9c:01:86:0a:
47:4d:ba:de:55:1e:99:fb:3e:31:ef:5b:c7:3a:d1:e2:2b:18:
c4:9e:8c:b2:07:f6:28:44:10:58:f9:62:fb:48:d7:7c:fd:b9:
c1:c6:cd:ea:05:f2:79:46:29:aa:45:42:67:2c:ca:da:28:ea:
11:0b:13:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4kXGtP9ttB7PU6Mx/MZR6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlMDBiYmE2NGY1MTZiOGQ2MzM1YTAxY2YzMDRiODIyZGVl
MWFlZDAwHhcNMjUwNTEwMDUwMTAxWhcNMjUwNTExMDUwMTAxWjAzMTEwLwYDVQQD
EygzMzBhYmVlNTUzZTcxNTAyZTgyZTljOTVhYzM2NDIzMzYwMmFhZTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8FjE+xHLsPLtjo76oVsRTRSUkKe+
kdt3NHPy5E8PbkXFl15+GvXJzTChgi0Br46Lb7QWvZQO5oNAX/y6EX+cCr19B9rV
KRAaEjz/g99Sek638ErId2NPlKZqbdBf3SWSg2mMGFgyNninDZPp5bwBhTahjeO6
QVVBOoCNONfXAaw0W/qEP/JrqpXz+r1JbyXltyD2Nmi6NYVKTJzF7ysOm06ovv35
B9QxBy/RFLW37h/fuQRx6CT75VVtvEYywVaUif+mV/oVKFjsLieHuthT97bqjqqB
41uk1/O3p0ZrZB3A+y/bnDJJsCd9aMX/v4taP+pNhklOD/IOcwzWcQMTYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMKvuVT5xUC6C6claw2QjNgKq4RMB8GA1UdIwQY
MBaAFG4Au6ZPUWuNYzWgHPMEuCLe4a7QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmdDN3BrOVJhNDFqTmFBYzh3UzRJdDdocnRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9hZTVlNmMtYzcwZi00MGYyLTg5MGQt
NTc1Y2Y1ZDMzNWU0LzEvYmdDN3BrOVJhNDFqTmFBYzh3UzRJdDdocnRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9hZTVlNmMtYzcwZi00MGYyLTg5MGQtNTc1Y2Y1ZDMzNWU0
LzEvYmdDN3BrOVJhNDFqTmFBYzh3UzRJdDdocnRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1ISK+gV3
922S8pqxhvhVYY8ejYeI80SCKj6N324OWvoOjU2yfwWjXBKK91VS13b8chxJZV6/
UD7VBStZ8d2Sg+kGHvNa7j0wbmk6CL3GsewIJMhKLRbAwmYNu/bPUMUIyOLMkCZD
lDl4O6wDVFZMEvfTqEH6fcvAoFIy6zh2qyI1WGhjIPiFJMmfPvgamJw6bap17gL8
uYxlKfN9Aq0LTiJ/F/1jzXyKaLl7HYcM3GWg49y6aIPNIuk35m1tlFWBHiKcAYYK
R0263lUemfs+Me9bxzrR4isYxJ6Msgf2KEQQWPli+0jXfP25wcbN6gXyeUYpqkVC
ZyzK2ijqEQsTSQ==
-----END CERTIFICATE-----
Generated at Sat May 10 06:43:46 2025 by rpki-client