Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft
File: bkBn13v-qZ3yXOXgipIT0RKAFM8.mft (raw, json)
Hash identifier: rm9aaNCy8kwyJqcQmrV4yoiwy9cPB04N1wmhAndxHNs=
Subject key identifier: B1:4C:68:A8:86:49:23:EB:6D:C7:CF:CB:46:E6:89:7D:D5:86:59:46
Authority key identifier: 6E:40:67:D7:7B:FE:A9:9D:F2:5C:E5:E0:8A:92:13:D1:12:80:14:CF
Certificate issuer: /CN=6e4067d77bfea99df25ce5e08a9213d1128014cf
Certificate serial: 0196B8FEE86A725AE437D3D93D405C2DFCF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft
Manifest number: 1538
Signing time: Sat 10 May 2025 07:00:35 +0000
Manifest this update: Sat 10 May 2025 07:00:35 +0000
Manifest next update: Sun 11 May 2025 07:00:35 +0000
Files and hashes: 1: adNDLvUmYkNZRHIO-8EvQkOny3U.roa (hash: JFJ+lodVDeHLySNvitcsYBxq8cfuImJHPxEA0H+DjjY=)
2: bkBn13v-qZ3yXOXgipIT0RKAFM8.crl (hash: Wb6hEMDhPN8LQep979qBSzGm4K75BKwukC1ALn66f5I=)
3: iktdBTw9X8o6AOOEkLAyuZNK_gg.roa (hash: 2nzjnmBtk5vklJiWyvmO30xEFTmYF5gvtQ11fyrTZUE=)
4: mQ9zePbKKPrER63rktmN5-Z8AoQ.roa (hash: qfFxiv4hVcYLNON7vIi9UIknKo4icjwq21EoSvpzScg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:fe:e8:6a:72:5a:e4:37:d3:d9:3d:40:5c:2d:fc:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e4067d77bfea99df25ce5e08a9213d1128014cf
Validity
Not Before: May 10 07:00:35 2025 GMT
Not After : May 11 07:00:35 2025 GMT
Subject: CN=b14c68a8864923eb6dc7cfcb46e6897dd5865946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:67:7b:26:28:b2:f8:18:c3:b6:96:4b:16:a3:
63:06:39:aa:7b:33:3d:46:d9:d3:1b:08:ce:49:eb:
08:0b:c1:d8:af:fb:11:9b:42:90:b3:06:b9:ac:0f:
b5:55:81:96:d1:51:0e:ac:29:35:a8:a4:b3:34:f6:
cf:84:37:b9:76:5e:cc:d9:5a:53:a6:5a:38:41:49:
c0:79:eb:8a:ac:08:31:d2:df:31:49:4c:72:a3:b6:
07:fe:02:6a:ad:0b:45:09:45:e4:2e:a1:26:c9:97:
74:39:66:72:58:dd:25:ca:04:32:c3:0e:34:1a:76:
e0:07:b5:dc:eb:66:1d:44:1b:04:5a:ec:3f:ac:1a:
25:b6:43:dc:4e:fa:8b:09:88:ea:e9:78:cb:f1:13:
80:b6:19:4f:f4:d0:ad:e8:63:3c:0a:ce:1e:be:37:
01:ce:ae:a7:15:a4:4c:bc:23:f4:75:79:14:c3:45:
58:cd:3e:ea:a4:4e:7c:d1:d3:e8:6b:02:b3:da:9f:
aa:a7:16:31:48:02:db:24:88:d8:f6:d0:d4:32:1e:
7f:4e:66:c3:67:89:49:7a:8d:d4:4b:27:58:af:58:
4d:06:4e:83:df:4c:2d:42:f0:b3:48:81:f4:14:b4:
aa:55:78:6c:f3:b8:4e:53:40:f7:80:d3:21:f3:66:
9f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:4C:68:A8:86:49:23:EB:6D:C7:CF:CB:46:E6:89:7D:D5:86:59:46
X509v3 Authority Key Identifier:
keyid:6E:40:67:D7:7B:FE:A9:9D:F2:5C:E5:E0:8A:92:13:D1:12:80:14:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:02:f3:39:85:42:cb:1d:71:fb:90:3e:88:62:bd:3b:df:58:
b8:9e:51:c0:bb:e0:e3:f1:60:bf:55:a5:78:d7:ae:ca:fd:8c:
05:71:46:44:5f:81:e1:07:78:90:89:bd:19:8c:88:81:a4:22:
80:7c:7b:91:51:6b:72:aa:50:dc:ef:98:2e:7e:e7:42:2d:33:
57:05:e4:9d:49:23:df:04:e2:d2:8b:ab:da:48:57:7d:40:a6:
39:b5:83:d9:c7:b0:a1:50:79:25:c5:5c:ea:12:b8:87:db:29:
fa:0a:9d:c6:c2:48:46:fc:0c:2e:42:0b:46:a5:28:c1:2d:66:
49:ff:bf:37:75:91:88:5c:95:0d:25:21:40:6a:c8:7c:6e:45:
f1:20:36:49:48:27:37:c6:3c:16:d2:4b:5f:ff:a1:cf:ec:9e:
a4:92:9c:d1:a1:d9:70:bf:ab:18:16:3f:db:25:05:e9:a3:9d:
21:d9:4c:2f:b4:c3:e1:e0:b1:46:cf:fa:c6:47:d8:eb:8b:97:
d9:e1:b7:c6:fe:1b:04:72:0d:65:63:11:77:84:9d:e8:60:3d:
90:1c:b6:64:13:4d:bf:9a:fc:ff:14:59:09:17:ed:d8:bc:7e:
6f:31:79:7a:96:d7:60:59:f0:28:84:6f:ad:d6:97:84:9b:b0:
6b:57:38:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4/uhqclrkN9PZPUBcLfzzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNDA2N2Q3N2JmZWE5OWRmMjVjZTVlMDhhOTIxM2QxMTI4
MDE0Y2YwHhcNMjUwNTEwMDcwMDM1WhcNMjUwNTExMDcwMDM1WjAzMTEwLwYDVQQD
EyhiMTRjNjhhODg2NDkyM2ViNmRjN2NmY2I0NmU2ODk3ZGQ1ODY1OTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGd7Jiiy+BjDtpZLFqNjBjmqezM9
RtnTGwjOSesIC8HYr/sRm0KQswa5rA+1VYGW0VEOrCk1qKSzNPbPhDe5dl7M2VpT
plo4QUnAeeuKrAgx0t8xSUxyo7YH/gJqrQtFCUXkLqEmyZd0OWZyWN0lygQyww40
GnbgB7Xc62YdRBsEWuw/rBoltkPcTvqLCYjq6XjL8ROAthlP9NCt6GM8Cs4evjcB
zq6nFaRMvCP0dXkUw0VYzT7qpE580dPoawKz2p+qpxYxSALbJIjY9tDUMh5/TmbD
Z4lJeo3USydYr1hNBk6D30wtQvCzSIH0FLSqVXhs87hOU0D3gNMh82afIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFMaKiGSSPrbcfPy0bmiX3VhllGMB8GA1UdIwQY
MBaAFG5AZ9d7/qmd8lzl4IqSE9ESgBTPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmtCbjEzdi1xWjN5WE9YZ2lwSVQwUktBRk04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC81ODllY2EtM2YxOS00ZTIzLWEzZmIt
MzMwM2Y3MTYyMmY5LzEvYmtCbjEzdi1xWjN5WE9YZ2lwSVQwUktBRk04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC81ODllY2EtM2YxOS00ZTIzLWEzZmItMzMwM2Y3MTYyMmY5
LzEvYmtCbjEzdi1xWjN5WE9YZ2lwSVQwUktBRk04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIwLzOYVC
yx1x+5A+iGK9O99YuJ5RwLvg4/Fgv1WleNeuyv2MBXFGRF+B4Qd4kIm9GYyIgaQi
gHx7kVFrcqpQ3O+YLn7nQi0zVwXknUkj3wTi0our2khXfUCmObWD2cewoVB5JcVc
6hK4h9sp+gqdxsJIRvwMLkILRqUowS1mSf+/N3WRiFyVDSUhQGrIfG5F8SA2SUgn
N8Y8FtJLX/+hz+yepJKc0aHZcL+rGBY/2yUF6aOdIdlML7TD4eCxRs/6xkfY64uX
2eG3xv4bBHINZWMRd4Sd6GA9kBy2ZBNNv5r8/xRZCRft2Lx+bzF5epbXYFnwKIRv
rdaXhJuwa1c4XA==
-----END CERTIFICATE-----
Generated at Sat May 10 17:00:51 2025 by rpki-client