Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
File: BsdGzX1N-VptA8qVVKdUdg1eTgY.mft (raw, json)
Hash identifier: 9EYbb8tlS9Z3oPwMyh1jFVJqTGwvzpE81dcLYFlvBgE=
Subject key identifier: 6B:0E:1A:6D:0F:FF:65:99:84:53:60:EC:E3:6F:30:A7:4A:01:61:97
Authority key identifier: 06:C7:46:CD:7D:4D:F9:5A:6D:03:CA:95:54:A7:54:76:0D:5E:4E:06
Certificate issuer: /CN=06c746cd7d4df95a6d03ca9554a754760d5e4e06
Certificate serial: 0196C615B5972A370B31AF71D8234FA5D9C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
Manifest number: 05AF
Signing time: Mon 12 May 2025 20:00:33 +0000
Manifest this update: Mon 12 May 2025 20:00:33 +0000
Manifest next update: Tue 13 May 2025 20:00:33 +0000
Files and hashes: 1: BsdGzX1N-VptA8qVVKdUdg1eTgY.crl (hash: beMxfla5i95vtju3zqv16YbzrdwBs3MJ7fERHhGk6PI=)
2: X40tLgIMCQZAYRAwmZdn2JjY2Sg.roa (hash: eDaX3dI5fxxRGSOkAJcdOwrelUSaDgM3W7s+OAzNuqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:15:b5:97:2a:37:0b:31:af:71:d8:23:4f:a5:d9:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c746cd7d4df95a6d03ca9554a754760d5e4e06
Validity
Not Before: May 12 20:00:33 2025 GMT
Not After : May 13 20:00:33 2025 GMT
Subject: CN=6b0e1a6d0fff6599845360ece36f30a74a016197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ce:cc:44:0e:58:cc:d0:22:5b:f3:a3:ab:8e:
c3:9c:10:67:91:15:74:9c:ba:38:f0:d1:10:20:8c:
f4:0a:fc:4e:3e:4b:f5:d3:dc:69:5b:3b:58:88:f2:
da:9d:7d:8a:e8:dc:8a:45:4f:9d:e2:f1:75:f9:8b:
f8:2f:81:0d:0d:f6:c1:1a:20:c9:95:37:e6:f4:38:
a8:04:81:8b:8e:0c:f8:88:11:5c:49:a9:e0:4e:4f:
cb:9a:41:26:03:2a:fb:e9:58:9b:a3:75:a0:7b:c5:
2e:06:51:e3:f9:f8:31:ab:aa:2e:43:b3:35:b3:db:
7e:bb:3b:05:a2:0c:a5:e6:1c:ab:d2:9d:98:e0:7d:
e6:26:4f:9b:6f:d1:9f:1c:9d:72:6e:8a:1d:f8:a3:
d7:69:c7:5a:ad:81:45:57:f5:fc:dd:78:f4:ca:49:
e8:fa:b1:b5:e6:ea:73:c0:c5:7c:65:af:9d:ae:9c:
32:90:ff:73:db:43:af:2e:4c:1f:d7:a7:9f:80:9f:
83:6b:1e:14:6e:00:fe:10:43:19:db:10:12:0a:0a:
8e:22:1b:e3:5b:d9:e0:43:56:72:44:5c:0a:a0:35:
4a:d0:3c:16:d0:87:9d:95:d6:c0:b1:3a:eb:37:fb:
8f:14:51:85:21:b2:b0:14:43:0c:c6:0b:14:d0:1d:
6d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0E:1A:6D:0F:FF:65:99:84:53:60:EC:E3:6F:30:A7:4A:01:61:97
X509v3 Authority Key Identifier:
keyid:06:C7:46:CD:7D:4D:F9:5A:6D:03:CA:95:54:A7:54:76:0D:5E:4E:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:85:05:c1:ee:51:22:39:14:c4:6b:2c:d3:26:78:18:39:52:
2f:6d:3a:a8:cc:de:66:37:c1:28:4c:d7:d6:61:79:e7:54:14:
8f:a8:d2:17:94:97:99:4b:53:1e:98:05:c7:ee:c9:82:6c:15:
30:69:62:e1:70:f2:de:94:6b:23:16:49:90:39:c5:60:55:ec:
50:05:75:50:64:bc:d7:1a:fa:0b:1a:56:a8:f7:0c:ad:bf:ab:
50:d7:eb:b3:7f:02:24:52:d5:63:5c:ba:f6:a6:4d:95:55:34:
1d:96:cc:01:33:95:46:b4:8e:91:c4:ff:62:43:dd:e9:47:65:
43:ba:f5:1b:bf:2d:ba:05:b8:41:8e:4e:aa:e3:e3:42:be:82:
b6:f9:04:1a:12:c5:67:8a:d3:5d:f4:c7:33:0e:d0:f3:84:2f:
28:5e:34:ab:14:20:10:ed:d6:82:eb:d5:a7:f5:c7:8b:55:5b:
b7:59:21:58:14:5e:cf:1f:f3:12:55:ba:74:29:12:f6:e2:06:
dd:0a:4d:67:1b:a6:7c:b5:78:d3:86:be:a2:80:20:18:4f:60:
d4:12:d5:58:fc:94:8b:3e:9d:d2:ec:6c:91:5b:fa:4b:eb:32:
be:6b:98:81:ec:45:2c:7c:6c:1e:0c:80:c9:f0:e3:f4:ff:5b:
ee:cb:14:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbGFbWXKjcLMa9x2CNPpdnCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2Yzc0NmNkN2Q0ZGY5NWE2ZDAzY2E5NTU0YTc1NDc2MGQ1
ZTRlMDYwHhcNMjUwNTEyMjAwMDMzWhcNMjUwNTEzMjAwMDMzWjAzMTEwLwYDVQQD
Eyg2YjBlMWE2ZDBmZmY2NTk5ODQ1MzYwZWNlMzZmMzBhNzRhMDE2MTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0c7MRA5YzNAiW/Ojq47DnBBnkRV0
nLo48NEQIIz0CvxOPkv109xpWztYiPLanX2K6NyKRU+d4vF1+Yv4L4ENDfbBGiDJ
lTfm9DioBIGLjgz4iBFcSangTk/LmkEmAyr76Vibo3Wge8UuBlHj+fgxq6ouQ7M1
s9t+uzsFogyl5hyr0p2Y4H3mJk+bb9GfHJ1ybood+KPXacdarYFFV/X83Xj0ykno
+rG15upzwMV8Za+drpwykP9z20OvLkwf16efgJ+Dax4UbgD+EEMZ2xASCgqOIhvj
W9ngQ1ZyRFwKoDVK0DwW0IedldbAsTrrN/uPFFGFIbKwFEMMxgsU0B1t+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsOGm0P/2WZhFNg7ONvMKdKAWGXMB8GA1UdIwQY
MBaAFAbHRs19TflabQPKlVSnVHYNXk4GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnNkR3pYMU4tVnB0QThxVlZLZFVkZzFlVGdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi85NTJjZDctMzI5Ny00ZWFmLTg1NGYt
YjBhZmQ0NWRjZDc4LzEvQnNkR3pYMU4tVnB0QThxVlZLZFVkZzFlVGdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi85NTJjZDctMzI5Ny00ZWFmLTg1NGYtYjBhZmQ0NWRjZDc4
LzEvQnNkR3pYMU4tVnB0QThxVlZLZFVkZzFlVGdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARoUFwe5R
IjkUxGss0yZ4GDlSL206qMzeZjfBKEzX1mF551QUj6jSF5SXmUtTHpgFx+7JgmwV
MGli4XDy3pRrIxZJkDnFYFXsUAV1UGS81xr6CxpWqPcMrb+rUNfrs38CJFLVY1y6
9qZNlVU0HZbMATOVRrSOkcT/YkPd6UdlQ7r1G78tugW4QY5OquPjQr6CtvkEGhLF
Z4rTXfTHMw7Q84QvKF40qxQgEO3WguvVp/XHi1Vbt1khWBRezx/zElW6dCkS9uIG
3QpNZxumfLV404a+ooAgGE9g1BLVWPyUiz6d0uxskVv6S+syvmuYgexFLHxsHgyA
yfDj9P9b7ssUsg==
-----END CERTIFICATE-----
Generated at Tue May 13 02:37:06 2025 by rpki-client