Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft
File: bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft (raw, json)
Hash identifier: N8MWri6KJLP0zz/ArQsHnerwuV1fvRF8T7AVmC/avwQ=
Subject key identifier: EE:DD:8D:99:42:7E:3F:5C:F3:CA:25:08:E3:12:75:77:54:58:AF:D9
Authority key identifier: 6E:60:88:3A:AE:49:1E:5F:B7:73:A9:26:40:19:FF:4F:88:8D:5C:A5
Certificate issuer: /CN=6e60883aae491e5fb773a9264019ff4f888d5ca5
Certificate serial: 0196AFFC3B96DD6946B0B790703E79A43D5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft
Manifest number: 0A47
Signing time: Thu 08 May 2025 13:01:05 +0000
Manifest this update: Thu 08 May 2025 13:01:05 +0000
Manifest next update: Fri 09 May 2025 13:01:05 +0000
Files and hashes: 1: 8F98rTSwPOpZS4Rzfg71Kw6oATI.roa (hash: QtxPboJkw4rOLdUx7QH5EP5ZvFcFd0VJLxIZUYnjoyU=)
2: bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl (hash: BKP59Q4YZirEO1dNh6zjMKE8PPqu5au3amMklmuVzC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:fc:3b:96:dd:69:46:b0:b7:90:70:3e:79:a4:3d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e60883aae491e5fb773a9264019ff4f888d5ca5
Validity
Not Before: May 8 13:01:05 2025 GMT
Not After : May 9 13:01:05 2025 GMT
Subject: CN=eedd8d99427e3f5cf3ca2508e31275775458afd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0f:6a:4e:54:bb:e3:a0:49:ff:57:db:55:7a:
78:2a:41:b4:c6:c7:6f:fd:50:53:7d:41:5c:19:fa:
86:5b:d2:47:87:a8:fb:b8:a2:e8:d3:1e:b4:b8:a3:
69:84:b1:49:7c:fd:7a:63:12:60:d6:47:90:98:af:
67:93:f8:c6:fb:62:e7:55:26:dc:2c:3f:fb:8b:82:
61:dc:f9:15:83:52:34:38:26:8b:03:35:d4:8d:c1:
54:37:31:f8:04:da:12:6b:2c:f3:bc:11:7d:36:51:
7e:e2:ad:f1:ea:ee:a5:36:02:9d:7e:41:cc:89:3b:
05:fd:b7:2e:cd:0d:75:9a:de:2e:51:5b:b3:c7:32:
ca:54:26:f7:fd:c4:01:19:69:4c:9d:be:c5:30:1d:
c9:6a:91:0f:a7:fd:8c:97:a3:27:fc:a8:11:a8:b6:
50:bc:14:91:5e:0e:89:5d:70:9d:a1:a0:03:39:bc:
86:5e:c7:f2:ee:d4:01:5a:da:0d:40:3d:40:d7:4f:
17:2d:35:60:ef:4a:5a:5b:e3:a4:88:d4:a4:3f:59:
0f:7d:ea:d1:61:33:77:ee:10:ba:7a:76:8f:1e:28:
b5:91:fb:4b:65:87:49:0e:5c:43:77:94:60:d5:4a:
70:9d:03:ce:96:2f:d7:e4:2e:ec:8f:81:b1:ce:df:
52:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DD:8D:99:42:7E:3F:5C:F3:CA:25:08:E3:12:75:77:54:58:AF:D9
X509v3 Authority Key Identifier:
keyid:6E:60:88:3A:AE:49:1E:5F:B7:73:A9:26:40:19:FF:4F:88:8D:5C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f5:15:56:2f:c4:8f:80:6c:fd:94:0d:13:64:ed:5a:32:e5:
b9:e9:21:48:33:7f:ba:f9:f1:46:59:8c:ea:83:d1:46:72:d4:
4b:34:b9:80:41:6c:a2:6a:90:5a:06:18:3e:5b:38:3c:f1:d5:
ea:0a:db:b7:6e:1a:fd:cb:da:57:68:e8:4d:ff:21:81:f0:89:
8f:af:b7:53:14:72:06:f1:13:72:b5:fb:72:99:22:f4:ee:ff:
ba:cc:62:25:5a:2c:1c:7d:d0:54:04:2d:13:e3:9b:69:25:98:
0f:bf:28:4c:e4:10:14:d6:e2:8e:49:81:5f:c9:5f:0a:c7:f9:
59:ab:1e:fa:e3:56:93:0e:af:a9:01:bb:7a:0f:24:92:b5:cb:
91:25:90:e5:62:4e:6a:de:57:df:1e:4c:b4:24:e4:e5:91:0e:
ba:c4:aa:96:be:a9:43:a6:6c:62:d8:91:d4:e7:99:ac:81:60:
1d:fa:dd:fb:2e:41:f2:56:c8:ed:6a:b0:85:84:62:3b:9e:08:
a7:5e:5a:39:3a:91:ec:0b:28:a1:1e:bc:f0:8c:c8:8d:ac:9e:
6d:a4:3a:f8:0a:a1:9d:51:d4:6e:ac:f5:eb:79:be:d9:ab:13:
bd:4d:1d:95:a3:70:9d:2c:68:64:a3:c3:b3:6e:c1:54:0c:fe:
ed:4e:bb:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZav/DuW3WlGsLeQcD55pD1bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNjA4ODNhYWU0OTFlNWZiNzczYTkyNjQwMTlmZjRmODg4
ZDVjYTUwHhcNMjUwNTA4MTMwMTA1WhcNMjUwNTA5MTMwMTA1WjAzMTEwLwYDVQQD
EyhlZWRkOGQ5OTQyN2UzZjVjZjNjYTI1MDhlMzEyNzU3NzU0NThhZmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg9qTlS746BJ/1fbVXp4KkG0xsdv
/VBTfUFcGfqGW9JHh6j7uKLo0x60uKNphLFJfP16YxJg1keQmK9nk/jG+2LnVSbc
LD/7i4Jh3PkVg1I0OCaLAzXUjcFUNzH4BNoSayzzvBF9NlF+4q3x6u6lNgKdfkHM
iTsF/bcuzQ11mt4uUVuzxzLKVCb3/cQBGWlMnb7FMB3JapEPp/2Ml6Mn/KgRqLZQ
vBSRXg6JXXCdoaADObyGXsfy7tQBWtoNQD1A108XLTVg70paW+OkiNSkP1kPferR
YTN37hC6enaPHii1kftLZYdJDlxDd5Rg1UpwnQPOli/X5C7sj4Gxzt9SgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO7djZlCfj9c88olCOMSdXdUWK/ZMB8GA1UdIwQY
MBaAFG5giDquSR5ft3OpJkAZ/0+IjVylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm1DSU9xNUpIbC0zYzZrbVFCbl9UNGlOWEtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9kOGUwOTYtNDMxMC00MmI5LWJkMjAt
YjU2MDJkM2RhOGE2LzEvYm1DSU9xNUpIbC0zYzZrbVFCbl9UNGlOWEtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9kOGUwOTYtNDMxMC00MmI5LWJkMjAtYjU2MDJkM2RhOGE2
LzEvYm1DSU9xNUpIbC0zYzZrbVFCbl9UNGlOWEtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQPUVVi/E
j4Bs/ZQNE2TtWjLluekhSDN/uvnxRlmM6oPRRnLUSzS5gEFsomqQWgYYPls4PPHV
6grbt24a/cvaV2joTf8hgfCJj6+3UxRyBvETcrX7cpki9O7/usxiJVosHH3QVAQt
E+ObaSWYD78oTOQQFNbijkmBX8lfCsf5Wase+uNWkw6vqQG7eg8kkrXLkSWQ5WJO
at5X3x5MtCTk5ZEOusSqlr6pQ6ZsYtiR1OeZrIFgHfrd+y5B8lbI7WqwhYRiO54I
p15aOTqR7AsooR688IzIjayebaQ6+AqhnVHUbqz163m+2asTvU0dlaNwnSxoZKPD
s27BVAz+7U670Q==
-----END CERTIFICATE-----
Generated at Thu May 8 18:17:43 2025 by rpki-client