Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.mft
File: bTi1QIMcnNXfSAhRpygGZ-181kc.mft (raw, json)
Hash identifier: xIkrhkwrdw4eMvQFmIbf0sC9BCxfMaTk2MKmpm9W/8k=
Subject key identifier: 97:92:ED:4A:40:E7:2C:8D:FB:63:EE:31:BF:1B:39:08:5C:69:53:2F
Authority key identifier: 6D:38:B5:40:83:1C:9C:D5:DF:48:08:51:A7:28:06:67:ED:7C:D6:47
Certificate issuer: /CN=6d38b540831c9cd5df480851a7280667ed7cd647
Certificate serial: 0196B89144BA2256E5E2B5D0084B58102E95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTi1QIMcnNXfSAhRpygGZ-181kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.mft
Manifest number: 0951
Signing time: Sat 10 May 2025 05:00:50 +0000
Manifest this update: Sat 10 May 2025 05:00:50 +0000
Manifest next update: Sun 11 May 2025 05:00:50 +0000
Files and hashes: 1: bTi1QIMcnNXfSAhRpygGZ-181kc.crl (hash: whseAtIIquY9Qet/iDVILttwusjVfP68JHJ+J9/ljmI=)
2: okBQ3HYZQrL6ORKAHfJHyIzTOqU.roa (hash: 8hx35QaymOBGYmgY5QQuJWW8cF+INO74gqLHBnenUT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bTi1QIMcnNXfSAhRpygGZ-181kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:91:44:ba:22:56:e5:e2:b5:d0:08:4b:58:10:2e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d38b540831c9cd5df480851a7280667ed7cd647
Validity
Not Before: May 10 05:00:50 2025 GMT
Not After : May 11 05:00:50 2025 GMT
Subject: CN=9792ed4a40e72c8dfb63ee31bf1b39085c69532f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:14:de:bc:12:bd:08:6f:b2:6d:6c:91:a1:27:
1d:ac:25:53:67:87:94:e5:3e:af:f8:aa:bc:3d:ee:
3a:8b:3d:48:c2:ac:28:c3:3c:7b:22:b6:3a:41:66:
8c:74:3a:f8:38:c8:a1:9c:81:0a:62:2b:ec:8f:be:
e3:b3:73:e9:a1:2a:ab:87:48:30:10:37:ea:a6:bf:
85:c8:15:70:8c:c7:7a:fc:a6:b8:c7:d1:89:82:19:
5f:63:61:dd:77:66:b9:a6:ce:90:18:dd:19:1b:36:
3d:9c:de:91:ef:ab:aa:15:27:47:1e:a8:11:42:cd:
6e:37:e7:78:1f:87:fd:62:52:aa:88:94:65:e2:6f:
a4:f6:e2:b6:8a:07:43:80:a6:37:6a:aa:f8:d7:ae:
d8:b8:13:ca:ce:ff:3e:0d:98:ad:7e:86:69:28:28:
3f:ca:70:8f:5f:df:05:7f:64:f7:06:2b:d3:ec:9d:
e7:e8:52:8e:76:94:30:9c:d9:80:51:b5:ea:37:6d:
66:69:29:35:a6:ba:76:b3:fd:ed:28:de:eb:fe:46:
80:ab:d4:5e:7e:92:03:39:96:c5:4e:61:b3:44:15:
5f:21:65:e8:cc:60:09:3a:da:cc:b8:b7:2a:50:ae:
b8:e8:d8:c1:5c:eb:09:26:51:d3:13:68:ca:b2:3f:
3c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:92:ED:4A:40:E7:2C:8D:FB:63:EE:31:BF:1B:39:08:5C:69:53:2F
X509v3 Authority Key Identifier:
keyid:6D:38:B5:40:83:1C:9C:D5:DF:48:08:51:A7:28:06:67:ED:7C:D6:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTi1QIMcnNXfSAhRpygGZ-181kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:8f:ba:fe:65:26:f3:c3:5c:55:fb:25:53:c0:80:03:70:fa:
2d:fc:19:92:66:40:3f:3d:3c:42:39:41:b8:f8:20:8a:8c:64:
bd:82:cb:41:cc:2b:87:21:00:b1:fe:57:64:db:e4:c7:14:de:
a3:ff:7b:a0:04:9a:eb:ff:ac:ea:5d:ea:ed:fb:16:b2:ed:9c:
5f:99:ba:7a:69:6a:96:f5:38:47:ce:3f:a4:1e:d2:ed:ec:38:
ad:80:4d:b3:78:71:a0:1c:ce:a7:b8:9e:f7:f5:be:a2:0d:c1:
a9:89:b5:55:86:23:eb:dd:10:d5:f3:ea:f2:08:61:5f:5d:e9:
15:20:64:f9:87:a9:d8:81:86:d0:51:68:e0:dc:34:8b:82:97:
d3:8a:5a:68:00:b6:71:69:cc:40:6e:a4:b8:9d:85:13:58:9a:
4c:d8:52:d9:75:20:13:ec:8c:44:d0:b6:5f:06:57:ba:56:73:
f2:e5:5a:7d:aa:76:85:8b:7b:ca:2b:76:5c:ab:fa:56:30:8b:
d4:04:2f:e1:6f:a9:7b:0b:5a:ea:e5:ed:7c:42:ef:5e:13:b3:
3b:4a:10:ae:2c:77:a8:ba:84:05:dd:ef:4b:71:0d:f3:dd:96:
cf:07:70:01:f2:31:aa:a4:19:e8:0e:33:8c:7f:7e:39:46:04:
bd:85:6b:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4kUS6Ilbl4rXQCEtYEC6VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMzhiNTQwODMxYzljZDVkZjQ4MDg1MWE3MjgwNjY3ZWQ3
Y2Q2NDcwHhcNMjUwNTEwMDUwMDUwWhcNMjUwNTExMDUwMDUwWjAzMTEwLwYDVQQD
Eyg5NzkyZWQ0YTQwZTcyYzhkZmI2M2VlMzFiZjFiMzkwODVjNjk1MzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBTevBK9CG+ybWyRoScdrCVTZ4eU
5T6v+Kq8Pe46iz1Iwqwowzx7IrY6QWaMdDr4OMihnIEKYivsj77js3PpoSqrh0gw
EDfqpr+FyBVwjMd6/Ka4x9GJghlfY2Hdd2a5ps6QGN0ZGzY9nN6R76uqFSdHHqgR
Qs1uN+d4H4f9YlKqiJRl4m+k9uK2igdDgKY3aqr4167YuBPKzv8+DZitfoZpKCg/
ynCPX98Ff2T3BivT7J3n6FKOdpQwnNmAUbXqN21maSk1prp2s/3tKN7r/kaAq9Re
fpIDOZbFTmGzRBVfIWXozGAJOtrMuLcqUK646NjBXOsJJlHTE2jKsj885QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJeS7UpA5yyN+2PuMb8bOQhcaVMvMB8GA1UdIwQY
MBaAFG04tUCDHJzV30gIUacoBmftfNZHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlRpMVFJTWNuTlhmU0FoUnB5Z0daLTE4MWtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mNzMwOGEtNDEwOC00YWNjLWI2MDAt
MzYzMDU0M2I1MjFiLzEvYlRpMVFJTWNuTlhmU0FoUnB5Z0daLTE4MWtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mNzMwOGEtNDEwOC00YWNjLWI2MDAtMzYzMDU0M2I1MjFi
LzEvYlRpMVFJTWNuTlhmU0FoUnB5Z0daLTE4MWtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACY+6/mUm
88NcVfslU8CAA3D6LfwZkmZAPz08QjlBuPggioxkvYLLQcwrhyEAsf5XZNvkxxTe
o/97oASa6/+s6l3q7fsWsu2cX5m6emlqlvU4R84/pB7S7ew4rYBNs3hxoBzOp7ie
9/W+og3BqYm1VYYj690Q1fPq8ghhX13pFSBk+Yep2IGG0FFo4Nw0i4KX04paaAC2
cWnMQG6kuJ2FE1iaTNhS2XUgE+yMRNC2XwZXulZz8uVafap2hYt7yit2XKv6VjCL
1AQv4W+pewta6uXtfELvXhOzO0oQrix3qLqEBd3vS3EN892WzwdwAfIxqqQZ6A4z
jH9+OUYEvYVraQ==
-----END CERTIFICATE-----
Generated at Sat May 10 10:33:42 2025 by rpki-client