Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
File: bKlE6qnH9tRXQG8ULG4oz1rMasg.mft (raw, json)
Hash identifier: gNr0pw02cv383E6z87CN49LhN2rNOBNOwKTJg7drP1A=
Subject key identifier: CD:C6:30:24:69:5E:3C:C8:97:49:57:3A:D7:ED:23:FD:9F:F9:A1:E2
Authority key identifier: 6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8
Certificate issuer: /CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8
Certificate serial: 0196C1CAFBE9D1276470BFB923EF62E4D8D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
Manifest number: 0B00
Signing time: Mon 12 May 2025 00:00:27 +0000
Manifest this update: Mon 12 May 2025 00:00:27 +0000
Manifest next update: Tue 13 May 2025 00:00:27 +0000
Files and hashes: 1: U_3B74ujhAJrCWsRNX6BqqwgnVw.roa (hash: t7MohkwWoi0EopfC0Tnorl6v62Y4aRFAg2yz8Q6y9x8=)
2: bKlE6qnH9tRXQG8ULG4oz1rMasg.crl (hash: xYJ9qdqHkRZDBVux4tDFPggBm/KoFqESPLQ2Itx6VNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:ca:fb:e9:d1:27:64:70:bf:b9:23:ef:62:e4:d8:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8
Validity
Not Before: May 12 00:00:27 2025 GMT
Not After : May 13 00:00:27 2025 GMT
Subject: CN=cdc63024695e3cc89749573ad7ed23fd9ff9a1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:be:0f:ba:61:c8:21:cc:91:7e:42:d6:5e:70:
6e:26:c4:9d:00:5f:db:20:a5:2a:b5:ba:f7:00:06:
58:3d:a4:b3:dd:c8:4f:bc:16:f4:5b:2a:cc:a6:15:
2c:18:c9:e0:59:f8:4c:9b:17:94:40:dc:01:0f:60:
9c:96:0e:ba:e8:1f:c1:24:70:1f:c2:ed:ec:77:de:
e0:42:00:32:67:42:ac:43:50:db:ef:05:dd:86:4e:
9c:a6:fa:8a:36:8e:ab:04:f2:0a:8a:e0:c8:fd:07:
41:9f:7c:3a:e7:35:dc:73:35:b8:2c:93:dd:4d:18:
67:b5:a3:fe:9a:e2:27:fd:8a:1d:55:21:9b:f7:c2:
a5:2a:ab:18:a2:d1:63:ea:4f:14:ee:6e:43:5c:88:
a8:5d:f1:02:f3:d1:b9:d7:ad:8d:05:fd:5a:ed:82:
e4:94:b0:30:24:28:4a:49:9b:16:c2:4b:e7:91:08:
1c:56:f3:ca:16:0b:87:60:9f:d4:f1:b1:94:70:4a:
c7:63:5f:18:7d:45:38:65:44:fa:2c:f8:e8:6a:9c:
cb:df:73:1a:12:a3:71:4e:e8:b8:31:93:19:f6:47:
c7:d0:80:fb:1c:95:f3:ac:17:8b:f0:24:34:a4:55:
3c:55:a2:98:10:4b:38:97:6d:8f:9a:53:69:5b:7e:
17:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C6:30:24:69:5E:3C:C8:97:49:57:3A:D7:ED:23:FD:9F:F9:A1:E2
X509v3 Authority Key Identifier:
keyid:6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f6:7b:c2:9f:49:61:85:0b:1d:9f:fd:cb:69:13:0c:6b:fc:
a9:db:c8:af:39:7a:9d:9d:a4:64:e1:76:ac:3a:3f:09:39:a6:
2e:9a:81:71:66:a6:9c:f3:86:dc:4f:1c:32:fe:c4:01:0b:8a:
c0:d4:b6:0e:c7:6c:96:88:20:67:b0:32:f2:d5:b3:2e:35:3a:
ae:97:d7:38:60:1c:e3:a0:92:da:d5:be:ee:cf:a7:a7:89:49:
4b:be:d8:15:a8:40:3f:e4:64:26:c7:c2:97:f6:92:1e:83:8b:
63:11:57:41:8a:b8:1b:e0:eb:01:6c:71:86:ae:7e:b7:31:aa:
31:0a:ce:d9:de:e1:77:00:25:3d:2f:04:0a:9c:1a:b8:8b:ac:
94:86:62:cb:90:f6:22:8a:91:88:6f:29:3c:98:c0:84:aa:93:
e0:30:19:d1:84:6f:f7:d1:b2:ae:1e:da:f2:88:c9:d2:ab:3d:
17:25:1b:25:5c:e3:0c:af:b6:12:10:36:5c:85:76:5a:06:78:
6d:ae:be:51:2e:ee:69:7b:26:aa:43:d2:81:95:eb:00:5b:11:
fa:36:08:ff:25:e1:28:65:67:cc:5f:64:04:91:e8:01:cf:f6:
59:43:5b:72:8c:11:fd:18:09:2c:c3:22:b6:fa:4b:64:bf:72:
2f:9f:23:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbByvvp0SdkcL+5I+9i5NjTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYTk0NGVhYTljN2Y2ZDQ1NzQwNmYxNDJjNmUyOGNmNWFj
YzZhYzgwHhcNMjUwNTEyMDAwMDI3WhcNMjUwNTEzMDAwMDI3WjAzMTEwLwYDVQQD
EyhjZGM2MzAyNDY5NWUzY2M4OTc0OTU3M2FkN2VkMjNmZDlmZjlhMWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwr4PumHIIcyRfkLWXnBuJsSdAF/b
IKUqtbr3AAZYPaSz3chPvBb0WyrMphUsGMngWfhMmxeUQNwBD2Cclg666B/BJHAf
wu3sd97gQgAyZ0KsQ1Db7wXdhk6cpvqKNo6rBPIKiuDI/QdBn3w65zXcczW4LJPd
TRhntaP+muIn/YodVSGb98KlKqsYotFj6k8U7m5DXIioXfEC89G5162NBf1a7YLk
lLAwJChKSZsWwkvnkQgcVvPKFguHYJ/U8bGUcErHY18YfUU4ZUT6LPjoapzL33Ma
EqNxTui4MZMZ9kfH0ID7HJXzrBeL8CQ0pFU8VaKYEEs4l22PmlNpW34XRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM3GMCRpXjzIl0lXOtftI/2f+aHiMB8GA1UdIwQY
MBaAFGypROqpx/bUV0BvFCxuKM9azGrIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYktsRTZxbkg5dFJYUUc4VUxHNG96MXJNYXNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8wZWRjMGItN2ViYi00NzBhLWIwNTYt
M2RlNDRmYzhiM2I1LzEvYktsRTZxbkg5dFJYUUc4VUxHNG96MXJNYXNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8wZWRjMGItN2ViYi00NzBhLWIwNTYtM2RlNDRmYzhiM2I1
LzEvYktsRTZxbkg5dFJYUUc4VUxHNG96MXJNYXNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAePZ7wp9J
YYULHZ/9y2kTDGv8qdvIrzl6nZ2kZOF2rDo/CTmmLpqBcWamnPOG3E8cMv7EAQuK
wNS2DsdsloggZ7Ay8tWzLjU6rpfXOGAc46CS2tW+7s+np4lJS77YFahAP+RkJsfC
l/aSHoOLYxFXQYq4G+DrAWxxhq5+tzGqMQrO2d7hdwAlPS8ECpwauIuslIZiy5D2
IoqRiG8pPJjAhKqT4DAZ0YRv99Gyrh7a8ojJ0qs9FyUbJVzjDK+2EhA2XIV2WgZ4
ba6+US7uaXsmqkPSgZXrAFsR+jYI/yXhKGVnzF9kBJHoAc/2WUNbcowR/RgJLMMi
tvpLZL9yL58jBg==
-----END CERTIFICATE-----
Generated at Mon May 12 08:03:14 2025 by rpki-client