Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
File: BjyTAb89LhVgz69-3EGnw-yKFqY.mft (raw, json)
Hash identifier: gqUZNbpXjtHxS90eXOeUrGnaDzh4AnfY3L8VuGi8SPc=
Subject key identifier: 79:42:91:0A:4B:DA:99:A0:44:17:54:DB:D1:7C:C6:D6:F7:6A:26:32
Authority key identifier: 06:3C:93:01:BF:3D:2E:15:60:CF:AF:7E:DC:41:A7:C3:EC:8A:16:A6
Certificate issuer: /CN=063c9301bf3d2e1560cfaf7edc41a7c3ec8a16a6
Certificate serial: 0196BAED8A7597D378BC9E572EBC39202CC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
Manifest number: 1530
Signing time: Sat 10 May 2025 16:00:51 +0000
Manifest this update: Sat 10 May 2025 16:00:51 +0000
Manifest next update: Sun 11 May 2025 16:00:51 +0000
Files and hashes: 1: BjyTAb89LhVgz69-3EGnw-yKFqY.crl (hash: yunMSetjBmUjnSwS7N9y8KWzvVSjvw8eBZccXSC5eMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:8a:75:97:d3:78:bc:9e:57:2e:bc:39:20:2c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=063c9301bf3d2e1560cfaf7edc41a7c3ec8a16a6
Validity
Not Before: May 10 16:00:51 2025 GMT
Not After : May 11 16:00:51 2025 GMT
Subject: CN=7942910a4bda99a0441754dbd17cc6d6f76a2632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:91:2b:87:b5:24:f9:e1:ae:53:dc:1e:18:ed:
b1:b7:f3:ec:1e:6d:0c:3d:53:7b:ef:19:b4:c4:c2:
fc:d6:0f:c7:68:a7:96:2d:8e:ba:24:ec:9b:5e:e8:
4f:e6:65:f2:fa:6a:3b:65:1a:a8:2b:74:dd:85:b4:
d3:b1:05:ba:73:0f:b1:70:29:c8:1f:4e:44:99:ad:
dd:ef:22:c1:16:49:47:7e:a6:93:77:42:3c:58:a8:
5e:84:04:08:ca:4a:fe:ea:34:2c:af:b7:57:69:93:
f7:47:21:f2:47:51:60:04:62:62:6b:3d:d0:6d:6f:
97:f9:1b:f0:31:4c:d3:31:cb:6d:ec:99:b0:60:fc:
39:55:86:7e:2f:e0:7c:4c:1e:b9:94:04:ac:18:3c:
0a:a6:92:53:f1:37:7a:6d:7f:fa:71:68:9b:67:22:
1c:ef:11:a9:ed:f9:ce:83:5b:e9:ac:ff:b6:f7:1b:
18:8a:36:85:df:ae:48:41:78:a3:94:3b:1d:df:50:
9b:71:16:0d:5b:09:c3:62:cd:a0:67:34:20:68:b8:
92:08:fe:61:93:a9:dc:2a:be:a9:75:8c:4c:03:55:
63:c8:0e:38:c9:cc:6a:8f:a9:f3:87:22:f8:56:e1:
f0:d7:e2:43:88:be:4c:70:09:63:51:96:2e:b0:fd:
be:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:42:91:0A:4B:DA:99:A0:44:17:54:DB:D1:7C:C6:D6:F7:6A:26:32
X509v3 Authority Key Identifier:
keyid:06:3C:93:01:BF:3D:2E:15:60:CF:AF:7E:DC:41:A7:C3:EC:8A:16:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:2b:34:56:12:fa:f5:9a:10:c4:6e:c1:e2:05:83:60:62:34:
04:67:81:5a:d6:a3:87:e9:98:2e:32:47:d6:c4:6a:1e:85:37:
e6:d6:1f:f5:87:e0:0d:ff:73:a8:05:48:87:2a:71:42:da:69:
07:bf:67:26:3c:1f:41:8e:91:63:4b:5d:af:3c:b4:87:bd:92:
71:0f:d2:0d:bd:87:e3:2c:79:7a:70:b9:01:52:64:43:63:5a:
25:15:e3:02:f8:d6:5f:7c:57:2c:89:d1:28:6d:df:48:d9:e5:
40:1a:2d:03:a0:8a:be:b5:8f:87:49:2e:35:77:1c:5e:db:98:
26:c7:06:b4:50:82:d7:e7:cd:63:66:3e:13:f0:c2:a0:71:54:
67:15:16:4a:5b:25:f9:15:4d:a3:bf:fd:7a:af:8e:9f:fe:75:
c3:c8:04:87:1e:e9:d9:9c:ff:13:f8:6f:c8:24:93:d8:1f:87:
8b:53:58:c6:1e:9c:b0:68:d9:19:8a:42:fb:82:1a:9d:b2:10:
2a:f6:91:a9:e1:79:67:d2:07:95:13:56:d0:a7:53:04:a2:49:
de:ef:36:7a:f5:2f:8b:a4:b4:3a:cb:a3:f5:c1:18:51:b5:cb:
69:04:ee:3f:b8:b4:82:03:4c:15:92:f9:c9:20:6f:42:27:84:
c4:c5:5e:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa67Yp1l9N4vJ5XLrw5ICzAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2M2M5MzAxYmYzZDJlMTU2MGNmYWY3ZWRjNDFhN2MzZWM4
YTE2YTYwHhcNMjUwNTEwMTYwMDUxWhcNMjUwNTExMTYwMDUxWjAzMTEwLwYDVQQD
Eyg3OTQyOTEwYTRiZGE5OWEwNDQxNzU0ZGJkMTdjYzZkNmY3NmEyNjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupErh7Uk+eGuU9weGO2xt/PsHm0M
PVN77xm0xML81g/HaKeWLY66JOybXuhP5mXy+mo7ZRqoK3TdhbTTsQW6cw+xcCnI
H05Ema3d7yLBFklHfqaTd0I8WKhehAQIykr+6jQsr7dXaZP3RyHyR1FgBGJiaz3Q
bW+X+RvwMUzTMctt7JmwYPw5VYZ+L+B8TB65lASsGDwKppJT8Td6bX/6cWibZyIc
7xGp7fnOg1vprP+29xsYijaF365IQXijlDsd31CbcRYNWwnDYs2gZzQgaLiSCP5h
k6ncKr6pdYxMA1VjyA44ycxqj6nzhyL4VuHw1+JDiL5McAljUZYusP2+oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHlCkQpL2pmgRBdU29F8xtb3aiYyMB8GA1UdIwQY
MBaAFAY8kwG/PS4VYM+vftxBp8PsihamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmp5VEFiODlMaFZnejY5LTNFR253LXlLRnFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8xZTM4NDYtOWM0Mi00OTk4LWE5NjAt
YjFkNzM3OTdhMjlmLzEvQmp5VEFiODlMaFZnejY5LTNFR253LXlLRnFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8xZTM4NDYtOWM0Mi00OTk4LWE5NjAtYjFkNzM3OTdhMjlm
LzEvQmp5VEFiODlMaFZnejY5LTNFR253LXlLRnFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGSs0VhL6
9ZoQxG7B4gWDYGI0BGeBWtajh+mYLjJH1sRqHoU35tYf9YfgDf9zqAVIhypxQtpp
B79nJjwfQY6RY0tdrzy0h72ScQ/SDb2H4yx5enC5AVJkQ2NaJRXjAvjWX3xXLInR
KG3fSNnlQBotA6CKvrWPh0kuNXccXtuYJscGtFCC1+fNY2Y+E/DCoHFUZxUWSlsl
+RVNo7/9eq+On/51w8gEhx7p2Zz/E/hvyCST2B+Hi1NYxh6csGjZGYpC+4IanbIQ
KvaRqeF5Z9IHlRNW0KdTBKJJ3u82evUvi6S0Osuj9cEYUbXLaQTuP7i0ggNMFZL5
ySBvQieExMVeNw==
-----END CERTIFICATE-----
Generated at Sat May 10 22:25:17 2025 by rpki-client