Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
File: BjfRzl3D-oAOHR3PvaqEH93UOQU.mft (raw, json)
Hash identifier: eBp3MeyOWFa393m4qj1DXavXDO53DzT9amVQe52XjUY=
Subject key identifier: 1A:0D:A3:1A:B1:A1:33:01:E2:9A:DD:27:83:49:01:70:1D:0C:58:C1
Authority key identifier: 06:37:D1:CE:5D:C3:FA:80:0E:1D:1D:CF:BD:AA:84:1F:DD:D4:39:05
Certificate issuer: /CN=0637d1ce5dc3fa800e1d1dcfbdaa841fddd43905
Certificate serial: 0196BECA5CE71D2573106E97C15B7BDEB354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjfRzl3D-oAOHR3PvaqEH93UOQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
Manifest number: 137E
Signing time: Sun 11 May 2025 10:00:55 +0000
Manifest this update: Sun 11 May 2025 10:00:55 +0000
Manifest next update: Mon 12 May 2025 10:00:55 +0000
Files and hashes: 1: BjfRzl3D-oAOHR3PvaqEH93UOQU.crl (hash: FdIQgWVMZg+KItfltl6jQSQHycxdSoQOaXbibUQg5u0=)
2: cqs27uyShJLHJ19HI0wbuu9K6Mw.roa (hash: Io5SItgYrsPuNxUpvFI/wIElXAajrpA8wR3rTKWJTBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjfRzl3D-oAOHR3PvaqEH93UOQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:ca:5c:e7:1d:25:73:10:6e:97:c1:5b:7b:de:b3:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0637d1ce5dc3fa800e1d1dcfbdaa841fddd43905
Validity
Not Before: May 11 10:00:55 2025 GMT
Not After : May 12 10:00:55 2025 GMT
Subject: CN=1a0da31ab1a13301e29add27834901701d0c58c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c3:15:f3:7b:7f:61:1a:0e:55:f1:c8:be:1a:
97:30:bf:89:13:bf:b1:83:0b:75:4a:2d:32:84:ca:
da:ef:30:7c:ad:30:39:bb:c4:cf:b0:d9:32:d3:ae:
52:d3:93:fc:08:eb:42:c0:da:f4:43:5d:84:7c:a1:
e6:e5:58:d6:35:20:21:66:2a:5b:25:8a:b8:aa:7d:
b1:2c:bb:5e:02:ad:92:a2:54:f4:c0:44:3a:13:ea:
a2:40:63:17:3d:31:a3:9a:8c:bb:4b:68:cb:0d:6f:
76:ec:95:47:0e:1f:38:c4:ba:2f:85:27:23:42:b0:
da:e4:10:3f:c2:58:33:0f:48:75:b4:75:f9:a4:4b:
bf:65:60:65:ee:fd:84:fe:71:4a:05:76:58:e9:94:
40:63:0a:21:17:2b:5f:21:3a:08:b5:20:65:3e:a7:
e6:0d:9e:a0:1a:7f:2b:1d:5f:01:ed:63:1f:e3:27:
dd:92:4c:36:d9:6e:d6:4d:f6:35:52:0a:5e:b0:6c:
8e:90:e3:d1:13:11:76:18:97:a8:82:69:40:65:88:
39:3f:f9:d2:0b:04:f2:ca:89:53:3f:bd:34:42:9d:
66:4d:f6:55:9b:80:98:0a:c3:76:b6:d3:63:96:05:
92:8d:57:21:09:82:05:56:86:35:c0:f6:f9:47:61:
e6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0D:A3:1A:B1:A1:33:01:E2:9A:DD:27:83:49:01:70:1D:0C:58:C1
X509v3 Authority Key Identifier:
keyid:06:37:D1:CE:5D:C3:FA:80:0E:1D:1D:CF:BD:AA:84:1F:DD:D4:39:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjfRzl3D-oAOHR3PvaqEH93UOQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:24:b6:bd:fb:e0:d9:e9:09:5e:2d:5d:97:85:e6:d7:9a:f2:
f7:01:db:eb:87:d1:f9:6f:04:95:79:3c:a9:42:00:52:70:59:
4c:b8:dd:15:6e:57:b7:6a:36:06:3c:03:be:ee:68:bd:e3:67:
82:e0:b5:cc:35:54:62:4e:bb:4b:9e:93:c8:b8:36:3e:ba:dd:
de:c8:5a:45:3d:5e:86:7f:a0:28:0e:1a:76:29:86:c9:a4:1d:
4c:08:9d:61:e3:71:c3:cd:d9:73:a8:62:b5:49:57:fa:bc:16:
33:56:9d:0a:6b:6f:9e:fb:74:10:11:bb:ed:5f:1b:08:c1:d8:
b7:65:ed:71:6b:52:4b:d6:66:40:3d:96:cf:d2:20:90:35:c1:
23:ef:cb:9d:fd:b6:1d:aa:b7:62:16:8b:0a:16:83:b6:37:72:
57:d2:39:c8:ca:2d:f6:ce:10:8f:4d:63:ad:e0:88:0d:6e:22:
65:ee:44:9f:c9:5d:da:7c:81:98:04:9d:ec:72:d3:fa:6a:3b:
11:93:a4:af:65:94:0e:2c:2b:16:83:0e:33:6a:fa:27:e4:19:
7d:e1:67:2c:70:db:af:a3:a0:d1:67:70:03:b3:6d:46:73:ec:
0c:76:14:d5:cc:80:a0:ee:f8:b9:fa:91:72:7f:5c:1c:e6:28:
99:77:41:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+ylznHSVzEG6XwVt73rNUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MzdkMWNlNWRjM2ZhODAwZTFkMWRjZmJkYWE4NDFmZGRk
NDM5MDUwHhcNMjUwNTExMTAwMDU1WhcNMjUwNTEyMTAwMDU1WjAzMTEwLwYDVQQD
EygxYTBkYTMxYWIxYTEzMzAxZTI5YWRkMjc4MzQ5MDE3MDFkMGM1OGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsMV83t/YRoOVfHIvhqXML+JE7+x
gwt1Si0yhMra7zB8rTA5u8TPsNky065S05P8COtCwNr0Q12EfKHm5VjWNSAhZipb
JYq4qn2xLLteAq2SolT0wEQ6E+qiQGMXPTGjmoy7S2jLDW927JVHDh84xLovhScj
QrDa5BA/wlgzD0h1tHX5pEu/ZWBl7v2E/nFKBXZY6ZRAYwohFytfIToItSBlPqfm
DZ6gGn8rHV8B7WMf4yfdkkw22W7WTfY1UgpesGyOkOPRExF2GJeogmlAZYg5P/nS
CwTyyolTP700Qp1mTfZVm4CYCsN2ttNjlgWSjVchCYIFVoY1wPb5R2HmUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBoNoxqxoTMB4prdJ4NJAXAdDFjBMB8GA1UdIwQY
MBaAFAY30c5dw/qADh0dz72qhB/d1DkFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmpmUnpsM0Qtb0FPSFIzUHZhcUVIOTNVT1FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9lYWE2MDItMmEzZi00ZjMyLWFiY2Ut
M2Q4MGQ2ODZlNzQ3LzEvQmpmUnpsM0Qtb0FPSFIzUHZhcUVIOTNVT1FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9lYWE2MDItMmEzZi00ZjMyLWFiY2UtM2Q4MGQ2ODZlNzQ3
LzEvQmpmUnpsM0Qtb0FPSFIzUHZhcUVIOTNVT1FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAciS2vfvg
2ekJXi1dl4Xm15ry9wHb64fR+W8ElXk8qUIAUnBZTLjdFW5Xt2o2BjwDvu5oveNn
guC1zDVUYk67S56TyLg2Prrd3shaRT1ehn+gKA4adimGyaQdTAidYeNxw83Zc6hi
tUlX+rwWM1adCmtvnvt0EBG77V8bCMHYt2XtcWtSS9ZmQD2Wz9IgkDXBI+/Lnf22
Haq3YhaLChaDtjdyV9I5yMot9s4Qj01jreCIDW4iZe5En8ld2nyBmASd7HLT+mo7
EZOkr2WUDiwrFoMOM2r6J+QZfeFnLHDbr6Og0WdwA7NtRnPsDHYU1cyAoO74ufqR
cn9cHOYomXdBpA==
-----END CERTIFICATE-----
Generated at Sun May 11 16:38:57 2025 by rpki-client