Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
File: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft (raw, json)
Hash identifier: jj0aY0td6uA3kRAxjxOyuzr9tRxgQsOEP+iuNRTZsPg=
Subject key identifier: 2C:A0:E1:FC:CD:4E:91:70:03:08:0E:D6:8E:C5:C2:95:DD:D8:63:00
Authority key identifier: F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
Certificate issuer: /CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Certificate serial: 0196C5A7DE546B6AEE9BE0041D242364D0A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
Manifest number: 0468
Signing time: Mon 12 May 2025 18:00:35 +0000
Manifest this update: Mon 12 May 2025 18:00:35 +0000
Manifest next update: Tue 13 May 2025 18:00:35 +0000
Files and hashes: 1: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl (hash: g7CLRiXn6yrxHFjRXJ9VRHAa/BeGQ0hNMjvrZ3yOyxI=)
2: lkUV_pQvaLsSaoJOegWniJF6RQo.roa (hash: i9n/5GhzO6//QgpiyuPewqwCFXVYirWQt6MCRZhl13U=)
3: x_9Ds4w921G-S6uMB3BqKl4lwk4.roa (hash: 4uIRZVtStLzfbHbkUvgOoPNPKk9YaTAL+flcnzSJknE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a7:de:54:6b:6a:ee:9b:e0:04:1d:24:23:64:d0:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Validity
Not Before: May 12 18:00:35 2025 GMT
Not After : May 13 18:00:35 2025 GMT
Subject: CN=2ca0e1fccd4e917003080ed68ec5c295ddd86300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:77:f4:bf:bf:a0:f2:30:7f:60:23:af:6d:ed:
46:00:f7:df:db:68:e1:ab:07:2b:f2:bc:91:3c:02:
a4:ae:37:f4:9d:d5:c7:47:7d:cd:18:81:da:96:0b:
2f:70:cc:d6:2e:9b:23:fc:7d:fd:59:e7:f4:10:c8:
7b:00:8e:79:50:79:88:17:d1:5c:45:76:5d:d5:8a:
25:ce:59:17:93:03:46:59:2d:cf:c8:6f:ef:92:0f:
30:a6:d7:0c:b3:49:f8:ec:3f:6a:b1:ea:c1:af:65:
87:75:e5:60:69:ed:5f:be:d3:72:1b:22:23:5b:33:
62:c4:23:f9:04:53:0b:43:08:9a:24:8e:37:2d:32:
64:25:49:0c:a8:38:eb:a7:8e:c4:b7:be:ec:79:d2:
02:e8:01:b9:5c:3b:de:7f:eb:03:8b:8a:e6:28:5d:
1b:c1:c2:19:b6:7b:93:bb:8f:d5:f1:58:f9:0a:ed:
b9:f3:73:0c:c6:69:28:c6:50:71:0a:4a:f7:e6:44:
d9:25:68:31:37:23:bc:18:5c:6a:93:ac:8b:17:cc:
74:fd:94:c3:f7:e0:9c:55:4d:31:af:dd:30:d9:e6:
dc:60:c3:43:7f:87:b1:ac:04:5c:df:9b:94:c6:82:
80:1d:b7:cf:21:d1:b8:7c:82:43:e6:69:42:a9:2f:
d5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A0:E1:FC:CD:4E:91:70:03:08:0E:D6:8E:C5:C2:95:DD:D8:63:00
X509v3 Authority Key Identifier:
keyid:F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:bc:ea:8c:e8:7e:12:c1:16:6d:25:66:24:59:2b:58:e4:23:
ee:d9:c4:8b:de:de:19:bc:f4:d5:3e:23:72:e1:37:15:62:f4:
81:03:18:01:32:5b:90:32:2a:14:31:67:85:96:8a:5d:ca:cb:
b6:5e:72:84:a2:ea:8e:a3:28:08:69:6c:74:9e:b4:6b:91:23:
df:9b:15:b0:4d:50:79:8c:ac:95:c3:44:42:24:05:ad:ae:5e:
85:17:7e:05:5c:7a:d9:2d:10:77:3f:9e:da:da:14:80:13:ed:
de:ce:88:9e:a2:77:ba:f5:c5:2c:ed:eb:96:35:c5:cc:d1:ab:
0b:3b:c4:57:2f:5a:cd:aa:65:28:82:16:44:de:aa:6c:10:2c:
61:77:e8:84:21:ed:6f:06:eb:19:cc:1a:89:30:69:83:9c:b1:
19:00:2a:d3:58:03:0a:64:1b:82:47:c0:17:d8:8b:13:29:71:
40:3a:f5:9b:41:0d:46:dc:89:a2:13:d5:dc:4c:54:92:f0:5b:
83:da:47:a7:3a:60:1c:48:87:f9:32:11:8d:7d:b3:bb:f0:24:
61:87:a4:1b:8c:f7:d6:cf:b2:5e:eb:b3:be:c6:a0:d6:1c:b5:
c0:5c:7e:b1:1c:ee:96:0e:10:c1:e7:45:ef:d6:10:d8:54:31:
e1:65:2c:56
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZbFp95Ua2rum+AEHSQjZNClMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MTVlMDJiZGE3YTkwNzE0ODc4MzdkMzE1NThiNWUwMjIx
ZDNjZjkwHhcNMjUwNTEyMTgwMDM1WhcNMjUwNTEzMTgwMDM1WjAzMTEwLwYDVQQD
EygyY2EwZTFmY2NkNGU5MTcwMDMwODBlZDY4ZWM1YzI5NWRkZDg2MzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nf0v7+g8jB/YCOvbe1GAPff22jh
qwcr8ryRPAKkrjf0ndXHR33NGIHalgsvcMzWLpsj/H39Wef0EMh7AI55UHmIF9Fc
RXZd1YolzlkXkwNGWS3PyG/vkg8wptcMs0n47D9qserBr2WHdeVgae1fvtNyGyIj
WzNixCP5BFMLQwiaJI43LTJkJUkMqDjrp47Et77sedIC6AG5XDvef+sDi4rmKF0b
wcIZtnuTu4/V8Vj5Cu2583MMxmkoxlBxCkr35kTZJWgxNyO8GFxqk6yLF8x0/ZTD
9+CcVU0xr90w2ebcYMNDf4exrARc35uUxoKAHbfPIdG4fIJD5mlCqS/VRwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFCyg4fzNTpFwAwgO1o7FwpXd2GMAMB8GA1UdIwQY
MBaAFPgV4CvaepBxSHg30xVYteAiHTz5MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1CWGdLOXA2a0hGSWVEZlRGVmkxNENJZFBQay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvY2Q0NzJjLTQyNTYtNDBmZi05OGUy
LWQ5ODM4NDM5NzkyOS8xLzEtQlhnSzlwNmtIRkllRGZURlZpMTRDSWRQUGsubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzI4L2NkNDcyYy00MjU2LTQwZmYtOThlMi1kOTgzODQzOTc5
MjkvMS8xLUJYZ0s5cDZrSEZJZURmVEZWaTE0Q0lkUFBrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXLzq
jOh+EsEWbSVmJFkrWOQj7tnEi97eGbz01T4jcuE3FWL0gQMYATJbkDIqFDFnhZaK
XcrLtl5yhKLqjqMoCGlsdJ60a5Ej35sVsE1QeYyslcNEQiQFra5ehRd+BVx62S0Q
dz+e2toUgBPt3s6InqJ3uvXFLO3rljXFzNGrCzvEVy9azaplKIIWRN6qbBAsYXfo
hCHtbwbrGcwaiTBpg5yxGQAq01gDCmQbgkfAF9iLEylxQDr1m0ENRtyJohPV3ExU
kvBbg9pHpzpgHEiH+TIRjX2zu/AkYYekG4z31s+yXuuzvsag1hy1wFx+sRzulg4Q
wedF79YQ2FQx4WUsVg==
-----END CERTIFICATE-----
Generated at Mon May 12 22:59:27 2025 by rpki-client