Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
File: BWAG8qGECQDHU2KBIbP7fsW9iek.mft (raw, json)
Hash identifier: MQT9cIv/Zjs5fFv4SKVQjGoA0SVcbFqmEvVhWQSkB7k=
Subject key identifier: 70:A6:F1:2F:5F:6C:53:F0:6C:65:5C:FA:7D:F6:4A:5D:3E:CA:F5:B8
Authority key identifier: 05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
Certificate issuer: /CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Certificate serial: 0196C34C3B28A47ED4D7E6327981F131B52E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
Manifest number: 0775
Signing time: Mon 12 May 2025 07:01:14 +0000
Manifest this update: Mon 12 May 2025 07:01:14 +0000
Manifest next update: Tue 13 May 2025 07:01:14 +0000
Files and hashes: 1: BWAG8qGECQDHU2KBIbP7fsW9iek.crl (hash: kBSkPnvOSq3ji+kp/FTtxLFJA3WJFCOh4N8NuQM/qt4=)
2: G7hpWPyXuPCdcjaRbCuAbyP7XNA.roa (hash: CuG2DStYKEKyAlh0IJta5/FjSh93nl0CeskY3cbZDZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4c:3b:28:a4:7e:d4:d7:e6:32:79:81:f1:31:b5:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Validity
Not Before: May 12 07:01:14 2025 GMT
Not After : May 13 07:01:14 2025 GMT
Subject: CN=70a6f12f5f6c53f06c655cfa7df64a5d3ecaf5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cd:50:6a:de:9f:e9:fd:7d:cb:41:66:0b:03:
32:82:55:0d:fc:fb:95:e1:5d:30:1e:3e:c6:85:31:
7b:b8:73:18:41:df:12:86:28:c4:b6:0b:33:9d:99:
70:db:c7:5a:49:56:4f:9d:fd:38:8a:d3:db:42:af:
13:6f:49:ed:5d:eb:67:97:1e:31:cd:b6:65:32:8b:
0d:e1:e5:bf:66:ca:7d:0f:5b:6b:67:19:1a:95:51:
78:ae:dc:38:ca:56:90:ec:9b:fc:d9:57:02:eb:5f:
eb:4f:50:fe:c9:7c:d9:73:f5:2c:50:a2:8b:a1:8c:
fc:2f:dd:ad:ae:2c:73:07:76:ad:b4:0b:b2:f3:8f:
a4:f4:7f:a9:b6:36:95:ae:e9:51:0d:10:7c:b3:ca:
a2:3e:26:9f:07:c0:d6:ab:00:33:6f:37:1b:07:93:
84:66:99:3a:ee:81:fa:4e:7f:f2:5d:4f:70:09:85:
b4:4f:2e:8c:4a:fe:80:52:98:94:60:9f:0a:89:6e:
80:ae:11:ae:75:28:65:64:a5:ac:e5:fe:75:f3:f7:
47:22:1f:6f:07:8d:9b:fa:ed:3e:1c:39:49:9c:3c:
6f:2b:41:47:53:be:a6:57:a2:01:9f:70:51:a9:fa:
bc:0a:c8:50:15:5e:1a:88:f8:d7:e6:3b:81:a8:38:
16:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A6:F1:2F:5F:6C:53:F0:6C:65:5C:FA:7D:F6:4A:5D:3E:CA:F5:B8
X509v3 Authority Key Identifier:
keyid:05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:fa:18:1d:6b:91:76:8c:90:9f:50:2b:0d:f3:f5:a9:14:90:
a1:04:1d:3b:ff:5a:94:53:a3:cc:dc:ac:42:ca:a5:9a:7e:de:
76:da:b1:19:73:b5:e0:5d:9c:b8:d1:33:94:ff:54:06:cd:7a:
89:fe:01:4f:65:1f:16:0d:7c:b6:c7:82:58:bb:14:fa:53:7c:
b0:af:66:30:c7:d8:d5:50:d6:8b:f4:3a:8f:71:6f:9d:7f:ed:
15:44:a0:2f:e7:c6:62:ae:09:23:2d:52:f8:5b:31:cb:70:18:
4f:21:90:4c:50:5e:80:c9:b0:66:f7:0f:95:02:4a:25:ca:f5:
d4:f4:e0:fe:5f:3c:c2:6c:e5:fd:10:aa:f1:6d:32:46:c5:70:
82:19:a4:ea:41:d5:01:ec:fc:8b:78:bf:69:a5:cb:c5:99:3f:
38:1c:dc:b1:94:d2:42:0e:dd:12:7b:10:18:22:90:0f:30:b1:
ce:7c:0d:84:bf:02:41:57:47:c8:db:c7:f2:6c:ff:bf:bf:08:
7c:47:f0:e2:30:1a:f5:61:04:e3:70:63:36:e9:c3:73:9f:7e:
d7:02:0a:ec:fe:fd:05:6b:ec:5f:86:ef:58:3c:8d:00:50:89:
f5:7b:10:e6:58:d2:78:38:b2:5f:0b:e2:33:ff:c5:16:cc:35:
d7:89:e5:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDTDsopH7U1+YyeYHxMbUuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NjAwNmYyYTE4NDA5MDBjNzUzNjI4MTIxYjNmYjdlYzVi
ZDg5ZTkwHhcNMjUwNTEyMDcwMTE0WhcNMjUwNTEzMDcwMTE0WjAzMTEwLwYDVQQD
Eyg3MGE2ZjEyZjVmNmM1M2YwNmM2NTVjZmE3ZGY2NGE1ZDNlY2FmNWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo81Qat6f6f19y0FmCwMyglUN/PuV
4V0wHj7GhTF7uHMYQd8ShijEtgsznZlw28daSVZPnf04itPbQq8Tb0ntXetnlx4x
zbZlMosN4eW/Zsp9D1trZxkalVF4rtw4ylaQ7Jv82VcC61/rT1D+yXzZc/UsUKKL
oYz8L92trixzB3attAuy84+k9H+ptjaVrulRDRB8s8qiPiafB8DWqwAzbzcbB5OE
Zpk67oH6Tn/yXU9wCYW0Ty6MSv6AUpiUYJ8KiW6ArhGudShlZKWs5f518/dHIh9v
B42b+u0+HDlJnDxvK0FHU76mV6IBn3BRqfq8CshQFV4aiPjX5juBqDgWfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCm8S9fbFPwbGVc+n32Sl0+yvW4MB8GA1UdIwQY
MBaAFAVgBvKhhAkAx1NigSGz+37FvYnpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQldBRzhxR0VDUURIVTJLQkliUDdmc1c5aWVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC81NzMyZDMtYTUzYy00MWY3LWE2MjMt
NTViM2U2NDc2YTdiLzEvQldBRzhxR0VDUURIVTJLQkliUDdmc1c5aWVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC81NzMyZDMtYTUzYy00MWY3LWE2MjMtNTViM2U2NDc2YTdi
LzEvQldBRzhxR0VDUURIVTJLQkliUDdmc1c5aWVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjvoYHWuR
doyQn1ArDfP1qRSQoQQdO/9alFOjzNysQsqlmn7edtqxGXO14F2cuNEzlP9UBs16
if4BT2UfFg18tseCWLsU+lN8sK9mMMfY1VDWi/Q6j3FvnX/tFUSgL+fGYq4JIy1S
+Fsxy3AYTyGQTFBegMmwZvcPlQJKJcr11PTg/l88wmzl/RCq8W0yRsVwghmk6kHV
Aez8i3i/aaXLxZk/OBzcsZTSQg7dEnsQGCKQDzCxznwNhL8CQVdHyNvH8mz/v78I
fEfw4jAa9WEE43BjNunDc59+1wIK7P79BWvsX4bvWDyNAFCJ9XsQ5ljSeDiyXwvi
M//FFsw114nlaA==
-----END CERTIFICATE-----
Generated at Mon May 12 13:43:27 2025 by rpki-client