Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.mft
File: BbMBfBaTuUW17aCR7JP4XBvh3zY.mft (raw, json)
Hash identifier: kCPY2y4SvDjUWC1m6xU5H5RWRMy9kV/kRati+oQZflA=
Subject key identifier: 45:10:3A:8C:70:1D:98:AE:FE:8F:20:7C:40:6A:76:53:A0:A8:B2:2E
Authority key identifier: 05:B3:01:7C:16:93:B9:45:B5:ED:A0:91:EC:93:F8:5C:1B:E1:DF:36
Certificate issuer: /CN=05b3017c1693b945b5eda091ec93f85c1be1df36
Certificate serial: 0196C8041BA09E58810E91B0E769D98F83F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbMBfBaTuUW17aCR7JP4XBvh3zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.mft
Manifest number: 153D
Signing time: Tue 13 May 2025 05:00:34 +0000
Manifest this update: Tue 13 May 2025 05:00:34 +0000
Manifest next update: Wed 14 May 2025 05:00:34 +0000
Files and hashes: 1: 0PqHNIextYUeWaRuukCU9ZDkhXg.roa (hash: PV9oPev7zk3qt+GmlvP5jRJprYKlp0h1IX1LMGGntk4=)
2: BbMBfBaTuUW17aCR7JP4XBvh3zY.crl (hash: h4AQjqrpnX9T80juaZGzi5swJ/+9BHnRy4VVb0FfT8o=)
3: QOBXUK2eWdi2Xs0eVrU9f29djBA.roa (hash: FlnZK78Kp47RPmgz3alOCKMVyfm/4WPjMFqp9esIgFA=)
4: k3zrAg9lFEYGsBjnQKtAuswdHEU.roa (hash: akHKvvsfipvW6//S4H4PpXCZc/FACD9ypl19jEaFgQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbMBfBaTuUW17aCR7JP4XBvh3zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:04:1b:a0:9e:58:81:0e:91:b0:e7:69:d9:8f:83:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b3017c1693b945b5eda091ec93f85c1be1df36
Validity
Not Before: May 13 05:00:34 2025 GMT
Not After : May 14 05:00:34 2025 GMT
Subject: CN=45103a8c701d98aefe8f207c406a7653a0a8b22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:dc:47:7c:85:98:b8:5c:07:7c:59:03:69:45:
d9:a6:fe:fd:c5:d0:e2:9b:30:bc:b9:c2:d0:f7:6f:
d9:e6:fb:2a:7d:3a:ce:38:10:ef:f7:d4:38:68:a0:
cf:03:87:1f:cd:57:b3:cb:db:2a:a6:c8:49:e4:fd:
b4:ac:58:2d:d5:88:e6:2b:d6:75:7f:d2:71:6f:80:
f7:d3:fc:86:11:a1:35:1d:79:a2:47:58:17:cf:4e:
5d:98:db:38:19:80:6d:ea:88:19:26:67:3e:4a:ad:
c2:ed:2b:28:80:c9:82:95:e5:04:b0:96:44:b0:12:
d7:f5:3f:7f:f5:29:de:51:e3:05:aa:3b:70:98:a0:
68:68:c6:ad:a7:f1:14:b7:21:37:c6:a6:9a:f0:d0:
70:86:79:80:65:85:04:79:6e:de:45:a7:ec:f1:9b:
09:42:c1:98:e0:22:f2:25:1e:dc:32:d1:85:f4:8f:
12:bd:c7:21:9c:56:28:5a:44:32:72:43:21:2c:d7:
02:f9:4f:ab:a7:24:26:47:09:ad:09:b6:b6:c5:90:
42:ef:ac:71:58:97:d4:ee:91:d8:cb:0a:b6:06:50:
10:bc:71:e5:f1:38:da:6f:05:0b:ac:3d:83:ad:73:
ad:b1:c2:67:b5:ba:9f:e8:eb:f6:f4:f8:03:c3:04:
2e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:10:3A:8C:70:1D:98:AE:FE:8F:20:7C:40:6A:76:53:A0:A8:B2:2E
X509v3 Authority Key Identifier:
keyid:05:B3:01:7C:16:93:B9:45:B5:ED:A0:91:EC:93:F8:5C:1B:E1:DF:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbMBfBaTuUW17aCR7JP4XBvh3zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:14:7c:a9:6e:38:b8:15:bb:33:6e:42:61:98:37:57:39:9b:
bf:bf:c1:46:04:d9:6d:5e:b2:83:58:9f:93:f9:6e:e8:a4:79:
e7:38:fe:a0:53:a6:6b:a9:0e:11:81:d4:ad:4b:4d:b1:99:3a:
0a:2f:d8:cd:23:0c:a2:63:53:6f:2f:f5:94:9a:30:f6:f8:98:
24:e6:e8:81:b6:3e:0d:1a:c5:68:52:c3:ca:73:51:94:5e:c4:
1d:f2:48:ca:94:31:d3:43:95:89:56:50:5e:99:74:7e:45:2c:
e2:74:4d:14:ab:65:01:7d:5a:3c:ab:b8:99:02:0c:df:ed:e3:
7c:19:4c:0b:80:ec:38:46:8b:1c:e1:3c:3d:ac:f0:cd:fe:bb:
46:4b:e0:17:54:7b:c8:ca:64:92:41:1f:ac:bb:ca:e0:9a:52:
d5:38:45:d9:09:ea:cf:4d:51:bd:65:e2:1d:52:af:af:42:f6:
b1:3a:89:73:c3:9e:45:3f:aa:4f:aa:7f:36:0e:6e:51:a0:03:
69:3a:fd:7a:55:b5:da:fa:ae:46:fc:fc:51:86:a7:ab:4c:d5:
a2:e4:bf:e1:ea:ef:1e:52:6e:ae:ce:96:74:7d:f5:76:5f:84:
bd:3a:4a:a3:6f:fd:16:c1:5c:f3:d0:89:c0:91:78:a6:52:9b:
9c:0e:77:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbIBBugnliBDpGw52nZj4PyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YjMwMTdjMTY5M2I5NDViNWVkYTA5MWVjOTNmODVjMWJl
MWRmMzYwHhcNMjUwNTEzMDUwMDM0WhcNMjUwNTE0MDUwMDM0WjAzMTEwLwYDVQQD
Eyg0NTEwM2E4YzcwMWQ5OGFlZmU4ZjIwN2M0MDZhNzY1M2EwYThiMjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztxHfIWYuFwHfFkDaUXZpv79xdDi
mzC8ucLQ92/Z5vsqfTrOOBDv99Q4aKDPA4cfzVezy9sqpshJ5P20rFgt1YjmK9Z1
f9Jxb4D30/yGEaE1HXmiR1gXz05dmNs4GYBt6ogZJmc+Sq3C7SsogMmCleUEsJZE
sBLX9T9/9SneUeMFqjtwmKBoaMatp/EUtyE3xqaa8NBwhnmAZYUEeW7eRafs8ZsJ
QsGY4CLyJR7cMtGF9I8SvcchnFYoWkQyckMhLNcC+U+rpyQmRwmtCba2xZBC76xx
WJfU7pHYywq2BlAQvHHl8TjabwULrD2DrXOtscJntbqf6Ov29PgDwwQuDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEUQOoxwHZiu/o8gfEBqdlOgqLIuMB8GA1UdIwQY
MBaAFAWzAXwWk7lFte2gkeyT+Fwb4d82MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmJNQmZCYVR1VVcxN2FDUjdKUDRYQnZoM3pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC81Zjc1YWQtODNhNi00OTg0LTg2ZmQt
YWEyNzdlMzg5ZmRjLzEvQmJNQmZCYVR1VVcxN2FDUjdKUDRYQnZoM3pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC81Zjc1YWQtODNhNi00OTg0LTg2ZmQtYWEyNzdlMzg5ZmRj
LzEvQmJNQmZCYVR1VVcxN2FDUjdKUDRYQnZoM3pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHxR8qW44
uBW7M25CYZg3Vzmbv7/BRgTZbV6yg1ifk/lu6KR55zj+oFOma6kOEYHUrUtNsZk6
Ci/YzSMMomNTby/1lJow9viYJObogbY+DRrFaFLDynNRlF7EHfJIypQx00OViVZQ
Xpl0fkUs4nRNFKtlAX1aPKu4mQIM3+3jfBlMC4DsOEaLHOE8Pazwzf67RkvgF1R7
yMpkkkEfrLvK4JpS1ThF2Qnqz01RvWXiHVKvr0L2sTqJc8OeRT+qT6p/Ng5uUaAD
aTr9elW12vquRvz8UYanq0zVouS/4ervHlJurs6WdH31dl+EvTpKo2/9FsFc89CJ
wJF4plKbnA534w==
-----END CERTIFICATE-----
Generated at Tue May 13 10:10:13 2025 by rpki-client