Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft
File: bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft (raw, json)
Hash identifier: dayiLfQltgVx7IICRXZD4SN0+KShqAXP0DTkvcpMjCQ=
Subject key identifier: 23:5E:F5:9E:A4:EB:99:CF:7C:CB:21:86:85:52:4A:DA:09:C8:89:62
Authority key identifier: 6C:DA:15:00:F5:C9:63:ED:23:4F:D9:48:59:F2:3B:32:F4:88:5D:FC
Certificate issuer: /CN=6cda1500f5c963ed234fd94859f23b32f4885dfc
Certificate serial: 0196C013B6F38E6FFCC3F79765C941E27FC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft
Manifest number: 1314
Signing time: Sun 11 May 2025 16:00:39 +0000
Manifest this update: Sun 11 May 2025 16:00:39 +0000
Manifest next update: Mon 12 May 2025 16:00:39 +0000
Files and hashes: 1: VL7EtVPW-Ba0tPYDXOg-sXCbn4U.roa (hash: gs/UbUcaVfJny1jbjzMdFc3Au+82Qsl/IH1AWl7JplE=)
2: bNoVAPXJY-0jT9lIWfI7MvSIXfw.crl (hash: jLSo01zJnPuSEVkBeUptHSYD76Fr2EHZ0XPy2HiS8O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:13:b6:f3:8e:6f:fc:c3:f7:97:65:c9:41:e2:7f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cda1500f5c963ed234fd94859f23b32f4885dfc
Validity
Not Before: May 11 16:00:39 2025 GMT
Not After : May 12 16:00:39 2025 GMT
Subject: CN=235ef59ea4eb99cf7ccb218685524ada09c88962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5e:43:da:01:23:cb:b9:d2:fa:da:ca:30:f1:
dd:fd:0a:c9:a3:f2:8f:de:52:9b:99:25:6d:59:29:
8a:a9:08:9b:0a:b3:51:f8:14:fa:de:5d:e1:1c:07:
2e:15:eb:55:59:d0:cc:d6:27:68:58:55:71:7f:a7:
fb:a1:59:61:2a:72:3c:24:da:a8:ed:5b:c4:26:5b:
da:ad:ed:6f:09:a1:eb:9a:10:98:41:8c:9d:7e:8f:
70:df:ea:7d:9a:fd:a6:e4:9c:db:43:af:99:9f:8b:
95:56:9b:a1:01:27:66:dd:b5:73:1c:c1:22:c1:f7:
26:98:2f:d2:14:74:3a:df:46:f5:f4:8a:ce:2e:48:
1b:51:4e:61:61:0a:eb:7e:a4:0a:1d:75:54:1f:ae:
5c:d5:85:17:f3:bb:67:54:c1:a7:b5:1b:b2:86:da:
f7:03:67:d1:e0:d9:26:48:3a:a5:19:34:23:15:1d:
09:54:5f:f3:85:c1:74:83:28:35:0c:01:08:3f:0e:
d2:cf:81:8f:c5:45:1f:68:7a:14:e6:28:88:87:97:
36:b3:95:60:8c:7e:50:07:e9:f5:5a:0c:59:ef:c8:
f6:44:44:73:36:16:a3:64:a1:54:f9:8b:d8:71:71:
7e:11:f5:08:e2:21:fd:96:91:89:7d:da:4f:90:16:
95:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5E:F5:9E:A4:EB:99:CF:7C:CB:21:86:85:52:4A:DA:09:C8:89:62
X509v3 Authority Key Identifier:
keyid:6C:DA:15:00:F5:C9:63:ED:23:4F:D9:48:59:F2:3B:32:F4:88:5D:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:81:f4:a6:9d:fd:a5:94:5e:81:d9:bb:86:28:f6:8d:ab:67:
ad:ac:10:02:8d:aa:70:92:3b:1d:b5:b0:9f:25:34:55:c6:4c:
d1:28:57:38:48:f2:4c:12:8a:09:95:2b:a0:11:84:e7:d1:0b:
b1:1d:b6:94:b2:af:9f:64:d4:b9:3d:4a:ec:83:36:b4:34:ca:
a9:13:11:16:9c:89:57:f0:9d:bd:3c:e6:90:0d:3d:4b:51:6b:
a6:e5:41:a4:22:57:04:3c:c9:fe:54:95:ae:61:15:aa:34:e5:
0b:82:70:86:df:23:15:15:5f:a0:e2:3b:00:bd:e1:46:9f:7f:
36:ea:05:bd:a0:e1:2b:b0:3d:1d:74:31:43:5d:24:a7:45:35:
c4:19:8a:a6:ec:7c:93:85:5c:49:ff:78:b5:ee:02:3c:94:8c:
17:3e:a5:7a:3b:06:17:76:10:bb:73:93:20:20:ae:5f:f5:a3:
c2:f8:c2:64:4b:91:a0:10:35:e1:e5:ec:de:17:7c:c0:1f:c5:
0d:59:5d:b0:37:4d:1e:16:5d:b4:1e:98:56:db:a5:2a:39:fb:
97:99:de:12:0b:a3:7c:01:f8:2d:dc:17:e8:28:c8:17:05:f5:
50:33:93:81:5e:7a:25:d5:30:d5:f1:d7:f3:57:cd:40:c5:1a:
cb:2c:7d:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbAE7bzjm/8w/eXZclB4n/BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZGExNTAwZjVjOTYzZWQyMzRmZDk0ODU5ZjIzYjMyZjQ4
ODVkZmMwHhcNMjUwNTExMTYwMDM5WhcNMjUwNTEyMTYwMDM5WjAzMTEwLwYDVQQD
EygyMzVlZjU5ZWE0ZWI5OWNmN2NjYjIxODY4NTUyNGFkYTA5Yzg4OTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyV5D2gEjy7nS+trKMPHd/QrJo/KP
3lKbmSVtWSmKqQibCrNR+BT63l3hHAcuFetVWdDM1idoWFVxf6f7oVlhKnI8JNqo
7VvEJlvare1vCaHrmhCYQYydfo9w3+p9mv2m5JzbQ6+Zn4uVVpuhASdm3bVzHMEi
wfcmmC/SFHQ630b19IrOLkgbUU5hYQrrfqQKHXVUH65c1YUX87tnVMGntRuyhtr3
A2fR4NkmSDqlGTQjFR0JVF/zhcF0gyg1DAEIPw7Sz4GPxUUfaHoU5iiIh5c2s5Vg
jH5QB+n1WgxZ78j2RERzNhajZKFU+YvYcXF+EfUI4iH9lpGJfdpPkBaV8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCNe9Z6k65nPfMshhoVSStoJyIliMB8GA1UdIwQY
MBaAFGzaFQD1yWPtI0/ZSFnyOzL0iF38MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk5vVkFQWEpZLTBqVDlsSVdmSTdNdlNJWGZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jNGE0NWYtNDIxMy00ZjAxLTk4ZjYt
OThlYjUzYjk1MDJhLzEvYk5vVkFQWEpZLTBqVDlsSVdmSTdNdlNJWGZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9jNGE0NWYtNDIxMy00ZjAxLTk4ZjYtOThlYjUzYjk1MDJh
LzEvYk5vVkFQWEpZLTBqVDlsSVdmSTdNdlNJWGZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuIH0pp39
pZRegdm7hij2jatnrawQAo2qcJI7HbWwnyU0VcZM0ShXOEjyTBKKCZUroBGE59EL
sR22lLKvn2TUuT1K7IM2tDTKqRMRFpyJV/CdvTzmkA09S1FrpuVBpCJXBDzJ/lSV
rmEVqjTlC4Jwht8jFRVfoOI7AL3hRp9/NuoFvaDhK7A9HXQxQ10kp0U1xBmKpux8
k4VcSf94te4CPJSMFz6lejsGF3YQu3OTICCuX/WjwvjCZEuRoBA14eXs3hd8wB/F
DVldsDdNHhZdtB6YVtulKjn7l5neEgujfAH4LdwX6CjIFwX1UDOTgV56JdUw1fHX
81fNQMUayyx9QQ==
-----END CERTIFICATE-----
Generated at Mon May 12 02:14:59 2025 by rpki-client