Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
File: BeHQfebxKPRpxMOzAorfjU034tk.mft (raw, json)
Hash identifier: qLOv5JkEsFv0tEn8sGWDLwsjq/JQo99WGmtvIlmQlQk=
Subject key identifier: 2E:75:99:AA:C4:84:3A:95:74:8D:43:63:AA:45:28:40:A1:4D:F0:9B
Authority key identifier: 05:E1:D0:7D:E6:F1:28:F4:69:C4:C3:B3:02:8A:DF:8D:4D:37:E2:D9
Certificate issuer: /CN=05e1d07de6f128f469c4c3b3028adf8d4d37e2d9
Certificate serial: 0196BB23D79CEF69710840183EACAA97F6AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
Manifest number: 1530
Signing time: Sat 10 May 2025 17:00:10 +0000
Manifest this update: Sat 10 May 2025 17:00:10 +0000
Manifest next update: Sun 11 May 2025 17:00:10 +0000
Files and hashes: 1: 5_4qOd1GTRdKd6DbyMT4VAzgn60.roa (hash: Q449y6NU5T0NgahXGNO0aRD91GR+m9cfLNErlQRiyf0=)
2: BeHQfebxKPRpxMOzAorfjU034tk.crl (hash: ENODm3ht2LuXL0c63lP7TmtuxzvqkI9gLYHQg0llLZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:23:d7:9c:ef:69:71:08:40:18:3e:ac:aa:97:f6:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05e1d07de6f128f469c4c3b3028adf8d4d37e2d9
Validity
Not Before: May 10 17:00:10 2025 GMT
Not After : May 11 17:00:10 2025 GMT
Subject: CN=2e7599aac4843a95748d4363aa452840a14df09b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c1:2b:d0:af:5e:22:75:6d:9d:b9:8d:3e:0e:
8a:95:aa:fb:cb:48:1f:de:46:51:24:e4:b8:94:75:
4a:6d:6e:df:aa:ed:2c:f4:5b:09:9e:fd:53:ba:11:
8c:a0:52:8a:8e:53:73:46:69:fb:0e:2b:3e:36:67:
64:b3:2d:75:44:60:23:f3:f2:fb:10:d0:65:9f:90:
df:7b:5f:b4:05:a6:7b:5f:a7:2d:bc:08:f0:e1:db:
1b:0c:64:af:a5:49:91:5c:ee:20:91:fa:c0:0b:74:
45:80:27:43:10:2b:ad:be:d4:f0:98:52:7a:ea:55:
e9:ab:2d:80:6c:97:e0:e1:76:d7:a9:e7:3a:b0:9b:
bf:a1:a1:a9:43:1f:46:46:69:5f:3c:d5:24:67:09:
78:d8:1c:fd:53:2a:8a:aa:d8:bb:59:3f:f5:f8:de:
18:58:19:1a:cc:d4:83:72:69:f6:f1:c1:80:4d:4a:
e7:62:78:d4:a3:c1:1b:a6:a9:02:cc:80:29:1a:1d:
e7:59:20:45:a5:ce:16:d8:f6:75:9a:2b:ed:cc:ff:
cd:5f:25:c5:f1:d5:7e:92:9f:30:47:b0:44:1b:38:
0c:fb:3e:c9:dc:9e:fd:d1:79:6d:70:0b:3f:af:c4:
ce:66:99:b7:7d:ed:81:dd:cb:a6:c6:f2:85:a0:75:
06:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:75:99:AA:C4:84:3A:95:74:8D:43:63:AA:45:28:40:A1:4D:F0:9B
X509v3 Authority Key Identifier:
keyid:05:E1:D0:7D:E6:F1:28:F4:69:C4:C3:B3:02:8A:DF:8D:4D:37:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:64:01:06:09:69:20:63:1f:ba:29:03:fe:a6:27:27:1c:be:
4c:61:c3:b6:79:cd:1c:6e:ab:ae:44:92:ee:40:2b:b0:9c:19:
76:45:4b:c0:9f:90:a5:48:d9:7f:98:81:28:49:98:a3:20:6f:
3f:5b:b5:06:b7:b0:2a:54:53:e3:68:e2:fb:24:c1:0c:c9:56:
19:15:73:2f:b1:a9:13:2b:3f:3c:b4:80:ad:80:52:49:7b:fb:
93:0d:1f:a0:d8:46:c6:af:47:24:a5:1f:46:3b:ca:ec:d5:74:
da:e2:c2:01:c8:42:61:95:fa:0c:fa:b9:87:3b:bd:81:11:4d:
77:8f:fd:c1:31:d9:8f:76:0a:2f:fd:5d:24:10:00:d5:25:4b:
cd:67:c6:a9:8d:71:70:60:81:4a:61:50:87:af:79:e5:67:0d:
4d:7a:46:47:aa:44:75:81:b8:02:dc:21:1a:5d:b9:e4:71:10:
0c:2f:87:66:07:76:5f:6e:cf:81:b6:f4:2c:21:38:0a:1e:12:
b1:b1:49:8c:ee:8d:d0:e4:16:46:a4:de:ce:d4:7b:b0:16:c3:
2b:7d:2a:26:e2:e9:a8:ad:ae:10:07:ec:ca:cf:85:d5:75:14:
8f:ac:62:eb:05:9b:96:1f:ef:08:79:2f:47:66:75:d0:76:f5:
5e:ca:9c:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7I9ec72lxCEAYPqyql/arMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZTFkMDdkZTZmMTI4ZjQ2OWM0YzNiMzAyOGFkZjhkNGQz
N2UyZDkwHhcNMjUwNTEwMTcwMDEwWhcNMjUwNTExMTcwMDEwWjAzMTEwLwYDVQQD
EygyZTc1OTlhYWM0ODQzYTk1NzQ4ZDQzNjNhYTQ1Mjg0MGExNGRmMDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsEr0K9eInVtnbmNPg6Klar7y0gf
3kZRJOS4lHVKbW7fqu0s9FsJnv1TuhGMoFKKjlNzRmn7Dis+Nmdksy11RGAj8/L7
ENBln5Dfe1+0BaZ7X6ctvAjw4dsbDGSvpUmRXO4gkfrAC3RFgCdDECutvtTwmFJ6
6lXpqy2AbJfg4XbXqec6sJu/oaGpQx9GRmlfPNUkZwl42Bz9UyqKqti7WT/1+N4Y
WBkazNSDcmn28cGATUrnYnjUo8EbpqkCzIApGh3nWSBFpc4W2PZ1mivtzP/NXyXF
8dV+kp8wR7BEGzgM+z7J3J790XltcAs/r8TOZpm3fe2B3cumxvKFoHUGOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC51marEhDqVdI1DY6pFKEChTfCbMB8GA1UdIwQY
MBaAFAXh0H3m8Sj0acTDswKK341NN+LZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmVIUWZlYnhLUFJweE1PekFvcmZqVTAzNHRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi85Y2U4ZjUtZmVkMi00N2VhLTgzYjMt
OGQxM2Y3YjNmMTQyLzEvQmVIUWZlYnhLUFJweE1PekFvcmZqVTAzNHRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi85Y2U4ZjUtZmVkMi00N2VhLTgzYjMtOGQxM2Y3YjNmMTQy
LzEvQmVIUWZlYnhLUFJweE1PekFvcmZqVTAzNHRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN2QBBglp
IGMfuikD/qYnJxy+TGHDtnnNHG6rrkSS7kArsJwZdkVLwJ+QpUjZf5iBKEmYoyBv
P1u1BrewKlRT42ji+yTBDMlWGRVzL7GpEys/PLSArYBSSXv7kw0foNhGxq9HJKUf
RjvK7NV02uLCAchCYZX6DPq5hzu9gRFNd4/9wTHZj3YKL/1dJBAA1SVLzWfGqY1x
cGCBSmFQh6955WcNTXpGR6pEdYG4AtwhGl255HEQDC+HZgd2X27Pgbb0LCE4Ch4S
sbFJjO6N0OQWRqTeztR7sBbDK30qJuLpqK2uEAfsys+F1XUUj6xi6wWblh/vCHkv
R2Z10Hb1XsqcfQ==
-----END CERTIFICATE-----
Generated at Sun May 11 02:28:42 2025 by rpki-client