Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.mft
File: BbzEhnSas6uATPEZjL9XWoQFqNQ.mft (raw, json)
Hash identifier: 9ltNP/hMGXdhLcMks+HC4Eq9bdMhacKpGYmdaEJy3oQ=
Subject key identifier: 00:8D:62:A3:EE:CE:C0:D7:B1:82:03:E4:42:16:6B:81:0B:D6:A8:78
Authority key identifier: 05:BC:C4:86:74:9A:B3:AB:80:4C:F1:19:8C:BF:57:5A:84:05:A8:D4
Certificate issuer: /CN=05bcc486749ab3ab804cf1198cbf575a8405a8d4
Certificate serial: 0196BB5B42D9456A27393AE14BF642937019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbzEhnSas6uATPEZjL9XWoQFqNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.mft
Manifest number: 0997
Signing time: Sat 10 May 2025 18:00:42 +0000
Manifest this update: Sat 10 May 2025 18:00:42 +0000
Manifest next update: Sun 11 May 2025 18:00:42 +0000
Files and hashes: 1: BbzEhnSas6uATPEZjL9XWoQFqNQ.crl (hash: WWcL0QHBF3/CaSBx7bgyteXFOVvhls7oldfMbYj5Xa4=)
2: HdSf7jxZaH01dUDGuwQ5_CAc8SM.roa (hash: vOZ90+a3LR4dhFjRdZIzUR1sgVMd52zRpkbxFOcgn4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbzEhnSas6uATPEZjL9XWoQFqNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 18:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:5b:42:d9:45:6a:27:39:3a:e1:4b:f6:42:93:70:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bcc486749ab3ab804cf1198cbf575a8405a8d4
Validity
Not Before: May 10 18:00:42 2025 GMT
Not After : May 11 18:00:42 2025 GMT
Subject: CN=008d62a3eecec0d7b18203e442166b810bd6a878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:52:cc:59:8a:28:2a:5c:ce:26:97:80:55:83:
61:c7:96:07:e0:7e:ab:08:d0:9e:94:ba:2c:c3:0b:
d6:51:37:1a:b3:9e:2f:2c:d7:83:c1:94:4a:d3:11:
7f:8d:bf:8c:94:6e:01:cf:de:9e:8c:54:f0:5b:6f:
fd:98:b4:5c:5f:4f:4d:da:89:8f:45:c3:7e:01:89:
5a:40:91:4f:9a:ee:1c:05:d2:02:db:78:e6:06:ae:
58:85:f3:82:75:f5:3b:49:a1:b9:c9:46:85:98:be:
96:31:74:b3:92:ed:ce:5e:c9:13:cf:18:3b:1b:f5:
70:3b:ed:0f:27:da:9c:c6:c1:2a:cc:25:b2:cc:be:
8a:e5:10:81:a4:a8:ab:65:d9:a6:de:d8:a5:40:3b:
96:e9:ec:65:f1:2b:8e:fd:27:11:52:b5:03:6b:fd:
03:1a:81:84:32:ff:9d:d6:8c:a3:39:2d:4c:09:b0:
4f:8c:93:3f:a1:d5:be:c2:7b:f8:9f:55:81:57:c9:
e2:eb:c6:cc:58:ce:13:22:dc:48:85:39:6b:17:09:
19:23:52:47:08:3a:52:21:9c:0d:af:d2:b4:5f:67:
44:8c:6d:06:5b:9b:15:2b:4b:2b:ad:40:da:e8:d6:
d5:6d:46:96:e0:22:7e:70:d5:7e:60:7d:75:cc:0c:
d5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8D:62:A3:EE:CE:C0:D7:B1:82:03:E4:42:16:6B:81:0B:D6:A8:78
X509v3 Authority Key Identifier:
keyid:05:BC:C4:86:74:9A:B3:AB:80:4C:F1:19:8C:BF:57:5A:84:05:A8:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbzEhnSas6uATPEZjL9XWoQFqNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c5:71:ad:e9:b1:ac:cb:45:d0:17:c7:3e:5d:47:a0:71:bb:
a1:31:2a:6f:34:53:09:e7:5a:1c:48:e1:7b:d9:90:b3:fe:b1:
e9:05:c9:fa:13:26:e6:15:3d:bf:ef:ef:11:2b:fc:96:1a:7b:
55:64:6f:ca:4f:40:c6:26:ec:8a:3d:87:dd:ab:45:a8:1f:05:
a1:99:e5:b3:08:3b:9f:b6:12:60:aa:23:b5:d4:3c:14:6d:9f:
fb:e0:5a:99:1f:e0:fd:02:7a:d1:7d:66:21:ff:08:0f:13:f3:
97:a6:71:71:61:5c:d0:bb:f4:4e:38:16:7b:07:24:5f:7b:3b:
a2:81:18:4f:a9:7a:f0:41:7c:3d:26:51:d7:b5:2d:cc:2c:6c:
ce:82:ee:29:e3:b3:d3:bc:ed:f7:98:80:73:fc:c9:5a:66:c9:
27:f5:07:43:f3:18:5c:ff:a6:07:90:c4:5b:93:57:59:3b:5f:
10:32:c5:67:de:ca:fa:df:f7:df:45:d1:9b:59:7a:f7:bd:5c:
e6:d3:fe:13:b2:5c:46:3d:69:64:ba:f4:50:86:1a:92:4c:26:
18:27:b8:7a:6b:c8:6e:95:c5:b4:63:1a:bd:bd:46:84:94:63:
a4:cd:c8:f9:2f:5d:c3:6e:c6:e3:c5:83:62:4b:d5:e5:4c:fc:
1d:5e:48:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7W0LZRWonOTrhS/ZCk3AZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YmNjNDg2NzQ5YWIzYWI4MDRjZjExOThjYmY1NzVhODQw
NWE4ZDQwHhcNMjUwNTEwMTgwMDQyWhcNMjUwNTExMTgwMDQyWjAzMTEwLwYDVQQD
EygwMDhkNjJhM2VlY2VjMGQ3YjE4MjAzZTQ0MjE2NmI4MTBiZDZhODc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VLMWYooKlzOJpeAVYNhx5YH4H6r
CNCelLoswwvWUTcas54vLNeDwZRK0xF/jb+MlG4Bz96ejFTwW2/9mLRcX09N2omP
RcN+AYlaQJFPmu4cBdIC23jmBq5YhfOCdfU7SaG5yUaFmL6WMXSzku3OXskTzxg7
G/VwO+0PJ9qcxsEqzCWyzL6K5RCBpKirZdmm3tilQDuW6exl8SuO/ScRUrUDa/0D
GoGEMv+d1oyjOS1MCbBPjJM/odW+wnv4n1WBV8ni68bMWM4TItxIhTlrFwkZI1JH
CDpSIZwNr9K0X2dEjG0GW5sVK0srrUDa6NbVbUaW4CJ+cNV+YH11zAzVlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFACNYqPuzsDXsYID5EIWa4EL1qh4MB8GA1UdIwQY
MBaAFAW8xIZ0mrOrgEzxGYy/V1qEBajUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmJ6RWhuU2FzNnVBVFBFWmpMOVhXb1FGcU5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC81MzVhNjctZjU0MC00ZjE0LWFkMTEt
N2Y2OTlhODNiYjBjLzEvQmJ6RWhuU2FzNnVBVFBFWmpMOVhXb1FGcU5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC81MzVhNjctZjU0MC00ZjE0LWFkMTEtN2Y2OTlhODNiYjBj
LzEvQmJ6RWhuU2FzNnVBVFBFWmpMOVhXb1FGcU5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi8Vxremx
rMtF0BfHPl1HoHG7oTEqbzRTCedaHEjhe9mQs/6x6QXJ+hMm5hU9v+/vESv8lhp7
VWRvyk9Axibsij2H3atFqB8FoZnlswg7n7YSYKojtdQ8FG2f++BamR/g/QJ60X1m
If8IDxPzl6ZxcWFc0Lv0TjgWewckX3s7ooEYT6l68EF8PSZR17UtzCxszoLuKeOz
07zt95iAc/zJWmbJJ/UHQ/MYXP+mB5DEW5NXWTtfEDLFZ97K+t/330XRm1l6971c
5tP+E7JcRj1pZLr0UIYakkwmGCe4emvIbpXFtGMavb1GhJRjpM3I+S9dw27G48WD
YkvV5Uz8HV5Iaw==
-----END CERTIFICATE-----
Generated at Sun May 11 00:46:43 2025 by rpki-client