Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft
File: BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft (raw, json)
Hash identifier: 4KJ9VH1dGFiR+/HTUEOP4k51Wcy3MVdOJG/dIZpUBs4=
Subject key identifier: 6F:7B:7B:C0:8E:AD:82:9F:65:1D:AE:C1:45:5B:52:D4:3B:C3:4D:20
Authority key identifier: 06:17:02:D2:C2:91:95:FA:0A:7D:B1:1E:E4:65:F0:C0:54:5D:17:09
Certificate issuer: /CN=061702d2c29195fa0a7db11ee465f0c0545d1709
Certificate serial: 0196B935D3F229AF1A147F45BAF4EFEB7BF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft
Manifest number: 1531
Signing time: Sat 10 May 2025 08:00:34 +0000
Manifest this update: Sat 10 May 2025 08:00:34 +0000
Manifest next update: Sun 11 May 2025 08:00:34 +0000
Files and hashes: 1: BhcC0sKRlfoKfbEe5GXwwFRdFwk.crl (hash: CWCVWKJFp+3WjFy7FBw2tQtVZ054BhrdsxdfD3/LpAQ=)
2: N7TBLk6ijg60Rw5drnJxmPzvOok.roa (hash: Gzj1MrzdxuXElz1N9UYhs6KigXCuOfoYMXiwL2fVYSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:35:d3:f2:29:af:1a:14:7f:45:ba:f4:ef:eb:7b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061702d2c29195fa0a7db11ee465f0c0545d1709
Validity
Not Before: May 10 08:00:34 2025 GMT
Not After : May 11 08:00:34 2025 GMT
Subject: CN=6f7b7bc08ead829f651daec1455b52d43bc34d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:19:a9:a9:ef:30:70:7a:3d:54:68:93:51:1a:
7d:85:8c:81:c1:c8:f7:bc:d4:4c:7f:ce:66:2c:38:
48:2d:f0:6b:a0:9f:a0:df:8e:95:41:4d:64:85:95:
3a:eb:47:d1:1e:44:3d:b3:61:b8:e0:58:1a:f7:34:
6b:64:10:e4:2b:6e:31:e0:52:c2:c4:f9:45:b3:9a:
7a:10:27:0c:15:b2:df:c3:18:10:17:10:85:b5:95:
ec:cf:74:94:20:f4:c9:ab:fa:dd:f0:c0:f0:23:18:
13:7a:18:09:71:d4:df:4b:01:95:cf:43:93:4a:b2:
87:f8:89:3a:1c:a7:11:67:90:21:44:32:88:ed:f7:
32:e9:85:39:18:f0:6b:2e:73:62:01:39:69:ab:6d:
34:d8:34:bd:47:91:99:2a:97:78:a1:63:b4:d3:c4:
3d:55:31:06:54:6a:56:7c:25:4e:94:c7:d8:d4:9b:
56:3d:6e:05:36:f2:9b:cf:b9:c4:aa:17:5e:ed:17:
e9:e0:4c:00:2c:5a:18:59:f3:fd:da:68:0b:a9:73:
67:27:ac:5d:0f:dd:de:61:98:b5:aa:ae:3f:48:3b:
c7:2b:68:05:be:40:0c:0a:06:94:75:ed:08:0e:a5:
84:40:9b:77:1f:28:cd:90:2c:09:53:66:60:e4:c9:
44:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:7B:7B:C0:8E:AD:82:9F:65:1D:AE:C1:45:5B:52:D4:3B:C3:4D:20
X509v3 Authority Key Identifier:
keyid:06:17:02:D2:C2:91:95:FA:0A:7D:B1:1E:E4:65:F0:C0:54:5D:17:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ce:62:90:4f:1a:5f:29:b7:66:84:2d:e3:dc:71:d0:2b:a0:
af:6b:f1:9a:c2:77:92:32:1e:06:e7:bc:f1:93:92:55:72:2e:
b0:b0:67:9b:0a:70:f8:2c:b5:99:a8:fa:30:91:c7:66:96:f7:
20:ec:9e:f7:c9:7a:46:08:fc:4e:45:cb:0f:2b:f2:2b:b7:a3:
ca:c0:4a:7d:f5:cb:35:e1:00:87:8c:5d:de:78:72:8b:81:35:
bf:31:4e:ab:f4:78:5d:37:56:15:a9:34:d6:37:60:8c:82:64:
a2:38:90:ac:c0:66:d8:54:b4:4b:a4:61:ac:db:7a:7f:aa:03:
8d:35:b2:6b:5f:63:86:0e:55:3c:d3:65:e9:4d:34:39:b0:7d:
da:ef:05:8d:4e:48:30:cd:83:d0:d4:11:a6:09:a2:40:76:23:
9d:a2:23:22:af:b3:f6:96:86:7d:ac:51:46:81:5a:7f:43:3b:
29:99:30:11:57:54:a2:54:fa:98:d6:e1:be:e4:18:3e:41:99:
a7:28:2e:91:30:b3:1c:17:d1:33:42:b0:2d:3a:08:db:bf:11:
be:78:0f:e8:70:c0:a6:10:50:3f:fe:90:45:70:87:4e:cc:97:
4b:5d:38:7d:b7:e8:6c:f3:27:6f:7c:82:81:04:60:1d:2c:38:
4a:b0:6d:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa5NdPyKa8aFH9FuvTv63v3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MTcwMmQyYzI5MTk1ZmEwYTdkYjExZWU0NjVmMGMwNTQ1
ZDE3MDkwHhcNMjUwNTEwMDgwMDM0WhcNMjUwNTExMDgwMDM0WjAzMTEwLwYDVQQD
Eyg2ZjdiN2JjMDhlYWQ4MjlmNjUxZGFlYzE0NTViNTJkNDNiYzM0ZDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBmpqe8wcHo9VGiTURp9hYyBwcj3
vNRMf85mLDhILfBroJ+g346VQU1khZU660fRHkQ9s2G44Fga9zRrZBDkK24x4FLC
xPlFs5p6ECcMFbLfwxgQFxCFtZXsz3SUIPTJq/rd8MDwIxgTehgJcdTfSwGVz0OT
SrKH+Ik6HKcRZ5AhRDKI7fcy6YU5GPBrLnNiATlpq2002DS9R5GZKpd4oWO008Q9
VTEGVGpWfCVOlMfY1JtWPW4FNvKbz7nEqhde7Rfp4EwALFoYWfP92mgLqXNnJ6xd
D93eYZi1qq4/SDvHK2gFvkAMCgaUde0IDqWEQJt3HyjNkCwJU2Zg5MlEtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG97e8COrYKfZR2uwUVbUtQ7w00gMB8GA1UdIwQY
MBaAFAYXAtLCkZX6Cn2xHuRl8MBUXRcJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmhjQzBzS1JsZm9LZmJFZTVHWHd3RlJkRndrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8wMGIyOGItY2M3Mi00NDA2LWI2ZDgt
NGM1MWM2Nzk3YzFmLzEvQmhjQzBzS1JsZm9LZmJFZTVHWHd3RlJkRndrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8wMGIyOGItY2M3Mi00NDA2LWI2ZDgtNGM1MWM2Nzk3YzFm
LzEvQmhjQzBzS1JsZm9LZmJFZTVHWHd3RlJkRndrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN85ikE8a
Xym3ZoQt49xx0Cugr2vxmsJ3kjIeBue88ZOSVXIusLBnmwpw+Cy1maj6MJHHZpb3
IOye98l6Rgj8TkXLDyvyK7ejysBKffXLNeEAh4xd3nhyi4E1vzFOq/R4XTdWFak0
1jdgjIJkojiQrMBm2FS0S6RhrNt6f6oDjTWya19jhg5VPNNl6U00ObB92u8FjU5I
MM2D0NQRpgmiQHYjnaIjIq+z9paGfaxRRoFaf0M7KZkwEVdUolT6mNbhvuQYPkGZ
pygukTCzHBfRM0KwLToI278RvngP6HDAphBQP/6QRXCHTsyXS104fbfobPMnb3yC
gQRgHSw4SrBt9A==
-----END CERTIFICATE-----
Generated at Sat May 10 16:53:54 2025 by rpki-client