Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.mft
File: bwXPdx2ZkucP9nQOayBiDOUtDYs.mft (raw, json)
Hash identifier: 25oFnYsOcc9jKFN0KDrchUjzSrwHwh1DDFtUSCoOxis=
Subject key identifier: 84:81:7E:56:36:B5:4E:74:3C:59:57:9F:E0:3B:5F:BC:17:B1:E9:63
Authority key identifier: 6F:05:CF:77:1D:99:92:E7:0F:F6:74:0E:6B:20:62:0C:E5:2D:0D:8B
Certificate issuer: /CN=6f05cf771d9992e70ff6740e6b20620ce52d0d8b
Certificate serial: 0196B5C6C37FC7E7C9BFC97B32D14BF44228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwXPdx2ZkucP9nQOayBiDOUtDYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.mft
Manifest number: 0ACF
Signing time: Fri 09 May 2025 16:00:24 +0000
Manifest this update: Fri 09 May 2025 16:00:24 +0000
Manifest next update: Sat 10 May 2025 16:00:24 +0000
Files and hashes: 1: bwXPdx2ZkucP9nQOayBiDOUtDYs.crl (hash: IPn9Ex/iZGYdn5dwquto8+UHG0BUNnp3Woe4JXtl0fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bwXPdx2ZkucP9nQOayBiDOUtDYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 16:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:c6:c3:7f:c7:e7:c9:bf:c9:7b:32:d1:4b:f4:42:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f05cf771d9992e70ff6740e6b20620ce52d0d8b
Validity
Not Before: May 9 16:00:24 2025 GMT
Not After : May 10 16:00:24 2025 GMT
Subject: CN=84817e5636b54e743c59579fe03b5fbc17b1e963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:92:97:dc:8a:93:25:e2:9b:d7:0f:4f:ff:9e:
2d:0a:d7:f5:06:55:85:96:2e:e2:03:c4:11:d9:64:
9e:ab:1f:bb:58:5b:44:a2:69:7b:37:5e:9b:a2:37:
fb:c7:06:f5:c7:1f:5c:57:c1:f6:ef:19:9a:f2:96:
28:ea:89:65:50:69:ae:02:a7:6a:09:c7:b8:d8:c0:
b7:29:b7:c9:f9:98:cd:e9:7b:46:3a:29:6a:3e:c9:
6d:a9:3c:2b:f4:af:63:4b:45:aa:03:00:8d:17:3f:
09:d2:92:e2:de:98:76:79:fc:67:6c:35:24:04:b6:
be:4a:c6:ac:64:68:49:29:03:41:ac:0f:1e:47:ac:
4f:84:c2:0c:69:f2:13:25:95:33:1d:0b:02:54:c8:
b6:9f:5f:68:b4:4e:6d:d9:bb:dc:27:b9:79:4a:d6:
45:1f:c8:d7:71:e0:19:1e:cc:2f:5e:d8:7b:73:02:
65:8f:5b:c6:86:e2:dd:18:d0:74:4a:1e:71:00:55:
f2:0c:b5:e4:1c:30:5b:af:9f:8b:79:29:d5:d9:c2:
fc:f6:d2:1d:03:f2:56:ef:87:e1:64:7d:3b:c7:81:
55:6e:71:74:c7:d5:7c:a8:33:b1:f5:03:66:b9:4d:
de:61:a5:61:97:7b:c8:7d:8d:73:dc:ae:26:6e:f9:
96:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:81:7E:56:36:B5:4E:74:3C:59:57:9F:E0:3B:5F:BC:17:B1:E9:63
X509v3 Authority Key Identifier:
keyid:6F:05:CF:77:1D:99:92:E7:0F:F6:74:0E:6B:20:62:0C:E5:2D:0D:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwXPdx2ZkucP9nQOayBiDOUtDYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:e0:91:9e:11:1b:65:5c:2f:a9:5a:53:e3:0a:40:47:c7:2f:
7b:f3:ee:aa:bf:b2:7a:50:25:07:43:ad:32:a2:7f:91:05:b5:
db:58:b8:01:10:99:f0:f9:9d:6b:3d:61:8d:26:42:33:25:cb:
76:42:53:76:14:94:40:9d:bd:a0:39:e0:0e:cd:7b:64:91:65:
c3:50:64:87:f3:dc:76:34:cd:3c:e5:56:b5:71:f0:29:5a:80:
af:ca:ec:ac:a2:8e:33:80:9c:ce:aa:f5:a2:aa:4f:8f:05:8b:
c8:63:6c:a1:18:7c:0d:d6:0f:cb:f2:e4:25:f1:cd:8b:63:d1:
57:17:7c:8b:0c:11:16:a3:39:59:09:0e:c9:fa:cd:92:85:b0:
03:75:2b:fb:0b:6e:65:9b:b6:f5:b0:a5:8c:71:19:55:0f:16:
02:8f:81:2d:d8:10:05:eb:d8:0e:47:12:f0:f2:b3:b4:ff:fd:
9a:35:c2:d7:7e:0e:6b:53:3b:8b:46:ce:47:e8:35:83:e0:db:
f6:39:04:55:2b:d2:cf:59:9d:08:55:f7:0c:a4:2e:1b:ce:a2:
04:37:5b:bb:dc:c5:5f:f3:60:5a:7c:00:3f:c1:13:85:22:1c:
81:dd:3a:4a:eb:40:da:5f:83:a1:04:da:01:00:55:cc:97:7b:
9c:cc:b6:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa1xsN/x+fJv8l7MtFL9EIoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMDVjZjc3MWQ5OTkyZTcwZmY2NzQwZTZiMjA2MjBjZTUy
ZDBkOGIwHhcNMjUwNTA5MTYwMDI0WhcNMjUwNTEwMTYwMDI0WjAzMTEwLwYDVQQD
Eyg4NDgxN2U1NjM2YjU0ZTc0M2M1OTU3OWZlMDNiNWZiYzE3YjFlOTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5KX3IqTJeKb1w9P/54tCtf1BlWF
li7iA8QR2WSeqx+7WFtEoml7N16bojf7xwb1xx9cV8H27xma8pYo6ollUGmuAqdq
Cce42MC3KbfJ+ZjN6XtGOilqPsltqTwr9K9jS0WqAwCNFz8J0pLi3ph2efxnbDUk
BLa+SsasZGhJKQNBrA8eR6xPhMIMafITJZUzHQsCVMi2n19otE5t2bvcJ7l5StZF
H8jXceAZHswvXth7cwJlj1vGhuLdGNB0Sh5xAFXyDLXkHDBbr5+LeSnV2cL89tId
A/JW74fhZH07x4FVbnF0x9V8qDOx9QNmuU3eYaVhl3vIfY1z3K4mbvmWgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISBflY2tU50PFlXn+A7X7wXseljMB8GA1UdIwQY
MBaAFG8Fz3cdmZLnD/Z0DmsgYgzlLQ2LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYndYUGR4MlprdWNQOW5RT2F5QmlET1V0RFlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9hMjM0MDQtZjIxOS00OWY1LWJmMzMt
MjQ1NjUwZjg0MmQ1LzEvYndYUGR4MlprdWNQOW5RT2F5QmlET1V0RFlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9hMjM0MDQtZjIxOS00OWY1LWJmMzMtMjQ1NjUwZjg0MmQ1
LzEvYndYUGR4MlprdWNQOW5RT2F5QmlET1V0RFlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlOCRnhEb
ZVwvqVpT4wpAR8cve/Puqr+yelAlB0OtMqJ/kQW121i4ARCZ8Pmdaz1hjSZCMyXL
dkJTdhSUQJ29oDngDs17ZJFlw1Bkh/PcdjTNPOVWtXHwKVqAr8rsrKKOM4Cczqr1
oqpPjwWLyGNsoRh8DdYPy/LkJfHNi2PRVxd8iwwRFqM5WQkOyfrNkoWwA3Ur+wtu
ZZu29bCljHEZVQ8WAo+BLdgQBevYDkcS8PKztP/9mjXC134Oa1M7i0bOR+g1g+Db
9jkEVSvSz1mdCFX3DKQuG86iBDdbu9zFX/NgWnwAP8EThSIcgd06SutA2l+DoQTa
AQBVzJd7nMy2kQ==
-----END CERTIFICATE-----
Generated at Fri May 9 23:55:45 2025 by rpki-client