Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.mft
File: BKf5By6LMAS6CGgfse-IwD9iCog.mft (raw, json)
Hash identifier: MUbZnBv9S7pLLKB47nt6GlochCo0gOcJEXhFFrMkN90=
Subject key identifier: BB:25:EA:F3:6F:09:AD:E3:84:E5:E3:A1:06:EA:03:61:80:A5:0A:00
Authority key identifier: 04:A7:F9:07:2E:8B:30:04:BA:08:68:1F:B1:EF:88:C0:3F:62:0A:88
Certificate issuer: /CN=04a7f9072e8b3004ba08681fb1ef88c03f620a88
Certificate serial: 0196D39AC475AFD50498EA22C3E963AFA8C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKf5By6LMAS6CGgfse-IwD9iCog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.mft
Manifest number: 1541
Signing time: Thu 15 May 2025 11:00:57 +0000
Manifest this update: Thu 15 May 2025 11:00:57 +0000
Manifest next update: Fri 16 May 2025 11:00:57 +0000
Files and hashes: 1: BKf5By6LMAS6CGgfse-IwD9iCog.crl (hash: ZS0emdu8GQiv5mkjAGNyXjoMRrOTMF4mLFCaDHDemr8=)
2: wSs_FD2QVb_noY_pKeQvB5Nmc4k.roa (hash: C/YIn0+2EPkhhvHnwCdIJWUCCRmG0HGZx7WYVhFFx3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKf5By6LMAS6CGgfse-IwD9iCog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d3:9a:c4:75:af:d5:04:98:ea:22:c3:e9:63:af:a8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a7f9072e8b3004ba08681fb1ef88c03f620a88
Validity
Not Before: May 15 11:00:57 2025 GMT
Not After : May 16 11:00:57 2025 GMT
Subject: CN=bb25eaf36f09ade384e5e3a106ea036180a50a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1c:a4:27:1b:ae:d2:2c:df:47:51:0d:74:68:
e8:e8:00:2f:e1:fb:e2:2c:9e:08:f2:50:44:ad:57:
69:6b:15:a9:46:c4:2c:47:f7:e2:45:6d:80:46:50:
e2:3b:5e:80:67:94:33:06:7a:c9:57:b4:6e:1d:93:
96:cf:32:8c:32:70:76:eb:f1:65:7b:fa:f9:89:22:
3d:38:9d:4e:a8:92:67:04:09:e4:2f:d2:26:ff:3d:
61:a2:12:0c:80:f4:4d:0d:00:d3:15:5a:d8:58:e4:
54:4c:e6:5f:d8:29:a3:7a:00:bf:11:49:aa:ea:f3:
e8:6c:83:a8:43:93:ac:e3:5d:e6:cc:81:0a:5e:d9:
13:e0:2c:a2:66:91:6c:9a:9c:65:6d:4a:f9:17:49:
3b:87:1b:a4:a8:1e:3d:9f:18:d4:1f:ca:82:ce:bb:
c2:24:b7:c5:a3:35:91:f9:4f:7a:85:f2:de:4a:a6:
3c:e8:b6:32:58:1a:53:fe:f5:4b:f7:71:a3:b9:60:
67:66:bb:e5:06:ee:94:53:13:21:ec:42:72:7e:17:
c5:e0:6c:f3:16:aa:77:94:ae:3e:e6:5c:ea:88:03:
e8:b8:49:84:72:7f:d9:bf:21:60:8c:54:5b:a8:18:
fb:79:8f:2f:3b:07:0a:1a:68:39:fa:7a:ca:6a:67:
7d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:25:EA:F3:6F:09:AD:E3:84:E5:E3:A1:06:EA:03:61:80:A5:0A:00
X509v3 Authority Key Identifier:
keyid:04:A7:F9:07:2E:8B:30:04:BA:08:68:1F:B1:EF:88:C0:3F:62:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKf5By6LMAS6CGgfse-IwD9iCog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:14:08:57:90:99:53:66:d8:12:5c:22:2d:20:6b:5a:aa:5b:
56:a4:fc:8b:04:7f:c9:fa:f6:98:51:d8:68:81:69:ee:15:c1:
cc:d4:a2:f8:6d:5c:35:e5:95:d9:1f:49:4d:8f:aa:49:32:fb:
3e:d5:0d:50:6b:eb:f5:ab:fe:05:d3:16:3d:2f:08:dc:e1:49:
d1:16:36:7d:95:b5:8d:b7:37:32:ea:37:6d:e8:6c:a9:79:ca:
76:52:19:ec:04:cc:69:a8:07:6a:5f:91:10:3f:9f:4a:d4:8a:
b8:09:b7:06:fd:9a:d4:44:aa:b9:03:a8:10:7d:21:00:30:b2:
b7:81:9c:3a:b0:72:b3:f2:32:c5:86:3e:e4:15:e0:87:5c:23:
55:bf:e0:6d:f4:e4:fe:c7:e6:52:5b:e7:6b:c5:c8:83:96:a4:
4e:aa:00:97:9f:44:cb:eb:90:35:85:8d:9e:8b:b8:10:f3:d7:
9a:06:20:8e:01:f2:b7:ec:97:12:36:12:42:72:3e:81:df:a4:
3e:3e:d7:f4:c9:e1:39:3b:b2:55:fa:07:2e:21:bc:e2:95:53:
08:90:20:7f:67:51:b5:fc:67:0e:37:f0:16:5f:41:e6:81:7c:
9c:59:06:bd:e2:0c:ca:9d:22:aa:f2:ee:e1:96:1a:9d:49:50:
20:bd:70:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbTmsR1r9UEmOoiw+ljr6jDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YTdmOTA3MmU4YjMwMDRiYTA4NjgxZmIxZWY4OGMwM2Y2
MjBhODgwHhcNMjUwNTE1MTEwMDU3WhcNMjUwNTE2MTEwMDU3WjAzMTEwLwYDVQQD
EyhiYjI1ZWFmMzZmMDlhZGUzODRlNWUzYTEwNmVhMDM2MTgwYTUwYTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxykJxuu0izfR1ENdGjo6AAv4fvi
LJ4I8lBErVdpaxWpRsQsR/fiRW2ARlDiO16AZ5QzBnrJV7RuHZOWzzKMMnB26/Fl
e/r5iSI9OJ1OqJJnBAnkL9Im/z1hohIMgPRNDQDTFVrYWORUTOZf2CmjegC/EUmq
6vPobIOoQ5Os413mzIEKXtkT4CyiZpFsmpxlbUr5F0k7hxukqB49nxjUH8qCzrvC
JLfFozWR+U96hfLeSqY86LYyWBpT/vVL93GjuWBnZrvlBu6UUxMh7EJyfhfF4Gzz
Fqp3lK4+5lzqiAPouEmEcn/ZvyFgjFRbqBj7eY8vOwcKGmg5+nrKamd90QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLsl6vNvCa3jhOXjoQbqA2GApQoAMB8GA1UdIwQY
MBaAFASn+QcuizAEughoH7HviMA/YgqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQktmNUJ5NkxNQVM2Q0dnZnNlLUl3RDlpQ29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9jYThlNTgtOGFmZC00OTNiLWE5MTYt
ZTA1YWE1MTNlNWRkLzEvQktmNUJ5NkxNQVM2Q0dnZnNlLUl3RDlpQ29nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9jYThlNTgtOGFmZC00OTNiLWE5MTYtZTA1YWE1MTNlNWRk
LzEvQktmNUJ5NkxNQVM2Q0dnZnNlLUl3RDlpQ29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQxQIV5CZ
U2bYElwiLSBrWqpbVqT8iwR/yfr2mFHYaIFp7hXBzNSi+G1cNeWV2R9JTY+qSTL7
PtUNUGvr9av+BdMWPS8I3OFJ0RY2fZW1jbc3Muo3behsqXnKdlIZ7ATMaagHal+R
ED+fStSKuAm3Bv2a1ESquQOoEH0hADCyt4GcOrBys/IyxYY+5BXgh1wjVb/gbfTk
/sfmUlvna8XIg5akTqoAl59Ey+uQNYWNnou4EPPXmgYgjgHyt+yXEjYSQnI+gd+k
Pj7X9MnhOTuyVfoHLiG84pVTCJAgf2dRtfxnDjfwFl9B5oF8nFkGveIMyp0iqvLu
4ZYanUlQIL1wgA==
-----END CERTIFICATE-----
Generated at Thu May 15 13:38:40 2025 by rpki-client