Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft
File: BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft (raw, json)
Hash identifier: ysZf8usn27s5aUWcXA8fWQND2+KvBs/Q2NOX5W+HO14=
Subject key identifier: 4F:03:BA:4D:3E:32:73:DA:9E:1A:A5:12:DB:73:EF:16:EF:6B:80:BD
Authority key identifier: 05:15:C1:55:83:B9:CC:FF:94:2C:FB:3E:EE:04:E2:DE:95:64:26:62
Certificate issuer: /CN=0515c15583b9ccff942cfb3eee04e2de95642662
Certificate serial: 0196BE5C4ED51D599258FA642F6AEFD4A11F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft
Manifest number: 10B1
Signing time: Sun 11 May 2025 08:00:42 +0000
Manifest this update: Sun 11 May 2025 08:00:42 +0000
Manifest next update: Mon 12 May 2025 08:00:42 +0000
Files and hashes: 1: BRXBVYO5zP-ULPs-7gTi3pVkJmI.crl (hash: oSMHkZtA5UU6ZqNSPeg0wX9agqg78ck9mbBOFeOoDyk=)
2: tBOKcfNxjTzkMUixXvH9M-s6MQc.roa (hash: WnsSxnvb5k4gG3MU31Atg7OcKa0e6J/w7SNoxsaja8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:4e:d5:1d:59:92:58:fa:64:2f:6a:ef:d4:a1:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0515c15583b9ccff942cfb3eee04e2de95642662
Validity
Not Before: May 11 08:00:42 2025 GMT
Not After : May 12 08:00:42 2025 GMT
Subject: CN=4f03ba4d3e3273da9e1aa512db73ef16ef6b80bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:96:06:6f:e8:5e:4f:69:e4:2b:a3:af:4a:c8:
03:94:18:99:8c:e9:d2:20:b5:b4:5c:88:8b:cd:df:
0c:2d:39:30:0e:da:9e:c0:ed:77:13:9f:bc:e8:fd:
ba:09:fb:08:8d:ae:e6:11:10:f7:91:cc:f3:e3:6c:
70:e5:04:11:d1:5a:66:11:f8:f8:77:ba:78:d3:55:
fe:13:38:c3:8f:05:01:94:7f:d8:be:f0:ec:2e:f6:
d1:e4:09:0a:6b:7f:9c:d4:05:a1:91:02:95:f8:30:
bc:a2:9d:9c:0d:f6:13:14:e6:6b:98:a2:cb:5a:5e:
34:cd:a5:1c:8c:64:64:79:59:e6:a6:8c:a3:86:c8:
b6:82:b1:a5:58:e5:86:4e:ac:0c:dd:39:36:e4:cd:
c2:a3:aa:8b:df:85:b4:94:d1:d4:a8:e0:71:cd:44:
85:a8:6d:c4:92:3a:b1:a4:f4:d2:c6:35:c1:bb:bd:
9d:9a:88:4d:a3:96:86:43:19:30:bb:5f:82:9e:d0:
1c:f2:91:9e:c1:35:63:54:17:2d:eb:6f:cc:e9:a4:
66:98:e1:ba:25:4a:66:e1:c1:e7:b8:71:98:8c:74:
53:07:bd:19:00:8f:1c:71:17:7d:25:90:39:be:f3:
2d:ac:b4:35:e8:84:7a:38:2b:9e:c8:2f:af:d7:8f:
fe:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:03:BA:4D:3E:32:73:DA:9E:1A:A5:12:DB:73:EF:16:EF:6B:80:BD
X509v3 Authority Key Identifier:
keyid:05:15:C1:55:83:B9:CC:FF:94:2C:FB:3E:EE:04:E2:DE:95:64:26:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:94:98:22:a6:a7:4b:03:f9:20:6b:c6:e8:35:c5:47:00:40:
30:d4:b2:11:5d:95:a2:02:f3:be:23:31:cb:a9:e4:f9:b8:87:
90:16:4f:bb:72:64:1b:7a:ed:b0:f3:7b:13:8d:47:a3:1d:86:
16:e5:59:0d:e2:85:e7:74:1e:ca:0f:23:02:17:ef:64:b1:0f:
3c:ee:b6:70:94:66:44:72:89:a0:fc:d9:ea:9f:e2:ac:22:23:
cd:31:30:b9:a3:58:70:a6:af:ad:c8:e1:4a:c3:86:ab:34:50:
b8:99:bd:3b:57:71:03:b6:56:64:cf:63:b2:4d:e9:57:c5:03:
a2:de:32:f6:6b:26:10:e8:a6:56:c4:cf:2c:79:4b:1e:ac:68:
c1:9d:2d:d1:6b:ad:5f:3e:ce:83:7b:04:12:e1:98:ef:4d:b7:
28:a4:69:d1:ca:45:9b:f7:6d:e8:83:44:a9:ab:1e:fe:fa:c2:
c1:1d:ca:39:ee:2d:21:a0:91:d7:ba:17:7e:b8:df:8f:e4:5a:
3f:d6:ce:af:a8:e8:fc:a4:28:5e:03:32:00:8b:ac:d8:94:89:
7b:96:be:ea:13:b2:c8:c6:fc:f3:43:29:49:37:f7:fb:72:eb:
22:85:33:41:83:ab:48:ef:7d:af:a0:ea:66:fd:7e:34:fe:c2:
32:ad:f2:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+XE7VHVmSWPpkL2rv1KEfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MTVjMTU1ODNiOWNjZmY5NDJjZmIzZWVlMDRlMmRlOTU2
NDI2NjIwHhcNMjUwNTExMDgwMDQyWhcNMjUwNTEyMDgwMDQyWjAzMTEwLwYDVQQD
Eyg0ZjAzYmE0ZDNlMzI3M2RhOWUxYWE1MTJkYjczZWYxNmVmNmI4MGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JYGb+heT2nkK6OvSsgDlBiZjOnS
ILW0XIiLzd8MLTkwDtqewO13E5+86P26CfsIja7mERD3kczz42xw5QQR0VpmEfj4
d7p401X+EzjDjwUBlH/YvvDsLvbR5AkKa3+c1AWhkQKV+DC8op2cDfYTFOZrmKLL
Wl40zaUcjGRkeVnmpoyjhsi2grGlWOWGTqwM3Tk25M3Co6qL34W0lNHUqOBxzUSF
qG3EkjqxpPTSxjXBu72dmohNo5aGQxkwu1+CntAc8pGewTVjVBct62/M6aRmmOG6
JUpm4cHnuHGYjHRTB70ZAI8ccRd9JZA5vvMtrLQ16IR6OCueyC+v14/+awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE8Duk0+MnPanhqlEttz7xbva4C9MB8GA1UdIwQY
MBaAFAUVwVWDucz/lCz7Pu4E4t6VZCZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlJYQlZZTzV6UC1VTFBzLTdnVGkzcFZrSm1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zZTViYTYtNmY1MS00N2FiLTg1NDAt
YmUzZTdhOWNlMTViLzEvQlJYQlZZTzV6UC1VTFBzLTdnVGkzcFZrSm1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8zZTViYTYtNmY1MS00N2FiLTg1NDAtYmUzZTdhOWNlMTVi
LzEvQlJYQlZZTzV6UC1VTFBzLTdnVGkzcFZrSm1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk5SYIqan
SwP5IGvG6DXFRwBAMNSyEV2VogLzviMxy6nk+biHkBZPu3JkG3rtsPN7E41Hox2G
FuVZDeKF53Qeyg8jAhfvZLEPPO62cJRmRHKJoPzZ6p/irCIjzTEwuaNYcKavrcjh
SsOGqzRQuJm9O1dxA7ZWZM9jsk3pV8UDot4y9msmEOimVsTPLHlLHqxowZ0t0Wut
Xz7Og3sEEuGY7023KKRp0cpFm/dt6INEqase/vrCwR3KOe4tIaCR17oXfrjfj+Ra
P9bOr6jo/KQoXgMyAIus2JSJe5a+6hOyyMb880MpSTf3+3LrIoUzQYOrSO99r6Dq
Zv1+NP7CMq3yzg==
-----END CERTIFICATE-----
Generated at Sun May 11 13:43:53 2025 by rpki-client