Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
File: BEw2vtOpgR94Jg5_X0_S_V54jgM.mft (raw, json)
Hash identifier: KeU7B9BOE8K3ztQsa8lxGWOdJ0O4wAnX34zCO6ZWUbg=
Subject key identifier: 17:7E:41:E4:36:DE:65:F9:D8:CA:FC:DB:27:DF:AD:0C:57:A5:25:38
Authority key identifier: 04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03
Certificate issuer: /CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
Certificate serial: 0196B2584F8CAA402F13013D1ABA19DBC760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
Manifest number: 0BC6
Signing time: Fri 09 May 2025 00:00:54 +0000
Manifest this update: Fri 09 May 2025 00:00:54 +0000
Manifest next update: Sat 10 May 2025 00:00:54 +0000
Files and hashes: 1: AqwTFt-qyr9ctfZVh_Lc-HmCLI4.roa (hash: 6o18WCqQ1vQmdpr+KgNhHjoy4zxFnk5Txpn2BtXndjc=)
2: BEw2vtOpgR94Jg5_X0_S_V54jgM.crl (hash: uHF5vlksH9EGcLe/Nd3WRIUD4nqhFNJz82GYzaW/XG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:58:4f:8c:aa:40:2f:13:01:3d:1a:ba:19:db:c7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
Validity
Not Before: May 9 00:00:54 2025 GMT
Not After : May 10 00:00:54 2025 GMT
Subject: CN=177e41e436de65f9d8cafcdb27dfad0c57a52538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2d:c9:0d:9c:21:3b:2b:38:a0:51:cf:f4:6e:
ce:07:62:c2:2c:36:7b:0f:75:32:ca:e9:db:af:3b:
76:2b:b9:0b:29:69:c3:b8:62:67:e6:09:d8:97:71:
b5:50:f5:aa:d5:c6:a8:2d:12:2c:2d:a4:36:9b:3d:
53:2a:1e:2a:86:a5:db:04:60:fe:cc:c9:e8:36:3b:
b2:f1:01:1f:d6:54:4b:5d:56:59:1c:c1:91:cd:2e:
a0:1c:b0:05:af:cb:69:1c:ed:7f:e7:af:db:60:71:
c4:fd:36:b7:42:f2:cf:9c:49:83:34:0b:da:b7:91:
78:7b:de:ae:f6:85:76:5c:4e:ae:09:d6:a3:0f:d9:
86:b3:01:4f:7a:17:6b:52:61:62:82:63:ba:d2:5c:
a7:72:50:f1:1e:28:8f:05:03:4a:27:ca:01:52:03:
e7:47:40:b3:b5:40:a7:0a:d8:d7:c4:ea:63:79:9b:
bd:71:ca:39:58:72:7d:c2:19:77:fb:ff:36:cf:88:
f1:a7:2b:03:7e:81:4b:b2:cf:e2:05:e6:16:9c:b1:
96:d2:27:2e:e1:9c:1c:94:aa:82:ed:cf:d2:60:87:
53:ac:66:fa:61:28:86:bb:be:3b:55:64:3a:48:43:
af:01:62:2f:12:f3:e2:56:84:0f:7f:be:c0:02:56:
cf:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:7E:41:E4:36:DE:65:F9:D8:CA:FC:DB:27:DF:AD:0C:57:A5:25:38
X509v3 Authority Key Identifier:
keyid:04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:da:fd:28:a0:8a:41:5d:5d:87:7f:56:a4:38:39:84:f1:f2:
77:45:88:72:ef:ad:9e:6e:1d:04:70:3a:e1:0a:29:e4:12:08:
b6:2b:71:f5:2a:72:9b:30:20:bb:93:e3:bb:e0:73:76:f4:15:
42:69:8c:97:6b:1e:09:68:bb:37:b7:41:c5:c1:87:cb:f0:0b:
4a:d7:77:db:fa:18:54:93:42:9d:46:ac:20:4f:70:b4:f2:4c:
fc:85:c0:2f:18:4c:6b:dd:55:96:3d:15:ab:86:00:21:7e:70:
78:96:34:8a:0a:68:78:82:c3:35:08:9e:e9:2e:db:b2:5c:a3:
d5:1d:c0:09:19:16:13:e6:e2:7d:9b:a2:24:0e:51:2d:df:1a:
63:55:a1:be:48:5c:d2:26:d2:92:e4:81:a9:1b:09:a1:01:bb:
2f:72:b1:27:20:70:6a:26:ec:4a:90:47:e4:1c:e6:d6:ad:33:
1a:9f:dc:10:8d:77:c3:b1:7b:ac:e1:f3:28:aa:4d:06:4a:f0:
35:c7:0e:f4:15:e3:02:8e:1d:bd:f6:ba:05:6e:44:a2:79:ef:
be:a0:9a:e2:c2:26:78:36:33:67:de:48:d5:79:0d:87:55:3d:
9c:0e:9f:5a:cd:36:4b:1e:c6:cd:32:e3:23:80:38:e5:0f:8c:
ef:f1:99:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZayWE+MqkAvEwE9GroZ28dgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NGMzNmJlZDNhOTgxMWY3ODI2MGU3ZjVmNGZkMmZkNWU3
ODhlMDMwHhcNMjUwNTA5MDAwMDU0WhcNMjUwNTEwMDAwMDU0WjAzMTEwLwYDVQQD
EygxNzdlNDFlNDM2ZGU2NWY5ZDhjYWZjZGIyN2RmYWQwYzU3YTUyNTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlC3JDZwhOys4oFHP9G7OB2LCLDZ7
D3Uyyunbrzt2K7kLKWnDuGJn5gnYl3G1UPWq1caoLRIsLaQ2mz1TKh4qhqXbBGD+
zMnoNjuy8QEf1lRLXVZZHMGRzS6gHLAFr8tpHO1/56/bYHHE/Ta3QvLPnEmDNAva
t5F4e96u9oV2XE6uCdajD9mGswFPehdrUmFigmO60lynclDxHiiPBQNKJ8oBUgPn
R0CztUCnCtjXxOpjeZu9cco5WHJ9whl3+/82z4jxpysDfoFLss/iBeYWnLGW0icu
4ZwclKqC7c/SYIdTrGb6YSiGu747VWQ6SEOvAWIvEvPiVoQPf77AAlbPWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBd+QeQ23mX52Mr82yffrQxXpSU4MB8GA1UdIwQY
MBaAFARMNr7TqYEfeCYOf19P0v1eeI4DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkV3MnZ0T3BnUjk0Smc1X1gwX1NfVjU0amdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9hZTc0MGItMTBjZC00ZjRkLThmNmMt
MzQxNGZkNTAyOWU5LzEvQkV3MnZ0T3BnUjk0Smc1X1gwX1NfVjU0amdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9hZTc0MGItMTBjZC00ZjRkLThmNmMtMzQxNGZkNTAyOWU5
LzEvQkV3MnZ0T3BnUjk0Smc1X1gwX1NfVjU0amdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANtr9KKCK
QV1dh39WpDg5hPHyd0WIcu+tnm4dBHA64Qop5BIItitx9SpymzAgu5Pju+BzdvQV
QmmMl2seCWi7N7dBxcGHy/ALStd32/oYVJNCnUasIE9wtPJM/IXALxhMa91Vlj0V
q4YAIX5weJY0igpoeILDNQie6S7bslyj1R3ACRkWE+bifZuiJA5RLd8aY1Whvkhc
0ibSkuSBqRsJoQG7L3KxJyBwaibsSpBH5Bzm1q0zGp/cEI13w7F7rOHzKKpNBkrw
NccO9BXjAo4dvfa6BW5EonnvvqCa4sImeDYzZ95I1XkNh1U9nA6fWs02Sx7GzTLj
I4A45Q+M7/GZeQ==
-----END CERTIFICATE-----
Generated at Fri May 9 05:22:40 2025 by rpki-client