Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft
File: bXt5YErx85CPSBeVZiY1Pub_wfQ.mft (raw, json)
Hash identifier: rUIiuQz99HuAfvB/tYXWsgIuzRcbPNiWU6e+m66hgaQ=
Subject key identifier: 1D:5D:11:C0:B1:AB:FF:FE:09:0A:C0:20:92:57:0B:AC:5D:2E:A1:BD
Authority key identifier: 6D:7B:79:60:4A:F1:F3:90:8F:48:17:95:66:26:35:3E:E6:FF:C1:F4
Certificate issuer: /CN=6d7b79604af1f3908f4817956626353ee6ffc1f4
Certificate serial: 0196AF8DB3CEE79D8D291889A9F2877CEADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft
Manifest number: 152D
Signing time: Thu 08 May 2025 11:00:21 +0000
Manifest this update: Thu 08 May 2025 11:00:21 +0000
Manifest next update: Fri 09 May 2025 11:00:21 +0000
Files and hashes: 1: A15OC13YGMvTmICTCy1AZnVK3To.roa (hash: PwsIGkVItakh2uZVvAdvG2pZjqN/gexEPiOMZusjdcA=)
2: bXt5YErx85CPSBeVZiY1Pub_wfQ.crl (hash: 5N7nDsOnwt2TBL8ng3ZviQCiU99dHeAqbNkkF3H00nQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 11:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:8d:b3:ce:e7:9d:8d:29:18:89:a9:f2:87:7c:ea:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7b79604af1f3908f4817956626353ee6ffc1f4
Validity
Not Before: May 8 11:00:21 2025 GMT
Not After : May 9 11:00:21 2025 GMT
Subject: CN=1d5d11c0b1abfffe090ac02092570bac5d2ea1bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2a:fa:57:7c:9d:0f:b4:23:8f:4d:97:e4:5b:
af:9d:90:c3:bb:64:a2:81:2c:e5:a2:ba:82:ed:89:
6c:9a:22:9f:4f:ca:d2:02:e2:4e:c1:43:89:18:36:
34:dd:b2:76:41:15:9a:97:8f:a1:d5:13:e3:c5:22:
7b:42:fc:4e:b0:3e:29:03:2d:99:09:20:bc:47:4a:
6d:40:d4:17:ca:1e:96:63:5f:fd:7e:45:61:bd:29:
4e:a6:92:20:78:95:5d:fd:bc:84:e4:c7:1a:e1:86:
08:a5:d7:a6:8b:fd:8c:ff:a0:0c:b8:d0:ab:f7:1f:
3d:22:71:54:ff:56:3d:37:14:1a:36:98:7b:16:08:
4b:c8:0b:f4:15:35:eb:c1:18:47:08:1a:fe:1b:77:
c6:25:b1:ac:1a:71:ce:2b:54:75:c8:32:ec:70:d8:
7c:ea:0a:a1:3f:ee:43:f3:4f:2e:ce:ee:8d:f6:ff:
ea:41:1e:a6:27:0a:5b:5a:e0:76:55:28:69:29:52:
dc:f4:88:8f:dd:fe:0b:8a:25:4d:04:c5:f5:16:96:
b3:56:7a:5c:34:c9:60:66:ad:92:c8:ba:0a:62:31:
75:44:e8:76:75:71:9b:94:74:80:b8:6d:24:15:59:
0c:05:5f:a1:57:b8:17:19:5d:78:93:6b:26:44:ca:
78:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:5D:11:C0:B1:AB:FF:FE:09:0A:C0:20:92:57:0B:AC:5D:2E:A1:BD
X509v3 Authority Key Identifier:
keyid:6D:7B:79:60:4A:F1:F3:90:8F:48:17:95:66:26:35:3E:E6:FF:C1:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:d4:0b:ab:f4:ff:7c:ff:b3:45:33:d9:96:35:2c:bb:f9:0d:
b6:83:73:1a:46:c2:6c:fe:35:0e:3f:4e:43:2a:5a:b6:32:58:
7d:4a:d9:34:5d:08:08:2d:40:77:ff:c6:0f:88:82:3a:6f:b1:
20:05:df:48:5b:d0:f8:0b:c6:18:6a:1a:86:b1:0b:29:4f:a7:
9a:c4:3e:10:4f:51:6c:dc:e7:71:b9:a4:75:9b:46:18:94:90:
20:99:70:03:d4:4d:79:1e:18:61:80:01:b7:51:f6:53:53:5e:
64:f1:8c:80:4c:5f:5b:e3:ba:af:a5:c8:cc:27:d0:00:fb:54:
fc:bf:5e:e8:b8:5f:d6:d7:f3:fc:82:64:55:e3:91:96:d6:49:
83:b6:46:06:98:c3:76:9f:40:ce:87:56:3a:9f:c4:94:f8:cb:
23:ac:d6:6f:34:50:67:89:0a:27:fa:3e:8d:aa:37:66:5c:b2:
df:ca:c1:f6:b9:68:b8:94:47:6b:15:f8:16:bf:4a:32:8e:60:
0d:2d:1c:ab:c8:53:32:b3:76:21:db:da:b0:54:71:c5:40:9a:
d5:2e:8e:54:d1:ef:22:31:6e:c8:0f:05:f9:26:36:c5:1e:85:
de:df:7c:91:89:52:05:8a:b2:9c:e7:08:3f:3e:db:8f:dd:9a:
2b:e6:1f:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZavjbPO552NKRiJqfKHfOrdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkN2I3OTYwNGFmMWYzOTA4ZjQ4MTc5NTY2MjYzNTNlZTZm
ZmMxZjQwHhcNMjUwNTA4MTEwMDIxWhcNMjUwNTA5MTEwMDIxWjAzMTEwLwYDVQQD
EygxZDVkMTFjMGIxYWJmZmZlMDkwYWMwMjA5MjU3MGJhYzVkMmVhMWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSr6V3ydD7Qjj02X5FuvnZDDu2Si
gSzlorqC7YlsmiKfT8rSAuJOwUOJGDY03bJ2QRWal4+h1RPjxSJ7QvxOsD4pAy2Z
CSC8R0ptQNQXyh6WY1/9fkVhvSlOppIgeJVd/byE5Mca4YYIpdemi/2M/6AMuNCr
9x89InFU/1Y9NxQaNph7FghLyAv0FTXrwRhHCBr+G3fGJbGsGnHOK1R1yDLscNh8
6gqhP+5D808uzu6N9v/qQR6mJwpbWuB2VShpKVLc9IiP3f4LiiVNBMX1FpazVnpc
NMlgZq2SyLoKYjF1ROh2dXGblHSAuG0kFVkMBV+hV7gXGV14k2smRMp4XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB1dEcCxq//+CQrAIJJXC6xdLqG9MB8GA1UdIwQY
MBaAFG17eWBK8fOQj0gXlWYmNT7m/8H0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlh0NVlFcng4NUNQU0JlVlppWTFQdWJfd2ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85M2E3MzQtM2NiNy00MTJjLWI0NWYt
Mjc1YjZlOWZiYzYzLzEvYlh0NVlFcng4NUNQU0JlVlppWTFQdWJfd2ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi85M2E3MzQtM2NiNy00MTJjLWI0NWYtMjc1YjZlOWZiYzYz
LzEvYlh0NVlFcng4NUNQU0JlVlppWTFQdWJfd2ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqdQLq/T/
fP+zRTPZljUsu/kNtoNzGkbCbP41Dj9OQypatjJYfUrZNF0ICC1Ad//GD4iCOm+x
IAXfSFvQ+AvGGGoahrELKU+nmsQ+EE9RbNzncbmkdZtGGJSQIJlwA9RNeR4YYYAB
t1H2U1NeZPGMgExfW+O6r6XIzCfQAPtU/L9e6Lhf1tfz/IJkVeORltZJg7ZGBpjD
dp9AzodWOp/ElPjLI6zWbzRQZ4kKJ/o+jao3Zlyy38rB9rlouJRHaxX4Fr9KMo5g
DS0cq8hTMrN2IdvasFRxxUCa1S6OVNHvIjFuyA8F+SY2xR6F3t98kYlSBYqynOcI
Pz7bj92aK+YfBA==
-----END CERTIFICATE-----
Generated at Thu May 8 21:02:59 2025 by rpki-client