Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
File: BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft (raw, json)
Hash identifier: q+xkrnXSraYg9DJ7eotfMptldC7PSfu4rWJIwiGuj8o=
Subject key identifier: AC:07:1F:35:6C:B5:9F:3C:C1:CF:64:B1:BC:8E:38:96:9F:E7:A8:70
Authority key identifier: 05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91
Certificate issuer: /CN=050e3b7dfbd59910fe527cc7e29af64d53806c91
Certificate serial: 0196A76699A29A2F46A50C284A634C2E4FC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
Manifest number: 1528
Signing time: Tue 06 May 2025 21:00:41 +0000
Manifest this update: Tue 06 May 2025 21:00:41 +0000
Manifest next update: Wed 07 May 2025 21:00:41 +0000
Files and hashes: 1: BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl (hash: B2MXCVR4iJEgYqfxjZe/1ijnNmWx7G/U6lr07F+2DRY=)
2: g7zSuu1Y2LgUEEcASbCxWIihuvc.roa (hash: DxpZr9EOZTA5swhTGy2g3jLwTeS/IoD0WJP5uBxOYhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 16:14:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:66:99:a2:9a:2f:46:a5:0c:28:4a:63:4c:2e:4f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050e3b7dfbd59910fe527cc7e29af64d53806c91
Validity
Not Before: May 6 21:00:41 2025 GMT
Not After : May 7 21:00:41 2025 GMT
Subject: CN=ac071f356cb59f3cc1cf64b1bc8e38969fe7a870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:55:be:2d:e8:a2:89:24:f0:b5:46:84:72:0c:
50:98:1a:4d:ab:ba:41:b7:45:dd:e6:37:98:44:7d:
9a:7b:89:7d:05:d5:3d:6e:5a:24:6f:48:68:36:6a:
8e:30:f3:23:6e:31:f1:97:87:7c:57:2e:fd:82:b5:
54:5e:9e:c6:a8:c5:95:14:5c:e5:38:1a:38:5f:63:
4d:d0:89:bf:df:f9:30:e5:ec:50:f8:f6:cb:ff:71:
8b:e5:cb:42:68:da:91:0a:4e:61:cd:27:ba:e0:94:
b7:5e:8f:32:27:1f:0d:9d:02:bf:48:69:e5:5e:39:
40:a7:a0:7f:2d:b9:17:a3:54:8e:ea:68:74:68:f3:
79:96:c2:f3:fe:3d:cb:62:a3:8a:cd:a9:74:3e:29:
9f:39:56:22:aa:39:8d:5b:0a:df:d1:7c:03:3a:fb:
58:68:a0:cf:1f:51:d5:45:e1:ee:03:5e:e1:35:1d:
c4:9f:cd:e7:fc:b8:dd:f0:f3:64:d8:a8:c4:8d:fc:
a3:53:70:22:13:4e:e8:39:0b:5d:0e:03:89:7f:aa:
84:57:89:ae:07:59:9d:9e:93:77:0c:e6:02:94:66:
a5:05:a5:a7:67:19:a3:52:36:90:3c:b7:a9:c2:b7:
f5:4a:cb:4d:7b:39:64:a7:ca:c2:f1:16:aa:ed:d6:
be:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:07:1F:35:6C:B5:9F:3C:C1:CF:64:B1:BC:8E:38:96:9F:E7:A8:70
X509v3 Authority Key Identifier:
keyid:05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:41:69:70:0e:8c:f0:6e:fe:02:6b:8e:f1:65:18:12:d7:3e:
22:7a:7c:41:b1:03:02:64:7f:17:f3:11:7e:ec:dd:15:ba:9d:
e2:d8:4c:19:08:3b:6b:93:bf:87:0b:eb:8c:c9:bf:2f:cb:3b:
4b:e4:e8:b5:99:d7:f6:50:9a:cc:1c:fe:53:e8:87:41:b5:ed:
8b:25:ab:6a:61:7e:db:34:e6:32:d3:97:95:73:e0:b5:bc:aa:
9d:93:38:3b:eb:c5:c2:3c:a7:2b:8d:07:c1:76:99:94:a9:63:
37:64:9f:c7:ab:ab:0a:6e:9a:8e:a7:3e:76:be:76:fd:89:47:
5a:4b:c3:5b:67:8b:a2:2c:17:46:06:63:94:26:72:b0:2b:a5:
12:2c:bc:ea:43:3e:26:0e:e0:45:95:a9:d3:0b:5d:5b:31:84:
2a:6b:7b:ba:77:70:c8:07:80:f9:ba:83:94:24:96:a6:9f:ee:
c0:ec:76:47:a2:b6:46:d7:f9:41:ad:d3:3e:24:97:3d:79:30:
11:f7:5f:3b:9b:ca:47:b1:6d:27:bc:d1:b5:d7:87:ae:9f:4f:
ef:d5:50:30:a5:18:ee:22:f2:74:4c:a2:0e:12:9f:7d:17:20:
46:41:83:e1:af:96:97:f0:de:85:78:5d:9e:42:7e:dc:9f:99:
e2:dd:70:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZanZpmimi9GpQwoSmNMLk/JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MGUzYjdkZmJkNTk5MTBmZTUyN2NjN2UyOWFmNjRkNTM4
MDZjOTEwHhcNMjUwNTA2MjEwMDQxWhcNMjUwNTA3MjEwMDQxWjAzMTEwLwYDVQQD
EyhhYzA3MWYzNTZjYjU5ZjNjYzFjZjY0YjFiYzhlMzg5NjlmZTdhODcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlW+LeiiiSTwtUaEcgxQmBpNq7pB
t0Xd5jeYRH2ae4l9BdU9blokb0hoNmqOMPMjbjHxl4d8Vy79grVUXp7GqMWVFFzl
OBo4X2NN0Im/3/kw5exQ+PbL/3GL5ctCaNqRCk5hzSe64JS3Xo8yJx8NnQK/SGnl
XjlAp6B/LbkXo1SO6mh0aPN5lsLz/j3LYqOKzal0PimfOVYiqjmNWwrf0XwDOvtY
aKDPH1HVReHuA17hNR3En83n/Ljd8PNk2KjEjfyjU3AiE07oOQtdDgOJf6qEV4mu
B1mdnpN3DOYClGalBaWnZxmjUjaQPLepwrf1SstNezlkp8rC8Raq7da+oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKwHHzVstZ88wc9ksbyOOJaf56hwMB8GA1UdIwQY
MBaAFAUOO3371ZkQ/lJ8x+Ka9k1TgGyRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlE0N2ZmdlZtUkQtVW56SDRwcjJUVk9BYkpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85ZDk2MGMtZTIzNC00YTA1LWFiYTIt
NGE4Nzc5ZTQ3OGM2LzEvQlE0N2ZmdlZtUkQtVW56SDRwcjJUVk9BYkpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi85ZDk2MGMtZTIzNC00YTA1LWFiYTItNGE4Nzc5ZTQ3OGM2
LzEvQlE0N2ZmdlZtUkQtVW56SDRwcjJUVk9BYkpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkkFpcA6M
8G7+AmuO8WUYEtc+Inp8QbEDAmR/F/MRfuzdFbqd4thMGQg7a5O/hwvrjMm/L8s7
S+TotZnX9lCazBz+U+iHQbXtiyWramF+2zTmMtOXlXPgtbyqnZM4O+vFwjynK40H
wXaZlKljN2Sfx6urCm6ajqc+dr52/YlHWkvDW2eLoiwXRgZjlCZysCulEiy86kM+
Jg7gRZWp0wtdWzGEKmt7undwyAeA+bqDlCSWpp/uwOx2R6K2Rtf5Qa3TPiSXPXkw
EfdfO5vKR7FtJ7zRtdeHrp9P79VQMKUY7iLydEyiDhKffRcgRkGD4a+Wl/DehXhd
nkJ+3J+Z4t1wxg==
-----END CERTIFICATE-----
Generated at Wed May 7 01:42:22 2025 by rpki-client