Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
File: BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft (raw, json)
Hash identifier: IincRk/SRsHQlKhOG2N+6s+C013OrPsD3wdJi/kSsL0=
Subject key identifier: 3B:41:C1:2A:44:C9:8D:F3:B4:24:26:A7:45:2A:95:F2:BC:3A:C7:94
Authority key identifier: 04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
Certificate issuer: /CN=04268ae40737536a464c28493eaf503db9a18f20
Certificate serial: 0196C3B931A9506F06196802D50DD3EDFB4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
Manifest number: 1477
Signing time: Mon 12 May 2025 09:00:16 +0000
Manifest this update: Mon 12 May 2025 09:00:16 +0000
Manifest next update: Tue 13 May 2025 09:00:16 +0000
Files and hashes: 1: BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl (hash: L2ijxoGMkRL0JHuVcb9sp5zmQixQkXyfXQUi04hVZOo=)
2: CLXmnDFSTo8gYOSfsi36Eul40PU.roa (hash: 8Z8KtVhkqNicLx/HNFdK6oyXYk9JSXXv8S9J27mq/xY=)
3: lZAakdp_BLG_rPCj1oo9i4pPv2Q.roa (hash: 1gPUwLHqyRYBWV9FA/ZpZB+VDiIwSRS3XaQWbg+vKSc=)
4: pzYaLDX-85nYF2riSdG9v-AKZYM.roa (hash: EygpfdGwPkKz8M66wN+etr5plBuJkHzB1mglzx/9MuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 09:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:31:a9:50:6f:06:19:68:02:d5:0d:d3:ed:fb:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04268ae40737536a464c28493eaf503db9a18f20
Validity
Not Before: May 12 09:00:16 2025 GMT
Not After : May 13 09:00:16 2025 GMT
Subject: CN=3b41c12a44c98df3b42426a7452a95f2bc3ac794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:87:d1:f6:2b:4d:7e:83:40:76:01:b7:19:dd:
31:9b:3f:cc:82:66:f4:7a:a3:64:70:b2:65:1a:d3:
38:df:e4:51:48:4a:34:88:35:ab:31:96:57:96:72:
59:ec:f6:1e:fb:d0:52:d7:06:ef:94:af:a1:84:af:
98:f3:c0:ca:bc:49:37:da:ea:b3:10:fd:60:98:46:
9a:64:3c:c2:97:bc:fe:58:44:29:1e:4a:33:19:85:
f1:47:d6:1a:82:be:e6:8f:b8:28:df:59:66:3f:76:
04:2b:e3:a2:33:61:3c:26:30:3e:56:4a:11:1f:56:
6d:b3:2f:2c:67:71:42:fe:fa:47:44:87:b0:6f:b8:
2b:9a:bc:ee:f1:5d:cd:31:18:29:9e:de:52:4e:ec:
6c:f9:78:2a:48:24:b2:ce:e3:3b:9b:0f:3e:79:a9:
a4:db:55:d6:43:8d:b7:cd:9f:bd:c8:d9:c0:68:4e:
2d:22:c1:7e:9e:09:d8:41:e9:42:17:0a:ce:8d:8c:
d6:91:b4:98:32:6b:c7:79:69:1e:d7:26:ca:5e:7b:
12:82:9e:35:ea:78:54:75:82:b3:cf:fe:3c:3d:c5:
32:3d:85:e1:63:75:63:83:64:ac:9a:ae:95:92:1a:
7c:e2:ec:4c:0f:71:4f:e2:7b:6e:86:f7:43:1f:51:
d5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:41:C1:2A:44:C9:8D:F3:B4:24:26:A7:45:2A:95:F2:BC:3A:C7:94
X509v3 Authority Key Identifier:
keyid:04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b4:0e:96:56:96:1d:f8:1c:63:0a:da:f4:2e:ae:38:7b:d5:
03:dc:7b:3d:3e:1e:4c:34:00:92:0a:7b:34:c9:8d:2c:69:be:
a3:00:b0:ec:38:bb:58:35:2a:b0:b6:db:fb:e7:16:1b:da:73:
01:a7:cf:f9:1d:ab:d4:bb:c6:83:af:54:8d:ae:1d:2e:b5:04:
e1:f0:56:9a:9a:d6:7e:d4:25:c9:50:b1:32:de:1a:f1:bd:4d:
ef:0c:9d:f4:28:7b:c6:0a:21:96:e6:cb:15:4d:5b:21:eb:11:
9d:89:e0:d2:fe:1a:ed:eb:de:8d:6b:7d:fa:fc:51:b6:61:c8:
39:51:af:93:92:4c:fc:15:c7:aa:30:37:fc:f9:ac:85:2e:5c:
2e:c4:99:36:05:1a:52:a5:d8:f4:e4:91:7f:fa:cc:18:e4:2a:
a5:c7:41:d2:5e:4b:7d:41:8a:62:47:d1:38:6d:22:ac:aa:14:
86:cc:36:71:21:3f:1e:54:3f:e7:82:97:0b:ce:4e:c4:dc:2d:
a1:a2:f9:1b:70:e8:2e:2f:33:b0:0c:5a:ae:1e:0d:ce:d6:93:
28:7d:ae:9a:5a:ef:65:e6:4e:86:62:c6:a5:e1:c0:33:29:1d:
5c:cb:cb:d3:34:e0:d3:7d:1a:0d:e5:a3:98:92:b0:65:c8:44:
a9:02:2f:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDuTGpUG8GGWgC1Q3T7ftLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MjY4YWU0MDczNzUzNmE0NjRjMjg0OTNlYWY1MDNkYjlh
MThmMjAwHhcNMjUwNTEyMDkwMDE2WhcNMjUwNTEzMDkwMDE2WjAzMTEwLwYDVQQD
EygzYjQxYzEyYTQ0Yzk4ZGYzYjQyNDI2YTc0NTJhOTVmMmJjM2FjNzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14fR9itNfoNAdgG3Gd0xmz/Mgmb0
eqNkcLJlGtM43+RRSEo0iDWrMZZXlnJZ7PYe+9BS1wbvlK+hhK+Y88DKvEk32uqz
EP1gmEaaZDzCl7z+WEQpHkozGYXxR9Yagr7mj7go31lmP3YEK+OiM2E8JjA+VkoR
H1Ztsy8sZ3FC/vpHRIewb7grmrzu8V3NMRgpnt5STuxs+XgqSCSyzuM7mw8+eamk
21XWQ423zZ+9yNnAaE4tIsF+ngnYQelCFwrOjYzWkbSYMmvHeWke1ybKXnsSgp41
6nhUdYKzz/48PcUyPYXhY3Vjg2Ssmq6Vkhp84uxMD3FP4ntuhvdDH1HVcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDtBwSpEyY3ztCQmp0UqlfK8OseUMB8GA1UdIwQY
MBaAFAQmiuQHN1NqRkwoST6vUD25oY8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkNhSzVBYzNVMnBHVENoSlBxOVFQYm1oanlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83OTY4MjMtNmQ4MS00ZDkxLWI2NjQt
ZTBhYmQ0ZDg0NTcxLzEvQkNhSzVBYzNVMnBHVENoSlBxOVFQYm1oanlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy83OTY4MjMtNmQ4MS00ZDkxLWI2NjQtZTBhYmQ0ZDg0NTcx
LzEvQkNhSzVBYzNVMnBHVENoSlBxOVFQYm1oanlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAbQOllaW
HfgcYwra9C6uOHvVA9x7PT4eTDQAkgp7NMmNLGm+owCw7Di7WDUqsLbb++cWG9pz
AafP+R2r1LvGg69Uja4dLrUE4fBWmprWftQlyVCxMt4a8b1N7wyd9Ch7xgohlubL
FU1bIesRnYng0v4a7evejWt9+vxRtmHIOVGvk5JM/BXHqjA3/PmshS5cLsSZNgUa
UqXY9OSRf/rMGOQqpcdB0l5LfUGKYkfROG0irKoUhsw2cSE/HlQ/54KXC85OxNwt
oaL5G3DoLi8zsAxarh4NztaTKH2umlrvZeZOhmLGpeHAMykdXMvL0zTg030aDeWj
mJKwZchEqQIvMQ==
-----END CERTIFICATE-----
Generated at Mon May 12 12:52:22 2025 by rpki-client