Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft
File: bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft (raw, json)
Hash identifier: mZh5JJx5wQOIyr0zJPtN3k/ojKPdbRahYTBEcopoCRo=
Subject key identifier: 18:0A:FB:4D:DC:D6:63:41:AC:B2:2C:91:ED:DF:11:3F:1B:F5:16:DA
Authority key identifier: 6E:63:D6:D3:12:D6:5E:E4:EA:28:DA:F4:3A:FC:C8:6E:CE:D4:08:0F
Certificate issuer: /CN=6e63d6d312d65ee4ea28daf43afcc86eced4080f
Certificate serial: 0196BDEE98AFA23CE20A8CAB5727C26343E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmPW0xLWXuTqKNr0OvzIbs7UCA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft
Manifest number: 0435
Signing time: Sun 11 May 2025 06:00:52 +0000
Manifest this update: Sun 11 May 2025 06:00:52 +0000
Manifest next update: Mon 12 May 2025 06:00:52 +0000
Files and hashes: 1: bmPW0xLWXuTqKNr0OvzIbs7UCA8.crl (hash: boPo7dI1c2I7gJMZDuZhm7Vz+rap6c7WA08wI0dWHpg=)
2: r5Tl8FZK_359mQAz5_71c6QsEr4.roa (hash: bw0mkbca6ZCZwDsSt10mqa+pHFhQP/m6hZej8E74Pw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmPW0xLWXuTqKNr0OvzIbs7UCA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:98:af:a2:3c:e2:0a:8c:ab:57:27:c2:63:43:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e63d6d312d65ee4ea28daf43afcc86eced4080f
Validity
Not Before: May 11 06:00:52 2025 GMT
Not After : May 12 06:00:52 2025 GMT
Subject: CN=180afb4ddcd66341acb22c91eddf113f1bf516da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ef:14:24:e2:7d:d6:e1:68:21:73:b4:2c:f6:
98:d7:d8:60:18:08:b3:ca:1e:fe:3a:1f:19:ab:65:
7d:08:e1:ef:e5:e3:2e:64:da:50:47:e2:7c:2c:ed:
a0:b0:e3:e0:47:32:47:89:c7:89:37:13:18:d6:04:
60:34:ef:95:a5:14:b1:68:91:98:85:2e:5a:1d:87:
a9:d9:e3:11:60:8a:75:6e:91:3b:ce:80:e1:c8:45:
3c:b1:ed:be:86:df:18:65:30:b6:de:0a:b7:fa:0c:
55:31:3a:d4:e6:12:af:03:49:5a:cf:19:67:5e:37:
1c:b8:de:74:9b:13:22:b6:d1:f2:eb:65:8e:47:5a:
59:32:e3:47:8d:2f:07:62:63:ce:02:78:bb:94:ad:
3a:bc:45:6b:4a:72:82:af:cc:a9:0f:53:04:1b:26:
92:0f:07:46:57:f4:94:04:21:ff:78:31:ad:bb:8a:
84:04:0d:42:ed:94:64:e0:7c:4a:7c:08:8c:ba:e7:
ba:4f:01:65:82:59:a8:17:2f:b6:d1:00:71:00:8e:
71:82:f1:ff:82:5d:68:f7:c8:78:68:8b:f4:f2:6e:
12:f7:f1:71:03:90:6a:8b:4f:f7:4c:cc:da:93:84:
07:23:f6:25:6a:d4:f2:3c:cf:9d:63:f8:06:aa:d0:
c3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0A:FB:4D:DC:D6:63:41:AC:B2:2C:91:ED:DF:11:3F:1B:F5:16:DA
X509v3 Authority Key Identifier:
keyid:6E:63:D6:D3:12:D6:5E:E4:EA:28:DA:F4:3A:FC:C8:6E:CE:D4:08:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmPW0xLWXuTqKNr0OvzIbs7UCA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:21:cc:1d:31:fc:ba:be:db:cb:2a:d3:31:99:7b:6d:0a:12:
2a:4b:94:f7:f8:c0:6d:18:6c:aa:62:89:4f:2c:d3:87:03:95:
70:eb:85:ea:34:1c:70:f5:55:85:b3:6e:30:ce:56:40:67:8b:
0e:af:98:22:55:59:03:5a:01:fd:a8:e1:80:26:e3:aa:12:e2:
14:37:be:ad:33:66:c1:50:48:1b:c5:af:44:a1:3b:cc:11:3a:
2a:c7:d5:86:ca:f9:ba:e3:ab:8b:57:2a:cb:9f:71:9a:7f:d6:
46:9f:5f:18:40:09:d1:b6:c2:93:23:63:58:01:f3:20:57:12:
40:cb:5a:8b:91:57:2a:f3:05:02:15:5c:68:7e:17:05:03:8f:
6d:75:b4:7e:1b:6b:5f:66:ba:b3:80:2e:88:09:41:87:05:8a:
b4:31:2a:e8:94:91:b1:16:20:a8:2e:2f:c8:c2:19:ae:60:80:
a2:be:26:89:4d:a3:f8:26:59:92:79:22:86:eb:ec:3b:ed:07:
d9:a1:e8:0d:59:af:81:4c:0d:f3:73:d4:22:07:19:8b:46:e0:
0f:14:e9:67:6f:d0:b8:c0:ce:60:34:43:ca:3f:29:16:0f:21:
66:26:f3:35:32:13:83:d2:ee:f5:3e:9d:f8:26:cd:cd:d4:3c:
c8:67:28:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa97pivojziCoyrVyfCY0PlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNjNkNmQzMTJkNjVlZTRlYTI4ZGFmNDNhZmNjODZlY2Vk
NDA4MGYwHhcNMjUwNTExMDYwMDUyWhcNMjUwNTEyMDYwMDUyWjAzMTEwLwYDVQQD
EygxODBhZmI0ZGRjZDY2MzQxYWNiMjJjOTFlZGRmMTEzZjFiZjUxNmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6O8UJOJ91uFoIXO0LPaY19hgGAiz
yh7+Oh8Zq2V9COHv5eMuZNpQR+J8LO2gsOPgRzJHiceJNxMY1gRgNO+VpRSxaJGY
hS5aHYep2eMRYIp1bpE7zoDhyEU8se2+ht8YZTC23gq3+gxVMTrU5hKvA0lazxln
XjccuN50mxMittHy62WOR1pZMuNHjS8HYmPOAni7lK06vEVrSnKCr8ypD1MEGyaS
DwdGV/SUBCH/eDGtu4qEBA1C7ZRk4HxKfAiMuue6TwFlglmoFy+20QBxAI5xgvH/
gl1o98h4aIv08m4S9/FxA5Bqi0/3TMzak4QHI/YlatTyPM+dY/gGqtDD/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgK+03c1mNBrLIske3fET8b9RbaMB8GA1UdIwQY
MBaAFG5j1tMS1l7k6ija9Dr8yG7O1AgPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm1QVzB4TFdYdVRxS05yME92ekliczdVQ0E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS83NWIwNmQtNmJjYi00YjE5LWFlYmIt
NDE1ODQ1ZGM4MGZiLzEvYm1QVzB4TFdYdVRxS05yME92ekliczdVQ0E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS83NWIwNmQtNmJjYi00YjE5LWFlYmItNDE1ODQ1ZGM4MGZi
LzEvYm1QVzB4TFdYdVRxS05yME92ekliczdVQ0E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmyHMHTH8
ur7byyrTMZl7bQoSKkuU9/jAbRhsqmKJTyzThwOVcOuF6jQccPVVhbNuMM5WQGeL
Dq+YIlVZA1oB/ajhgCbjqhLiFDe+rTNmwVBIG8WvRKE7zBE6KsfVhsr5uuOri1cq
y59xmn/WRp9fGEAJ0bbCkyNjWAHzIFcSQMtai5FXKvMFAhVcaH4XBQOPbXW0fhtr
X2a6s4AuiAlBhwWKtDEq6JSRsRYgqC4vyMIZrmCAor4miU2j+CZZknkihuvsO+0H
2aHoDVmvgUwN83PUIgcZi0bgDxTpZ2/QuMDOYDRDyj8pFg8hZibzNTITg9Lu9T6d
+CbNzdQ8yGco5A==
-----END CERTIFICATE-----
Generated at Sun May 11 13:34:19 2025 by rpki-client