Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
File: BFAQGURA7kD13kLwwbKz03G82GM.mft (raw, json)
Hash identifier: wn8DOZwW5rc8dpm017uq/CH3IbgshCt4ZZsMeBa6EQ4=
Subject key identifier: 67:A0:2E:8C:B0:A7:DE:9F:00:58:3C:DE:42:9B:BC:77:DD:85:D8:38
Authority key identifier: 04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
Certificate issuer: /CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Certificate serial: 0196BA11B096EB1E97F699DECA3DE98A2708
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
Manifest number: 1479
Signing time: Sat 10 May 2025 12:00:43 +0000
Manifest this update: Sat 10 May 2025 12:00:43 +0000
Manifest next update: Sun 11 May 2025 12:00:43 +0000
Files and hashes: 1: BFAQGURA7kD13kLwwbKz03G82GM.crl (hash: PZoAKzRz6FFBnHdezcIgE8mjHqQbyw2EvaO3S3yJI+A=)
2: fNJzWMxwIRs-oxYj6gVLzdXlR9o.roa (hash: 2scd04V5Cfx10HVTv5lVQAKj0cVcY+kOPgXcQil/rZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:11:b0:96:eb:1e:97:f6:99:de:ca:3d:e9:8a:27:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Validity
Not Before: May 10 12:00:43 2025 GMT
Not After : May 11 12:00:43 2025 GMT
Subject: CN=67a02e8cb0a7de9f00583cde429bbc77dd85d838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:bf:22:88:9c:34:fe:c6:2a:06:b6:4a:20:5a:
78:c4:76:83:95:2d:e6:e3:7d:cc:f4:7b:98:13:c9:
d3:64:e6:cb:e2:18:76:12:31:5f:68:31:f2:49:4a:
94:96:56:9f:ae:71:77:9d:50:ad:21:e0:ad:97:2d:
57:0d:1e:63:75:e2:47:36:3a:b5:7f:9d:c1:dd:4f:
d6:2f:1c:e0:e2:ed:bc:fb:d1:7e:6e:9e:c3:30:d1:
0a:48:e6:84:75:22:01:f1:fa:a5:63:5a:41:ee:af:
47:bd:61:f7:66:f8:58:f6:e6:3e:11:00:58:fd:95:
67:a1:45:60:2f:6e:31:24:4d:bf:0d:fa:ac:34:dc:
c6:bc:be:a8:0d:8d:5e:65:12:50:67:92:dc:34:69:
a5:05:5a:e5:73:9e:2d:8e:a9:63:df:ab:e2:d0:c5:
06:f5:73:15:3a:aa:c6:09:16:06:3b:db:1b:b5:c7:
4d:50:86:e7:a1:3e:3c:c2:ce:be:6b:ba:01:f5:ff:
c3:12:17:1e:c2:09:1a:04:e9:61:ff:f5:f3:2c:31:
bf:4c:2c:9a:86:0c:3f:b5:68:78:d5:44:25:11:16:
6f:d6:84:74:22:48:a8:f8:d8:26:1b:1e:64:7e:f3:
6a:1a:bf:45:32:ec:93:91:ac:59:2d:11:27:a3:c9:
12:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A0:2E:8C:B0:A7:DE:9F:00:58:3C:DE:42:9B:BC:77:DD:85:D8:38
X509v3 Authority Key Identifier:
keyid:04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:5a:03:da:32:84:5d:f1:a4:0c:33:55:4a:f6:86:62:ac:74:
17:ad:4e:6c:fe:b9:53:f4:61:05:76:d1:bd:4f:be:96:90:0f:
4d:08:b3:ef:31:91:92:fb:71:f9:4c:69:9d:c8:ec:09:5c:be:
e7:51:e8:bb:69:7a:86:43:1e:87:94:93:ac:4c:e4:74:ad:81:
ee:2a:fc:22:05:a0:55:86:43:d4:d8:a4:2f:70:71:af:9a:77:
68:6c:5c:1a:13:79:f9:c2:60:c1:4f:de:10:f9:7e:a3:17:2c:
d4:92:c2:08:c8:94:5a:be:65:f6:72:3d:da:af:0f:c5:d9:e4:
fb:79:50:e4:c1:bc:b7:95:a9:5a:6a:df:a3:9d:1a:f4:87:b5:
02:6a:03:99:41:7d:db:ec:2b:47:e2:11:3f:f3:f8:78:b9:fe:
22:6b:d5:b6:e0:5f:0b:84:95:b3:9b:f0:42:21:34:27:99:70:
db:9d:3e:a0:4a:25:0a:c3:ba:ce:6a:b1:79:0c:96:62:6e:cd:
2f:c3:04:d3:80:15:c8:ee:70:5c:7e:e0:5b:8c:1a:91:7a:43:
39:20:9a:b8:74:c3:28:50:43:78:5a:7d:b6:cd:13:fb:1b:d6:
0d:ba:81:7f:08:66:a0:60:93:64:4e:6a:d0:cb:f7:53:fa:d6:
b6:45:b8:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa6EbCW6x6X9pneyj3piicIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NTAxMDE5NDQ0MGVlNDBmNWRlNDJmMGMxYjJiM2QzNzFi
Y2Q4NjMwHhcNMjUwNTEwMTIwMDQzWhcNMjUwNTExMTIwMDQzWjAzMTEwLwYDVQQD
Eyg2N2EwMmU4Y2IwYTdkZTlmMDA1ODNjZGU0MjliYmM3N2RkODVkODM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6b8iiJw0/sYqBrZKIFp4xHaDlS3m
433M9HuYE8nTZObL4hh2EjFfaDHySUqUllafrnF3nVCtIeCtly1XDR5jdeJHNjq1
f53B3U/WLxzg4u28+9F+bp7DMNEKSOaEdSIB8fqlY1pB7q9HvWH3ZvhY9uY+EQBY
/ZVnoUVgL24xJE2/DfqsNNzGvL6oDY1eZRJQZ5LcNGmlBVrlc54tjqlj36vi0MUG
9XMVOqrGCRYGO9sbtcdNUIbnoT48ws6+a7oB9f/DEhcewgkaBOlh//XzLDG/TCya
hgw/tWh41UQlERZv1oR0Ikio+NgmGx5kfvNqGr9FMuyTkaxZLREno8kSlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGegLoywp96fAFg83kKbvHfdhdg4MB8GA1UdIwQY
MBaAFARQEBlEQO5A9d5C8MGys9NxvNhjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkZBUUdVUkE3a0QxM2tMd3diS3owM0c4MkdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC82ODI2ZjUtZjk3ZS00MzllLWIxOTkt
YjdiZDEwZTQ0ODlmLzEvQkZBUUdVUkE3a0QxM2tMd3diS3owM0c4MkdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC82ODI2ZjUtZjk3ZS00MzllLWIxOTktYjdiZDEwZTQ0ODlm
LzEvQkZBUUdVUkE3a0QxM2tMd3diS3owM0c4MkdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb1oD2jKE
XfGkDDNVSvaGYqx0F61ObP65U/RhBXbRvU++lpAPTQiz7zGRkvtx+UxpncjsCVy+
51Hou2l6hkMeh5STrEzkdK2B7ir8IgWgVYZD1NikL3Bxr5p3aGxcGhN5+cJgwU/e
EPl+oxcs1JLCCMiUWr5l9nI92q8Pxdnk+3lQ5MG8t5WpWmrfo50a9Ie1AmoDmUF9
2+wrR+IRP/P4eLn+ImvVtuBfC4SVs5vwQiE0J5lw250+oEolCsO6zmqxeQyWYm7N
L8ME04AVyO5wXH7gW4wakXpDOSCauHTDKFBDeFp9ts0T+xvWDbqBfwhmoGCTZE5q
0Mv3U/rWtkW4Pg==
-----END CERTIFICATE-----
Generated at Sat May 10 14:19:49 2025 by rpki-client