Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/45c53d-aba9-42f7-8496-7cce34fe6b5d/1/bQmekI59iHniTR7eCdgSz0at4sw.mft
File: bQmekI59iHniTR7eCdgSz0at4sw.mft (raw, json)
Hash identifier: sL2p1EWZ9bmhlxLYVlENp3slFBotsjq5/iiB4TgAEkM=
Subject key identifier: 71:C5:8B:E4:A1:58:8B:4F:74:8B:DE:26:C0:BF:21:B1:E1:1A:9F:1B
Authority key identifier: 6D:09:9E:90:8E:7D:88:79:E2:4D:1E:DE:09:D8:12:CF:46:AD:E2:CC
Certificate issuer: /CN=6d099e908e7d8879e24d1ede09d812cf46ade2cc
Certificate serial: 0196DCD4557FB1610D42D08B16747FC1953B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQmekI59iHniTR7eCdgSz0at4sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/45c53d-aba9-42f7-8496-7cce34fe6b5d/1/bQmekI59iHniTR7eCdgSz0at4sw.mft
Manifest number: 0440
Signing time: Sat 17 May 2025 06:00:24 +0000
Manifest this update: Sat 17 May 2025 06:00:24 +0000
Manifest next update: Sun 18 May 2025 06:00:24 +0000
Files and hashes: 1: bQmekI59iHniTR7eCdgSz0at4sw.crl (hash: R6MEXS/btj810MibPio+2pSTj2lKiXveW7DakXOPChc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/45c53d-aba9-42f7-8496-7cce34fe6b5d/1/bQmekI59iHniTR7eCdgSz0at4sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/45c53d-aba9-42f7-8496-7cce34fe6b5d/1/bQmekI59iHniTR7eCdgSz0at4sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQmekI59iHniTR7eCdgSz0at4sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:dc:d4:55:7f:b1:61:0d:42:d0:8b:16:74:7f:c1:95:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d099e908e7d8879e24d1ede09d812cf46ade2cc
Validity
Not Before: May 17 06:00:24 2025 GMT
Not After : May 18 06:00:24 2025 GMT
Subject: CN=71c58be4a1588b4f748bde26c0bf21b1e11a9f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b3:dd:85:56:a0:ee:d7:0a:34:b8:4d:f5:98:
58:01:1b:3d:49:cc:f7:48:61:22:bc:8d:43:1a:b0:
9f:ed:e6:90:8b:be:c7:2b:5a:12:d9:22:09:50:33:
dd:47:9a:a7:09:96:3a:d9:db:d1:20:5c:d1:18:0e:
b5:0a:8d:0b:eb:81:35:43:8a:7d:77:b1:77:3c:14:
91:7e:1b:67:28:cf:01:09:cf:aa:38:fe:e6:f4:ec:
29:d7:3c:4f:8f:06:06:48:03:a4:ef:f0:ce:79:6b:
66:26:a9:d5:33:f8:2e:1a:a6:47:a9:e0:c0:cb:ab:
04:39:e2:be:72:07:cc:d6:ef:90:50:dd:38:ae:57:
bd:5a:15:1b:75:e2:3e:a5:d1:f0:ba:65:f7:fd:28:
aa:77:45:ba:d7:cb:97:66:0c:0f:8d:0a:22:b0:b9:
d6:d6:68:10:72:01:78:72:0e:f0:68:96:2e:59:62:
61:53:fd:f8:2c:4b:b2:2a:f4:6e:9f:05:71:63:ee:
4f:76:c9:6d:f0:81:a3:9e:70:b2:c2:3e:35:f1:18:
a3:ac:c5:17:63:ba:2d:47:a5:ae:f2:76:c5:1e:88:
e9:67:dd:4d:d9:df:6a:07:e2:a9:d5:42:1a:2c:cc:
d3:1f:b6:5c:1f:27:d2:5b:d4:20:fb:42:1c:2a:62:
fe:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C5:8B:E4:A1:58:8B:4F:74:8B:DE:26:C0:BF:21:B1:E1:1A:9F:1B
X509v3 Authority Key Identifier:
keyid:6D:09:9E:90:8E:7D:88:79:E2:4D:1E:DE:09:D8:12:CF:46:AD:E2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQmekI59iHniTR7eCdgSz0at4sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/45c53d-aba9-42f7-8496-7cce34fe6b5d/1/bQmekI59iHniTR7eCdgSz0at4sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/45c53d-aba9-42f7-8496-7cce34fe6b5d/1/bQmekI59iHniTR7eCdgSz0at4sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:75:e9:35:1d:d1:34:f1:56:b7:d9:7f:33:04:2b:33:a3:4c:
24:a6:b5:a2:1a:b4:74:66:45:ac:69:c5:1a:49:10:04:a5:8b:
54:75:2f:4a:bc:af:d8:fb:b3:ef:f9:8d:12:e8:a4:83:b4:e9:
39:e5:db:df:b4:e2:dd:b9:c9:73:a2:ab:92:c5:74:4e:a8:52:
cc:f3:0d:c2:6e:1b:1d:d4:71:50:15:da:f2:c5:f1:f5:3b:25:
da:94:cf:cd:2f:45:9d:5a:48:f4:11:6c:19:d7:73:d1:9a:a2:
96:7d:9a:80:4f:3b:4e:16:ab:6e:ad:26:e1:8b:a7:8f:ae:90:
d5:36:d7:d7:18:d1:b9:29:6c:d2:c6:42:c1:45:0f:82:25:c0:
29:92:36:45:ab:c3:41:49:7a:7a:f1:92:c5:1f:7b:48:40:13:
f9:88:62:e6:01:38:18:be:ab:69:1d:0b:4f:f0:e3:ba:19:61:
38:ba:23:cd:98:4d:8a:48:2f:85:cf:74:7d:9c:24:87:56:24:
23:1c:64:15:c9:04:0a:e6:c6:ea:27:c8:fa:27:2c:a9:2a:81:
4d:2e:7c:b0:92:14:35:dc:cb:a3:e8:1a:02:ea:9e:ab:91:d7:
26:96:ed:15:6e:df:64:76:a0:2e:ec:57:85:fb:89:ff:1d:ef:
64:81:58:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbc1FV/sWENQtCLFnR/wZU7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMDk5ZTkwOGU3ZDg4NzllMjRkMWVkZTA5ZDgxMmNmNDZh
ZGUyY2MwHhcNMjUwNTE3MDYwMDI0WhcNMjUwNTE4MDYwMDI0WjAzMTEwLwYDVQQD
Eyg3MWM1OGJlNGExNTg4YjRmNzQ4YmRlMjZjMGJmMjFiMWUxMWE5ZjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrPdhVag7tcKNLhN9ZhYARs9Scz3
SGEivI1DGrCf7eaQi77HK1oS2SIJUDPdR5qnCZY62dvRIFzRGA61Co0L64E1Q4p9
d7F3PBSRfhtnKM8BCc+qOP7m9Owp1zxPjwYGSAOk7/DOeWtmJqnVM/guGqZHqeDA
y6sEOeK+cgfM1u+QUN04rle9WhUbdeI+pdHwumX3/Siqd0W618uXZgwPjQoisLnW
1mgQcgF4cg7waJYuWWJhU/34LEuyKvRunwVxY+5Pdslt8IGjnnCywj418RijrMUX
Y7otR6Wu8nbFHojpZ91N2d9qB+Kp1UIaLMzTH7ZcHyfSW9Qg+0IcKmL+SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHHFi+ShWItPdIveJsC/IbHhGp8bMB8GA1UdIwQY
MBaAFG0JnpCOfYh54k0e3gnYEs9GreLMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlFtZWtJNTlpSG5pVFI3ZUNkZ1N6MGF0NHN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80NWM1M2QtYWJhOS00MmY3LTg0OTYt
N2NjZTM0ZmU2YjVkLzEvYlFtZWtJNTlpSG5pVFI3ZUNkZ1N6MGF0NHN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi80NWM1M2QtYWJhOS00MmY3LTg0OTYtN2NjZTM0ZmU2YjVk
LzEvYlFtZWtJNTlpSG5pVFI3ZUNkZ1N6MGF0NHN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgnXpNR3R
NPFWt9l/MwQrM6NMJKa1ohq0dGZFrGnFGkkQBKWLVHUvSryv2Puz7/mNEuikg7Tp
OeXb37Ti3bnJc6KrksV0TqhSzPMNwm4bHdRxUBXa8sXx9Tsl2pTPzS9FnVpI9BFs
Gddz0Zqiln2agE87Tharbq0m4Yunj66Q1TbX1xjRuSls0sZCwUUPgiXAKZI2RavD
QUl6evGSxR97SEAT+Yhi5gE4GL6raR0LT/DjuhlhOLojzZhNikgvhc90fZwkh1Yk
IxxkFckECubG6ifI+icsqSqBTS58sJIUNdzLo+gaAuqeq5HXJpbtFW7fZHagLuxX
hfuJ/x3vZIFYBQ==
-----END CERTIFICATE-----
Generated at Sat May 17 08:28:58 2025 by rpki-client