Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
File: bFN3u52kHKoRdvQyJi3KqZxHb5o.mft (raw, json)
Hash identifier: J2pun+kyQs6znkwMp78xsyF0c/R4MmLXek7n4KsjSAs=
Subject key identifier: 01:9B:2A:CB:CD:79:9C:DE:55:B3:0D:43:B7:86:AE:13:E5:BC:C1:B5
Authority key identifier: 6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
Certificate issuer: /CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Certificate serial: 0196A0517E837528D5F74BE258E292815ECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
Manifest number: 0692
Signing time: Mon 05 May 2025 12:00:17 +0000
Manifest this update: Mon 05 May 2025 12:00:17 +0000
Manifest next update: Tue 06 May 2025 12:00:17 +0000
Files and hashes: 1: 02ZPMrkxrv9TSRNG7JSudAlDYd8.roa (hash: 1pjHbb+bmeJiA9CJ5xGCBjxXea42uVA7wH4sLUyonyA=)
2: bFN3u52kHKoRdvQyJi3KqZxHb5o.crl (hash: 4xcw36bzM9b/0OzTGxshWP4Q8GBDAfthOz1BX4F2spg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:51:7e:83:75:28:d5:f7:4b:e2:58:e2:92:81:5e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Validity
Not Before: May 5 12:00:17 2025 GMT
Not After : May 6 12:00:17 2025 GMT
Subject: CN=019b2acbcd799cde55b30d43b786ae13e5bcc1b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3a:f7:8a:c2:d3:fc:60:fe:70:a5:87:e1:b9:
a3:16:db:79:92:7b:0e:96:61:0b:60:f5:7e:ce:bd:
d8:a8:bd:eb:00:3b:7d:40:86:4c:09:44:80:fa:02:
69:5f:4b:9a:ff:35:c9:a4:d7:1c:8a:aa:48:e7:cf:
7e:e9:58:0a:c8:0e:37:13:53:37:de:36:61:8e:ad:
62:7a:d4:d0:f5:0c:ef:68:ac:2a:5e:ff:f5:c4:d9:
0d:4a:84:4f:2f:8b:27:6b:26:44:ac:db:27:65:02:
79:38:0a:f5:14:95:1d:02:a6:6b:f1:13:8b:f6:e7:
5f:33:52:47:f1:21:73:2e:66:18:24:44:75:7c:9e:
22:e1:80:49:36:c7:67:d8:50:be:3a:f0:b1:23:ce:
4f:11:cd:04:73:a8:03:d2:3c:73:ab:21:02:d3:2c:
43:8f:fe:8e:93:b8:0e:fe:a7:61:11:50:bb:4e:7f:
28:48:6a:f3:d1:37:1d:53:6a:62:bc:bb:7a:b4:fa:
54:e6:1d:ab:08:34:3a:63:07:43:35:72:06:50:0d:
32:c3:20:6a:81:47:4c:47:13:9b:59:08:51:34:40:
5d:22:58:3c:71:aa:aa:33:cc:68:f0:8c:64:9d:e7:
14:af:1d:1b:7f:ef:90:27:40:e7:f0:ee:9a:3a:b4:
53:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9B:2A:CB:CD:79:9C:DE:55:B3:0D:43:B7:86:AE:13:E5:BC:C1:B5
X509v3 Authority Key Identifier:
keyid:6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:d7:13:ad:c6:02:90:a6:d4:9a:3b:bf:ad:72:15:d2:08:e7:
b1:ad:29:e0:a1:3f:e5:cb:6c:5b:3b:b4:e5:fa:3a:ec:70:36:
b0:fc:03:5d:b6:e8:cb:c7:fc:16:20:70:b0:34:3a:78:3c:31:
fd:26:5b:c5:89:ff:31:f5:1a:70:c9:29:4e:8d:b1:4b:a5:0e:
1a:0b:2a:38:3d:d6:51:30:87:61:43:96:b5:3a:b8:e9:74:be:
5a:b0:62:f4:7b:db:68:0f:c6:64:0a:88:54:9e:61:cd:c1:02:
c1:97:ef:6a:00:31:d0:1e:aa:ee:04:d3:4e:08:56:83:00:e5:
a8:0a:4e:b2:06:19:13:e6:50:b7:a4:62:3b:5a:62:da:7c:a7:
98:12:f5:87:d9:26:a7:e9:3c:0c:61:70:c2:4b:7e:09:6f:f4:
88:f9:d2:a5:98:18:08:a4:91:32:de:d7:f6:f7:9f:25:73:72:
7b:95:4a:7b:72:4d:39:24:e3:d2:9f:ca:16:f3:79:24:01:b4:
64:8b:3f:ad:ec:83:36:9f:20:3c:29:5c:d7:aa:c1:ee:c4:7f:
d1:61:4c:76:35:a3:28:ef:1a:31:bb:e1:44:3e:64:17:0b:4d:
2e:df:d3:82:80:4f:38:bd:97:72:b7:18:0b:d0:62:b1:c1:71:
6a:15:3a:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZagUX6DdSjV90viWOKSgV7MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNTM3N2JiOWRhNDFjYWExMTc2ZjQzMjI2MmRjYWE5OWM0
NzZmOWEwHhcNMjUwNTA1MTIwMDE3WhcNMjUwNTA2MTIwMDE3WjAzMTEwLwYDVQQD
EygwMTliMmFjYmNkNzk5Y2RlNTViMzBkNDNiNzg2YWUxM2U1YmNjMWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjr3isLT/GD+cKWH4bmjFtt5knsO
lmELYPV+zr3YqL3rADt9QIZMCUSA+gJpX0ua/zXJpNcciqpI589+6VgKyA43E1M3
3jZhjq1ietTQ9QzvaKwqXv/1xNkNSoRPL4snayZErNsnZQJ5OAr1FJUdAqZr8ROL
9udfM1JH8SFzLmYYJER1fJ4i4YBJNsdn2FC+OvCxI85PEc0Ec6gD0jxzqyEC0yxD
j/6Ok7gO/qdhEVC7Tn8oSGrz0TcdU2pivLt6tPpU5h2rCDQ6YwdDNXIGUA0ywyBq
gUdMRxObWQhRNEBdIlg8caqqM8xo8IxknecUrx0bf++QJ0Dn8O6aOrRTNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAGbKsvNeZzeVbMNQ7eGrhPlvMG1MB8GA1UdIwQY
MBaAFGxTd7udpByqEXb0MiYtyqmcR2+aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkZOM3U1MmtIS29SZHZReUppM0txWnhIYjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85YjE5YjUtNDNiYi00NzQ0LTkzY2It
NmVkMTBlYmI5MzNmLzEvYkZOM3U1MmtIS29SZHZReUppM0txWnhIYjVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS85YjE5YjUtNDNiYi00NzQ0LTkzY2ItNmVkMTBlYmI5MzNm
LzEvYkZOM3U1MmtIS29SZHZReUppM0txWnhIYjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsNcTrcYC
kKbUmju/rXIV0gjnsa0p4KE/5ctsWzu05fo67HA2sPwDXbboy8f8FiBwsDQ6eDwx
/SZbxYn/MfUacMkpTo2xS6UOGgsqOD3WUTCHYUOWtTq46XS+WrBi9HvbaA/GZAqI
VJ5hzcECwZfvagAx0B6q7gTTTghWgwDlqApOsgYZE+ZQt6RiO1pi2nynmBL1h9km
p+k8DGFwwkt+CW/0iPnSpZgYCKSRMt7X9vefJXNye5VKe3JNOSTj0p/KFvN5JAG0
ZIs/reyDNp8gPClc16rB7sR/0WFMdjWjKO8aMbvhRD5kFwtNLt/TgoBPOL2XcrcY
C9BiscFxahU6bQ==
-----END CERTIFICATE-----
Generated at Mon May 5 15:04:23 2025 by rpki-client