Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
File: bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft (raw, json)
Hash identifier: D6DRyU7eTQylvXU1RZxr+mHC35+T8ehzUR08i2HyYp0=
Subject key identifier: 74:B2:66:75:1A:74:05:D0:99:6B:23:01:B4:25:91:3B:71:B8:6D:B8
Authority key identifier: 6D:00:51:98:B7:45:72:A1:56:AB:63:F2:30:85:89:7B:D3:CC:D4:1B
Certificate issuer: /CN=6d005198b74572a156ab63f23085897bd3ccd41b
Certificate serial: 01965493238050E7E4CF8C701CB8E216A7E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
Manifest number: 0122
Signing time: Sun 20 Apr 2025 19:00:51 +0000
Manifest this update: Sun 20 Apr 2025 19:00:51 +0000
Manifest next update: Mon 21 Apr 2025 19:00:51 +0000
Files and hashes: 1: bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl (hash: QSuHW8k6kUBuK/GAurBRk1+LoFWpMnJqfNbO6pDkWwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:93:23:80:50:e7:e4:cf:8c:70:1c:b8:e2:16:a7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d005198b74572a156ab63f23085897bd3ccd41b
Validity
Not Before: Apr 20 19:00:51 2025 GMT
Not After : Apr 21 19:00:51 2025 GMT
Subject: CN=74b266751a7405d0996b2301b425913b71b86db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e2:61:c3:fe:a0:c3:cc:6e:f1:8b:b2:dc:68:
d1:d5:a6:b7:99:ce:e8:21:67:aa:2a:40:53:27:59:
ee:8b:77:7d:c0:59:4f:40:fc:58:4c:01:7c:a2:e6:
83:d5:a9:77:5f:8f:ca:a1:36:af:70:3e:a4:62:41:
8f:c4:00:fc:0c:5f:84:5c:b4:c4:16:1d:2c:29:f9:
54:e6:e4:7a:1e:60:97:7f:7d:7f:a1:5c:95:84:58:
f7:51:dd:75:5b:79:58:ae:b8:f7:5e:e2:f8:ff:a8:
86:08:16:53:bf:5b:b6:cb:21:22:09:d4:b1:1c:28:
3e:d2:ca:57:1d:30:22:ee:9a:27:07:cc:76:7c:90:
8e:31:43:ed:73:9e:5b:3f:96:84:e4:06:04:4b:4a:
42:29:47:20:a4:80:93:36:9e:78:94:83:70:c4:d9:
ae:9c:88:e1:34:53:1b:7d:a2:61:26:0d:50:a7:3d:
02:21:81:d5:2e:91:c7:df:a9:df:02:62:14:02:58:
f1:f5:4e:d1:54:26:84:09:d0:d9:c7:4c:f7:bb:83:
d1:7f:21:2b:37:2f:af:2b:2e:3d:6c:f7:c9:6a:16:
f3:37:de:0d:9a:2a:e6:60:d9:b5:31:b8:a5:6c:77:
0f:c1:c5:3f:bd:f8:da:6c:bb:8f:56:ee:66:c5:38:
72:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B2:66:75:1A:74:05:D0:99:6B:23:01:B4:25:91:3B:71:B8:6D:B8
X509v3 Authority Key Identifier:
keyid:6D:00:51:98:B7:45:72:A1:56:AB:63:F2:30:85:89:7B:D3:CC:D4:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ad:4c:7c:12:9a:ec:0c:f6:d5:b1:25:22:ab:58:49:b6:d9:
18:2c:d6:27:b4:7a:12:70:1b:46:a9:6c:2b:57:0c:7e:45:4a:
b8:5b:57:b4:2b:e3:de:79:c1:ab:de:64:12:91:9b:48:a2:f0:
16:56:a0:6a:1c:10:bf:93:20:5e:bf:33:a9:e2:28:d6:bb:0d:
4c:c5:43:3b:bf:a8:2d:84:ee:4f:5d:a1:48:24:39:d1:23:00:
ff:ee:b7:9e:d3:15:e7:8f:59:1c:b4:55:6a:81:72:a0:99:a6:
e3:9d:8a:32:45:21:8c:eb:b3:60:c9:3f:4c:c0:e1:bd:87:43:
b5:28:e7:68:bc:6a:68:bc:4f:43:e6:59:a6:d1:a6:09:7f:0b:
b3:0e:26:ac:90:ee:12:f5:e1:c1:68:b8:09:5b:38:1e:19:6e:
fd:ad:94:16:cb:20:46:a5:45:b9:ea:31:24:d8:fd:d8:4e:32:
05:2a:17:06:98:5c:f8:69:80:d4:6a:5a:96:5d:a0:bf:e6:15:
78:13:e6:73:a5:98:9a:fe:42:5c:4e:ab:45:d4:58:3a:bb:31:
86:2d:3f:d4:73:2e:87:c4:e1:5d:9e:25:a5:41:7b:10:17:11:
5b:39:a2:c2:08:44:3d:a3:5e:a7:06:3e:3d:e4:92:0a:bb:46:
99:08:0b:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUkyOAUOfkz4xwHLjiFqfpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMDA1MTk4Yjc0NTcyYTE1NmFiNjNmMjMwODU4OTdiZDNj
Y2Q0MWIwHhcNMjUwNDIwMTkwMDUxWhcNMjUwNDIxMTkwMDUxWjAzMTEwLwYDVQQD
Eyg3NGIyNjY3NTFhNzQwNWQwOTk2YjIzMDFiNDI1OTEzYjcxYjg2ZGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeJhw/6gw8xu8Yuy3GjR1aa3mc7o
IWeqKkBTJ1nui3d9wFlPQPxYTAF8ouaD1al3X4/KoTavcD6kYkGPxAD8DF+EXLTE
Fh0sKflU5uR6HmCXf31/oVyVhFj3Ud11W3lYrrj3XuL4/6iGCBZTv1u2yyEiCdSx
HCg+0spXHTAi7ponB8x2fJCOMUPtc55bP5aE5AYES0pCKUcgpICTNp54lINwxNmu
nIjhNFMbfaJhJg1Qpz0CIYHVLpHH36nfAmIUAljx9U7RVCaECdDZx0z3u4PRfyEr
Ny+vKy49bPfJahbzN94NmirmYNm1MbilbHcPwcU/vfjabLuPVu5mxThywQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSyZnUadAXQmWsjAbQlkTtxuG24MB8GA1UdIwQY
MBaAFG0AUZi3RXKhVqtj8jCFiXvTzNQbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlFCUm1MZEZjcUZXcTJQeU1JV0plOVBNMUJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC85NzVmM2MtYWY0YS00MzdiLTg5YjEt
Mjg0ZTUxMjNlMjlmLzEvYlFCUm1MZEZjcUZXcTJQeU1JV0plOVBNMUJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC85NzVmM2MtYWY0YS00MzdiLTg5YjEtMjg0ZTUxMjNlMjlm
LzEvYlFCUm1MZEZjcUZXcTJQeU1JV0plOVBNMUJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ61MfBKa
7Az21bElIqtYSbbZGCzWJ7R6EnAbRqlsK1cMfkVKuFtXtCvj3nnBq95kEpGbSKLw
FlagahwQv5MgXr8zqeIo1rsNTMVDO7+oLYTuT12hSCQ50SMA/+63ntMV549ZHLRV
aoFyoJmm452KMkUhjOuzYMk/TMDhvYdDtSjnaLxqaLxPQ+ZZptGmCX8Lsw4mrJDu
EvXhwWi4CVs4Hhlu/a2UFssgRqVFueoxJNj92E4yBSoXBphc+GmA1Gpall2gv+YV
eBPmc6WYmv5CXE6rRdRYOrsxhi0/1HMuh8ThXZ4lpUF7EBcRWzmiwghEPaNepwY+
PeSSCrtGmQgLxA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:25:36 2025 by rpki-client