Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
File: BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft (raw, json)
Hash identifier: 5fKiqYnl9WPGmPMcekHxfWcEBPLXfpZd0ZxeJWYAKjo=
Subject key identifier: 9C:60:86:61:4F:20:1A:45:E8:BE:88:57:F3:E5:32:F0:BE:E3:21:02
Authority key identifier: 07:35:DA:A8:CF:E2:5D:D1:2A:2C:26:E0:FF:CC:E9:76:36:74:8E:BD
Certificate issuer: /CN=0735daa8cfe25dd12a2c26e0ffcce97636748ebd
Certificate serial: 01965CBA4E9A6A50F1554135288B8DCE3705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
Manifest number: 1500
Signing time: Tue 22 Apr 2025 09:00:35 +0000
Manifest this update: Tue 22 Apr 2025 09:00:35 +0000
Manifest next update: Wed 23 Apr 2025 09:00:35 +0000
Files and hashes: 1: BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl (hash: e+XDfKr15XWh90KY/kX84mwIK8H4eEO/pv+QAlTeE3I=)
2: x6seRwBOq_CRZGJqhRd1EBp_kiI.roa (hash: rR2gIHJRwQudNQFzsP+C+tD9iC/4YNN6FWVD4AJ320s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:ba:4e:9a:6a:50:f1:55:41:35:28:8b:8d:ce:37:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0735daa8cfe25dd12a2c26e0ffcce97636748ebd
Validity
Not Before: Apr 22 09:00:35 2025 GMT
Not After : Apr 23 09:00:35 2025 GMT
Subject: CN=9c6086614f201a45e8be8857f3e532f0bee32102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4c:a4:f3:8b:d9:6c:72:9f:d2:fd:40:11:15:
fd:29:f2:22:39:b1:79:be:1f:43:90:84:5f:e4:17:
b3:41:6a:c2:ba:18:e8:dc:d7:1f:40:9f:91:7c:81:
b5:ff:03:6a:b5:b6:f1:28:40:bd:58:eb:ea:8e:f8:
d2:d2:f8:a1:9e:bd:db:09:7d:98:82:32:69:15:12:
0a:46:3b:0d:26:c2:e2:fa:38:17:9f:44:ca:52:be:
a1:08:65:15:c9:c6:6d:14:76:f4:93:0a:d9:90:4a:
fb:39:24:e1:42:7f:90:8c:2d:28:38:b2:42:1b:6b:
ec:69:f6:6d:be:e5:53:e2:3d:8d:e3:72:c6:ff:da:
c5:c1:56:2b:ba:0f:52:59:83:ae:61:3b:5f:33:d6:
92:7a:9c:fc:c3:17:f5:85:ab:8b:f6:fa:43:b4:e6:
b0:b3:05:f3:b8:9d:6b:88:b7:78:e0:8b:e7:4c:9a:
75:8a:d9:3e:88:32:f9:57:dd:ba:0b:ca:46:2d:00:
98:d7:e2:4c:d9:e2:0d:b5:a1:e9:58:9b:56:99:20:
d2:9e:63:a1:12:de:17:3d:03:18:6b:c9:fc:3f:31:
8e:b0:9a:d1:86:80:99:5e:d6:8e:b9:92:91:2f:49:
17:ce:88:ce:c5:19:14:4e:bc:a2:3c:3a:39:10:dc:
9a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:60:86:61:4F:20:1A:45:E8:BE:88:57:F3:E5:32:F0:BE:E3:21:02
X509v3 Authority Key Identifier:
keyid:07:35:DA:A8:CF:E2:5D:D1:2A:2C:26:E0:FF:CC:E9:76:36:74:8E:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:76:c4:d5:bc:b3:12:0e:5f:25:ee:2c:49:5d:90:37:6f:18:
de:e5:d8:9d:c8:07:fc:cb:85:97:7a:d0:a0:9c:06:a5:2f:1d:
3d:20:01:cb:83:97:fd:cb:21:5c:93:86:56:4e:a2:7d:94:ad:
79:44:88:94:67:b6:fa:9b:09:a4:36:28:58:58:10:fa:52:20:
a6:b1:ca:2c:53:7e:7a:db:91:b2:50:d4:4d:fe:26:b8:ca:47:
55:1d:a4:88:b9:07:46:89:3a:ed:9f:d1:d4:94:07:1d:7b:0e:
fc:11:a3:f4:53:2d:c9:1a:2a:1e:c4:74:f7:47:c2:8b:96:9f:
2e:a1:41:66:e1:37:c1:ce:9f:ba:79:bb:a9:90:6b:26:b1:c7:
03:02:a5:e4:cf:00:a2:c0:9c:63:3a:89:d6:5a:28:65:cf:96:
f0:62:e1:cf:1f:90:29:85:7c:ac:f5:ec:be:09:f9:cd:ac:ce:
1f:72:b8:65:61:36:fb:42:16:54:50:57:b1:72:24:61:36:e7:
7d:a3:c8:f3:b1:dc:89:dc:d3:f9:0a:20:cd:b3:4b:f3:6b:58:
b7:e0:4e:18:82:16:ae:b8:59:3c:5a:25:72:40:e6:2a:0b:7d:
fe:f6:ee:b8:29:e8:9b:f5:f0:cb:cc:df:85:0c:94:ad:ec:b6:
de:8e:18:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZcuk6aalDxVUE1KIuNzjcFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MzVkYWE4Y2ZlMjVkZDEyYTJjMjZlMGZmY2NlOTc2MzY3
NDhlYmQwHhcNMjUwNDIyMDkwMDM1WhcNMjUwNDIzMDkwMDM1WjAzMTEwLwYDVQQD
Eyg5YzYwODY2MTRmMjAxYTQ1ZThiZTg4NTdmM2U1MzJmMGJlZTMyMTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0yk84vZbHKf0v1AERX9KfIiObF5
vh9DkIRf5BezQWrCuhjo3NcfQJ+RfIG1/wNqtbbxKEC9WOvqjvjS0vihnr3bCX2Y
gjJpFRIKRjsNJsLi+jgXn0TKUr6hCGUVycZtFHb0kwrZkEr7OSThQn+QjC0oOLJC
G2vsafZtvuVT4j2N43LG/9rFwVYrug9SWYOuYTtfM9aSepz8wxf1hauL9vpDtOaw
swXzuJ1riLd44IvnTJp1itk+iDL5V926C8pGLQCY1+JM2eINtaHpWJtWmSDSnmOh
Et4XPQMYa8n8PzGOsJrRhoCZXtaOuZKRL0kXzojOxRkUTryiPDo5ENya+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJxghmFPIBpF6L6IV/PlMvC+4yECMB8GA1UdIwQY
MBaAFAc12qjP4l3RKiwm4P/M6XY2dI69MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnpYYXFNX2lYZEVxTENiZ184enBkalowanIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8yYTRiZjUtNDBjZi00NDdhLTk3ZTAt
Njc5Y2YwMjEwZDQ5LzEvQnpYYXFNX2lYZEVxTENiZ184enBkalowanIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8yYTRiZjUtNDBjZi00NDdhLTk3ZTAtNjc5Y2YwMjEwZDQ5
LzEvQnpYYXFNX2lYZEVxTENiZ184enBkalowanIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKnbE1byz
Eg5fJe4sSV2QN28Y3uXYncgH/MuFl3rQoJwGpS8dPSABy4OX/cshXJOGVk6ifZSt
eUSIlGe2+psJpDYoWFgQ+lIgprHKLFN+etuRslDUTf4muMpHVR2kiLkHRok67Z/R
1JQHHXsO/BGj9FMtyRoqHsR090fCi5afLqFBZuE3wc6funm7qZBrJrHHAwKl5M8A
osCcYzqJ1looZc+W8GLhzx+QKYV8rPXsvgn5zazOH3K4ZWE2+0IWVFBXsXIkYTbn
faPI87HcidzT+QogzbNL82tYt+BOGIIWrrhZPFolckDmKgt9/vbuuCnom/Xwy8zf
hQyUrey23o4YhQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 10:34:44 2025 by rpki-client