Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft
File: bFklNs4G_apawu5IEXz1eqO0yNA.mft (raw, json)
Hash identifier: ZCTFITpXfTe6IUiu2VKf/TqW0BVAgVeMhHq1N6evGek=
Subject key identifier: 2A:F6:DB:C2:49:FA:E9:F5:4C:8F:45:B1:9C:BF:CD:00:FC:B5:C4:D6
Authority key identifier: 6C:59:25:36:CE:06:FD:AA:5A:C2:EE:48:11:7C:F5:7A:A3:B4:C8:D0
Certificate issuer: /CN=6c592536ce06fdaa5ac2ee48117cf57aa3b4c8d0
Certificate serial: 01965A273B7887184BF76CCC3351620D9E1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft
Manifest number: 05F1
Signing time: Mon 21 Apr 2025 21:00:42 +0000
Manifest this update: Mon 21 Apr 2025 21:00:42 +0000
Manifest next update: Tue 22 Apr 2025 21:00:42 +0000
Files and hashes: 1: RRRoI352tPME83y_RWi6YuXJIxo.roa (hash: k7Cx4JuzSdpqE84E3rc6FTyI73B5CT48LupLWUTqrZc=)
2: bFklNs4G_apawu5IEXz1eqO0yNA.crl (hash: d4ByhpTaJn37VneE1VSsV1UPCljUKkjIOBoyGPrmf/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:27:3b:78:87:18:4b:f7:6c:cc:33:51:62:0d:9e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c592536ce06fdaa5ac2ee48117cf57aa3b4c8d0
Validity
Not Before: Apr 21 21:00:42 2025 GMT
Not After : Apr 22 21:00:42 2025 GMT
Subject: CN=2af6dbc249fae9f54c8f45b19cbfcd00fcb5c4d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:03:8e:15:21:77:2b:94:18:81:13:97:74:b7:
c6:4a:ec:bc:07:2d:e8:8a:1d:d5:20:26:18:5c:9f:
bb:7e:82:24:5b:64:7a:95:5b:a5:2d:a5:64:fa:1b:
70:11:6f:e5:e9:48:87:ba:26:4e:0b:e6:c7:19:ed:
21:11:4a:45:2d:1c:77:ac:9f:8a:3e:2d:42:d8:6f:
31:aa:cd:2f:38:e2:b1:21:47:0c:07:92:80:51:91:
f3:08:1e:de:03:46:ac:e4:ca:b2:ab:9d:91:e0:10:
9a:8d:48:0b:5e:b2:44:e4:b4:5c:d2:fb:c3:4b:a0:
f1:a3:07:c2:50:d4:54:51:28:36:2c:fa:90:fd:03:
64:88:d5:7e:54:46:62:d1:2e:d7:ea:f1:eb:bc:95:
c1:e7:9f:88:2d:39:1a:0f:c8:5a:0a:04:17:4f:f9:
8d:00:20:92:86:b4:d0:ce:32:79:b2:94:b1:24:e5:
43:43:06:19:19:f9:30:a8:88:b6:ae:0c:ca:d5:c1:
db:5a:fb:10:ca:e1:71:db:f9:6b:6f:54:00:aa:cd:
8e:59:2f:78:16:16:53:f9:dc:a6:d2:f1:c6:5c:42:
0b:38:f4:63:ed:3a:73:6f:1f:06:d1:73:e8:8d:d6:
d9:c2:1d:15:eb:ce:8a:2d:90:a4:9a:fc:ad:52:7d:
69:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F6:DB:C2:49:FA:E9:F5:4C:8F:45:B1:9C:BF:CD:00:FC:B5:C4:D6
X509v3 Authority Key Identifier:
keyid:6C:59:25:36:CE:06:FD:AA:5A:C2:EE:48:11:7C:F5:7A:A3:B4:C8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:3f:ae:47:96:08:4f:81:ac:77:5e:90:24:7e:7c:b9:f3:6c:
17:fe:e5:5d:81:14:c9:13:72:88:63:0c:85:12:82:96:68:02:
4a:80:be:e4:e4:fd:b1:39:2f:07:4c:77:dc:cc:36:67:68:7f:
0d:9d:be:92:d4:36:68:1e:9f:9e:5b:b1:22:d3:4a:c2:89:1c:
ed:19:52:5a:af:e8:cc:e4:cd:6e:1b:17:7b:66:2f:59:2d:c0:
ac:d1:72:a6:c4:7c:70:bc:59:04:59:59:1e:7f:d2:03:1d:fe:
e0:d0:fa:a0:f2:62:f1:91:16:04:49:39:e4:11:16:af:c3:71:
f1:7c:36:42:58:39:f9:2f:c1:0c:e1:c6:3e:dc:a4:b8:16:34:
7d:53:9b:3f:f6:45:bf:12:4a:8b:22:dc:22:c5:65:10:03:25:
00:26:4f:0e:ce:04:9f:56:26:49:12:53:e3:19:f4:62:c1:95:
9d:c5:35:97:04:92:a6:08:9e:bf:d4:5a:af:c2:95:7e:0f:01:
6a:7b:c9:17:07:97:3c:94:a2:ac:ea:8c:f7:bf:be:9f:bb:a8:
0f:82:60:f4:ab:06:95:77:83:00:74:ee:e2:ee:1a:f4:be:23:
14:31:0a:b1:69:20:ea:f9:ac:8d:ac:73:fa:dc:01:bc:f4:eb:
70:13:cc:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZaJzt4hxhL92zMM1FiDZ4eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNTkyNTM2Y2UwNmZkYWE1YWMyZWU0ODExN2NmNTdhYTNi
NGM4ZDAwHhcNMjUwNDIxMjEwMDQyWhcNMjUwNDIyMjEwMDQyWjAzMTEwLwYDVQQD
EygyYWY2ZGJjMjQ5ZmFlOWY1NGM4ZjQ1YjE5Y2JmY2QwMGZjYjVjNGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAOOFSF3K5QYgROXdLfGSuy8By3o
ih3VICYYXJ+7foIkW2R6lVulLaVk+htwEW/l6UiHuiZOC+bHGe0hEUpFLRx3rJ+K
Pi1C2G8xqs0vOOKxIUcMB5KAUZHzCB7eA0as5Mqyq52R4BCajUgLXrJE5LRc0vvD
S6DxowfCUNRUUSg2LPqQ/QNkiNV+VEZi0S7X6vHrvJXB55+ILTkaD8haCgQXT/mN
ACCShrTQzjJ5spSxJOVDQwYZGfkwqIi2rgzK1cHbWvsQyuFx2/lrb1QAqs2OWS94
FhZT+dym0vHGXEILOPRj7Tpzbx8G0XPojdbZwh0V686KLZCkmvytUn1pCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCr228JJ+un1TI9FsZy/zQD8tcTWMB8GA1UdIwQY
MBaAFGxZJTbOBv2qWsLuSBF89XqjtMjQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkZrbE5zNEdfYXBhd3U1SUVYejFlcU8weU5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy82YTExZjQtZTU3Zi00MTE3LTkzYWIt
MGEyZWM1YTIzYjk4LzEvYkZrbE5zNEdfYXBhd3U1SUVYejFlcU8weU5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy82YTExZjQtZTU3Zi00MTE3LTkzYWItMGEyZWM1YTIzYjk4
LzEvYkZrbE5zNEdfYXBhd3U1SUVYejFlcU8weU5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApj+uR5YI
T4Gsd16QJH58ufNsF/7lXYEUyRNyiGMMhRKClmgCSoC+5OT9sTkvB0x33Mw2Z2h/
DZ2+ktQ2aB6fnluxItNKwokc7RlSWq/ozOTNbhsXe2YvWS3ArNFypsR8cLxZBFlZ
Hn/SAx3+4ND6oPJi8ZEWBEk55BEWr8Nx8Xw2Qlg5+S/BDOHGPtykuBY0fVObP/ZF
vxJKiyLcIsVlEAMlACZPDs4En1YmSRJT4xn0YsGVncU1lwSSpgiev9Rar8KVfg8B
anvJFweXPJSirOqM97++n7uoD4Jg9KsGlXeDAHTu4u4a9L4jFDEKsWkg6vmsjaxz
+twBvPTrcBPMgw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 23:58:39 2025 by rpki-client