Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
File: BFAQGURA7kD13kLwwbKz03G82GM.mft (raw, json)
Hash identifier: hzQKYkTXoo6V2eqh8tEYQFqprlJE3crL1QuyQA8ESlo=
Subject key identifier: 3B:A6:42:79:AB:6B:DE:6E:5C:BA:FC:7C:ED:B2:8B:99:84:B2:7A:22
Authority key identifier: 04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
Certificate issuer: /CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Certificate serial: 019630F5A4492424D78E01495FAD1A749929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
Manifest number: 1432
Signing time: Sun 13 Apr 2025 21:02:06 +0000
Manifest this update: Sun 13 Apr 2025 21:02:06 +0000
Manifest next update: Mon 14 Apr 2025 21:02:06 +0000
Files and hashes: 1: BFAQGURA7kD13kLwwbKz03G82GM.crl (hash: GU4D+HDcg0F+2+cj5LiPRtHX9O99Nw6WUzXfUY2V5Eg=)
2: fNJzWMxwIRs-oxYj6gVLzdXlR9o.roa (hash: 2scd04V5Cfx10HVTv5lVQAKj0cVcY+kOPgXcQil/rZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 18:31:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:30:f5:a4:49:24:24:d7:8e:01:49:5f:ad:1a:74:99:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Validity
Not Before: Apr 13 21:02:06 2025 GMT
Not After : Apr 14 21:02:06 2025 GMT
Subject: CN=3ba64279ab6bde6e5cbafc7cedb28b9984b27a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:06:6d:04:62:6a:1a:83:41:a4:c6:75:34:ab:
2f:80:da:bc:09:9c:88:1a:e3:fd:85:42:0e:55:36:
0c:6b:21:76:13:df:05:0c:c4:97:bc:46:c6:50:80:
89:7b:cc:ab:cd:09:b9:47:40:b9:37:88:a0:66:f2:
11:a8:34:ec:b3:30:28:2b:40:d7:e4:aa:fe:ab:b7:
cb:e4:79:e7:16:e0:c1:e4:6b:23:24:b7:86:e3:88:
89:c3:7d:b8:71:1e:99:57:1f:e0:82:44:4b:d8:de:
52:74:ef:ca:b7:2d:cc:d8:21:da:06:50:cc:57:a2:
97:ca:c6:c0:91:03:9f:fd:54:e3:f8:3f:af:f3:4d:
51:e0:0b:53:88:b2:fb:86:7a:b6:da:33:c1:50:a8:
a4:71:a1:3b:d1:08:8a:ca:bc:c1:94:a5:a4:25:d2:
1c:49:90:0d:0a:59:cd:8f:70:8a:24:21:04:49:17:
c2:4c:27:f4:ce:e3:d9:50:b3:83:45:d2:a5:49:12:
49:85:ca:5e:28:cb:79:d4:98:1d:1c:a7:70:bd:f3:
65:34:42:8d:29:14:88:56:34:84:0d:9d:bb:ac:43:
6b:01:0d:2d:0c:76:1e:1f:e6:bc:37:12:b0:85:c0:
5e:ff:9d:bd:d3:c9:dd:15:60:9e:bf:e8:03:8e:6c:
e0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A6:42:79:AB:6B:DE:6E:5C:BA:FC:7C:ED:B2:8B:99:84:B2:7A:22
X509v3 Authority Key Identifier:
keyid:04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b1:af:39:bd:59:8a:fa:bd:3e:f6:72:ef:cf:4b:3f:45:a2:
94:14:3b:bc:75:de:c6:fa:f0:e8:32:92:8c:23:5e:a0:f8:e6:
c1:f1:d2:f4:41:f1:46:1c:75:1f:b5:bb:db:87:13:65:e8:59:
ba:56:90:48:01:4d:3d:76:90:b7:52:78:7e:d2:65:bc:66:51:
06:f4:45:02:e0:60:d9:1c:e5:4a:97:62:0d:ce:75:29:f3:78:
ec:37:bb:81:03:48:5f:e0:33:4e:01:f8:9c:0c:10:04:26:f6:
46:51:6a:3a:42:43:66:bd:50:76:64:0f:c1:51:e7:97:68:aa:
d9:72:5b:77:b4:6b:f7:20:3f:ca:e0:92:04:82:22:7c:06:25:
19:8f:c7:d7:9a:26:94:ed:18:e0:75:0d:b1:16:b2:dd:41:44:
d5:36:a4:f8:90:91:86:90:52:4c:77:5c:01:df:e0:da:d8:3e:
a5:b1:96:f3:de:0a:94:e8:c9:17:f4:9f:ed:97:8e:f4:9d:e8:
f2:a4:50:be:32:3b:dc:84:8d:03:25:65:aa:0e:fc:a5:7f:94:
c1:aa:03:db:fd:66:e5:5d:20:b4:19:52:01:3d:23:19:14:37:
ef:08:83:1b:5d:68:fa:f3:b0:d3:59:2c:35:cc:45:8d:38:a8:
5f:81:57:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYw9aRJJCTXjgFJX60adJkpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NTAxMDE5NDQ0MGVlNDBmNWRlNDJmMGMxYjJiM2QzNzFi
Y2Q4NjMwHhcNMjUwNDEzMjEwMjA2WhcNMjUwNDE0MjEwMjA2WjAzMTEwLwYDVQQD
EygzYmE2NDI3OWFiNmJkZTZlNWNiYWZjN2NlZGIyOGI5OTg0YjI3YTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wZtBGJqGoNBpMZ1NKsvgNq8CZyI
GuP9hUIOVTYMayF2E98FDMSXvEbGUICJe8yrzQm5R0C5N4igZvIRqDTsszAoK0DX
5Kr+q7fL5HnnFuDB5GsjJLeG44iJw324cR6ZVx/ggkRL2N5SdO/Kty3M2CHaBlDM
V6KXysbAkQOf/VTj+D+v801R4AtTiLL7hnq22jPBUKikcaE70QiKyrzBlKWkJdIc
SZANClnNj3CKJCEESRfCTCf0zuPZULODRdKlSRJJhcpeKMt51JgdHKdwvfNlNEKN
KRSIVjSEDZ27rENrAQ0tDHYeH+a8NxKwhcBe/52908ndFWCev+gDjmzg4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDumQnmra95uXLr8fO2yi5mEsnoiMB8GA1UdIwQY
MBaAFARQEBlEQO5A9d5C8MGys9NxvNhjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkZBUUdVUkE3a0QxM2tMd3diS3owM0c4MkdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC82ODI2ZjUtZjk3ZS00MzllLWIxOTkt
YjdiZDEwZTQ0ODlmLzEvQkZBUUdVUkE3a0QxM2tMd3diS3owM0c4MkdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC82ODI2ZjUtZjk3ZS00MzllLWIxOTktYjdiZDEwZTQ0ODlm
LzEvQkZBUUdVUkE3a0QxM2tMd3diS3owM0c4MkdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVLGvOb1Z
ivq9PvZy789LP0WilBQ7vHXexvrw6DKSjCNeoPjmwfHS9EHxRhx1H7W724cTZehZ
ulaQSAFNPXaQt1J4ftJlvGZRBvRFAuBg2RzlSpdiDc51KfN47De7gQNIX+AzTgH4
nAwQBCb2RlFqOkJDZr1QdmQPwVHnl2iq2XJbd7Rr9yA/yuCSBIIifAYlGY/H15om
lO0Y4HUNsRay3UFE1Tak+JCRhpBSTHdcAd/g2tg+pbGW894KlOjJF/Sf7ZeO9J3o
8qRQvjI73ISNAyVlqg78pX+UwaoD2/1m5V0gtBlSAT0jGRQ37wiDG11o+vOw01ks
NcxFjTioX4FXhQ==
-----END CERTIFICATE-----
Generated at Mon Apr 14 03:34:32 2025 by rpki-client