Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
File: BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft (raw, json)
Hash identifier: Wdn+NjCd3oVFiuaJ16eSmpBcFAvUjKQWGKHaU/SiMN8=
Subject key identifier: AA:F1:55:17:CC:E2:19:36:CB:80:20:DF:72:34:F7:6C:32:EE:56:48
Authority key identifier: 04:7E:E7:4A:C4:90:E3:1F:1D:40:76:4F:09:24:11:EE:25:EB:16:65
Certificate issuer: /CN=047ee74ac490e31f1d40764f092411ee25eb1665
Certificate serial: 0196556E56CD3E3DFAFAA81E00B2964285B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 23:00:16 +0000
Manifest this update: Sun 20 Apr 2025 23:00:16 +0000
Manifest next update: Mon 21 Apr 2025 23:00:16 +0000
Files and hashes: 1: BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl (hash: fJSV2ZraeZ/u5HJG53l+AIAP1xdH8HNE7A77Ax11xbE=)
2: lTisVzPeiPslXlhHYnIYv10zoj8.roa (hash: nI5Tne3/W5S4/3jqutx+PLa3bngqaYEDH1hjjV/uGx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:56:cd:3e:3d:fa:fa:a8:1e:00:b2:96:42:85:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=047ee74ac490e31f1d40764f092411ee25eb1665
Validity
Not Before: Apr 20 23:00:16 2025 GMT
Not After : Apr 21 23:00:16 2025 GMT
Subject: CN=aaf15517cce21936cb8020df7234f76c32ee5648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:00:e7:a6:72:a3:6a:d9:d1:b4:fc:36:05:c8:
f6:a0:89:d7:89:39:e9:e5:ab:91:03:a7:64:f4:14:
1f:3d:30:e3:29:92:29:a0:46:93:4f:68:ab:46:0e:
bf:b8:ce:37:02:e5:ce:46:7f:8e:b3:36:89:52:44:
55:16:bf:8e:51:6e:21:08:1a:8f:bd:de:e8:32:cd:
19:79:34:03:e6:c9:ff:3d:f2:9a:16:81:8f:38:8d:
79:23:d2:9f:d1:28:ec:53:f1:3c:f5:a3:7a:01:b0:
66:c1:54:54:0b:33:47:b7:f5:c0:e3:aa:55:20:cb:
67:f5:7c:cf:ad:b6:6e:7d:79:46:c2:a6:22:80:46:
0e:09:27:27:ae:fa:06:2b:32:f5:2a:e4:a6:4f:08:
ca:34:19:98:32:8b:d9:f7:28:b3:25:28:5b:d2:9e:
41:a6:6c:0c:c3:ea:a6:3f:cd:60:37:c8:7b:14:61:
99:44:5f:42:fb:bb:ed:40:65:81:a8:97:87:de:8d:
84:67:5c:58:bf:1c:7e:2a:9b:91:08:0b:bd:59:f4:
0a:0b:f6:21:f5:af:47:78:68:2a:fc:d2:9c:76:04:
03:fe:3d:29:4e:9a:ef:66:37:27:1b:af:61:d2:06:
a8:00:39:9f:8c:e6:0a:29:e5:c6:44:98:10:ac:39:
57:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F1:55:17:CC:E2:19:36:CB:80:20:DF:72:34:F7:6C:32:EE:56:48
X509v3 Authority Key Identifier:
keyid:04:7E:E7:4A:C4:90:E3:1F:1D:40:76:4F:09:24:11:EE:25:EB:16:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:0c:0d:29:5f:54:fb:0a:d5:8b:d4:bf:11:fb:24:33:61:5e:
80:71:29:ac:92:98:08:71:43:df:b3:4e:d8:f4:81:2c:01:db:
3b:3f:6c:2d:2a:b7:0d:91:85:db:fc:a6:5c:29:47:e0:dc:10:
00:dc:60:81:e0:bf:8f:26:77:87:47:1c:74:14:f2:11:56:ec:
cd:4c:19:5c:27:be:55:ee:59:58:e6:f4:f0:db:90:a7:1e:9c:
91:44:15:be:ee:0a:5b:28:1b:84:26:d5:df:1f:8b:93:4e:eb:
f9:26:cc:fc:72:a0:7a:3c:e5:f7:22:57:7a:1e:17:7c:dd:79:
03:04:eb:ca:eb:2e:c9:82:08:0d:03:3e:75:04:0e:3e:7a:7b:
f5:a8:64:75:b9:6e:f6:59:ec:55:7c:dc:5f:8a:75:50:c1:92:
e1:95:56:f7:41:bc:13:ca:0a:99:65:bd:00:5d:9f:7c:ba:b9:
4b:f2:a5:ce:ad:23:d0:e6:1f:94:49:b8:4b:b0:61:0d:ec:5e:
61:4f:48:6d:01:e6:7c:06:c2:12:ce:8b:0a:f0:54:45:10:f2:
c4:cc:bb:f0:9e:c5:49:dd:b3:09:13:b5:93:3a:c1:ed:13:c1:
f6:76:d6:93:73:04:07:4f:db:9e:01:6a:98:35:f8:58:21:ab:
bf:a4:db:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVblbNPj36+qgeALKWQoW1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0N2VlNzRhYzQ5MGUzMWYxZDQwNzY0ZjA5MjQxMWVlMjVl
YjE2NjUwHhcNMjUwNDIwMjMwMDE2WhcNMjUwNDIxMjMwMDE2WjAzMTEwLwYDVQQD
EyhhYWYxNTUxN2NjZTIxOTM2Y2I4MDIwZGY3MjM0Zjc2YzMyZWU1NjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQDnpnKjatnRtPw2Bcj2oInXiTnp
5auRA6dk9BQfPTDjKZIpoEaTT2irRg6/uM43AuXORn+OszaJUkRVFr+OUW4hCBqP
vd7oMs0ZeTQD5sn/PfKaFoGPOI15I9Kf0SjsU/E89aN6AbBmwVRUCzNHt/XA46pV
IMtn9XzPrbZufXlGwqYigEYOCScnrvoGKzL1KuSmTwjKNBmYMovZ9yizJShb0p5B
pmwMw+qmP81gN8h7FGGZRF9C+7vtQGWBqJeH3o2EZ1xYvxx+KpuRCAu9WfQKC/Yh
9a9HeGgq/NKcdgQD/j0pTprvZjcnG69h0gaoADmfjOYKKeXGRJgQrDlXawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKrxVRfM4hk2y4Ag33I092wy7lZIMB8GA1UdIwQY
MBaAFAR+50rEkOMfHUB2TwkkEe4l6xZlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkg3blNzU1E0eDhkUUhaUENTUVI3aVhyRm1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8xN2Y3NjktNTgzMy00ZjI2LTkzZjgt
ZWE3ZjIxOGZkYjUwLzEvQkg3blNzU1E0eDhkUUhaUENTUVI3aVhyRm1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8xN2Y3NjktNTgzMy00ZjI2LTkzZjgtZWE3ZjIxOGZkYjUw
LzEvQkg3blNzU1E0eDhkUUhaUENTUVI3aVhyRm1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcAwNKV9U
+wrVi9S/EfskM2FegHEprJKYCHFD37NO2PSBLAHbOz9sLSq3DZGF2/ymXClH4NwQ
ANxggeC/jyZ3h0ccdBTyEVbszUwZXCe+Ve5ZWOb08NuQpx6ckUQVvu4KWygbhCbV
3x+Lk07r+SbM/HKgejzl9yJXeh4XfN15AwTryusuyYIIDQM+dQQOPnp79ahkdblu
9lnsVXzcX4p1UMGS4ZVW90G8E8oKmWW9AF2ffLq5S/Klzq0j0OYflEm4S7BhDexe
YU9IbQHmfAbCEs6LCvBURRDyxMy78J7FSd2zCRO1kzrB7RPB9nbWk3MEB0/bngFq
mDX4WCGrv6TbYw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:42:21 2025 by rpki-client