Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
File: bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft (raw, json)
Hash identifier: 9DSDaN0TCO0lf+eTgj2BJkt99U8NDyU54vtTkN+YoA8=
Subject key identifier: 5D:94:3D:F4:82:DB:49:4C:F3:78:DE:46:06:4A:66:F7:A3:60:6F:B2
Authority key identifier: 6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87
Certificate issuer: /CN=6c1a761795f0f66bff2478b468cde0d851ed1887
Certificate serial: 01964F6C648528EA07B09A8F0A267FA23A6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
Manifest number: 0B03
Signing time: Sat 19 Apr 2025 19:00:25 +0000
Manifest this update: Sat 19 Apr 2025 19:00:25 +0000
Manifest next update: Sun 20 Apr 2025 19:00:25 +0000
Files and hashes: 1: 2yP7wLJMuWi-DdvVYt0iPnrDkx4.roa (hash: tlC/Cdti9DOTrW2vJ3/LMhMeuxhFOtOxFl2p6304PGs=)
2: bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl (hash: fs3pvmY9S8DSfRfSm3iVaMVbvePpRKCns019cizD+gk=)
3: yizlH9bVBZ4r4iRvvbJ2VP3ozzg.roa (hash: r5Y34WQoYI5TwsCESbJ739CvzI3jr7yM4zMajr00BD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:64:85:28:ea:07:b0:9a:8f:0a:26:7f:a2:3a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1a761795f0f66bff2478b468cde0d851ed1887
Validity
Not Before: Apr 19 19:00:25 2025 GMT
Not After : Apr 20 19:00:25 2025 GMT
Subject: CN=5d943df482db494cf378de46064a66f7a3606fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:84:61:09:26:c7:c1:58:86:b6:61:cd:ed:0f:
37:18:2d:d8:ad:26:33:4f:8c:dc:11:4e:f7:2a:ca:
ec:f9:4c:5e:0a:45:54:99:00:be:75:a7:ee:b2:fd:
fc:42:c0:a7:8b:90:8e:b9:95:4a:c4:1f:28:39:6b:
13:47:a5:0f:bc:aa:af:3a:62:c4:fa:bd:4b:55:62:
ff:b9:5a:56:b4:d0:21:a9:c9:05:80:3a:11:7b:3a:
d9:bf:bf:1b:88:44:2f:67:2f:46:b6:ec:ae:61:9e:
25:f7:cd:f0:ba:f4:60:7b:1b:ef:4c:87:00:10:0c:
b0:cf:3a:33:10:02:6e:cc:86:e4:8f:fc:93:b0:31:
3a:5a:32:28:88:fb:08:1f:95:f1:49:fb:67:06:e5:
d0:76:e0:5d:92:cc:c2:69:55:38:e4:26:9e:89:f9:
ec:46:d5:de:1f:f6:37:c7:95:04:91:1e:a7:45:14:
57:d4:6f:1c:3e:d9:32:93:cc:99:4b:b0:9a:75:e4:
df:96:27:ac:c0:ca:be:22:8d:58:06:43:3b:a7:f5:
74:65:75:14:93:2a:e3:45:ca:06:44:01:24:54:01:
06:af:29:5e:62:be:be:ec:7b:63:ae:78:20:93:27:
0c:03:98:9f:d0:fb:26:a9:0a:5f:2d:82:ea:94:79:
e5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:94:3D:F4:82:DB:49:4C:F3:78:DE:46:06:4A:66:F7:A3:60:6F:B2
X509v3 Authority Key Identifier:
keyid:6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:09:33:0f:52:86:3a:38:75:de:1f:d9:63:8f:b6:0f:99:52:
04:4e:2b:d6:95:5a:d6:3b:9a:b4:52:41:15:e5:0c:41:bb:ef:
c3:be:b5:82:6e:bf:65:69:09:b9:57:3b:8e:a0:bb:59:c4:c1:
f7:71:5b:cf:0b:ec:61:53:bf:c3:a0:62:30:36:20:0e:23:28:
d7:c3:74:0a:85:d3:6f:43:8d:55:ab:25:31:a8:ee:de:06:48:
cc:4f:2a:9a:f1:e7:bb:48:bf:ce:55:1f:d6:8c:05:e4:e6:8e:
cb:d0:b4:13:79:72:fe:7b:fa:93:fe:76:5e:7e:2a:8b:0c:fc:
d1:4f:7f:6f:d0:ed:93:82:1d:0b:5f:0f:fc:b4:38:a3:a6:7e:
a4:67:df:72:65:fd:8e:42:c6:1f:fc:db:8e:cb:28:62:31:bc:
10:69:0d:06:d2:0a:9a:88:b3:66:65:24:ae:90:d5:dd:97:b7:
0a:55:ae:ff:95:e5:6b:de:76:5d:2a:dc:06:71:b5:e6:21:14:
fa:d2:87:d2:6f:33:ee:cf:13:2b:4f:a2:50:8f:58:66:19:b3:
31:59:ea:24:cf:71:b8:4c:31:2d:a6:54:9e:23:40:dd:bd:6f:
bf:1e:79:21:0d:38:f1:42:4d:e2:05:ec:a3:81:75:32:04:9d:
b9:7b:7d:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZPbGSFKOoHsJqPCiZ/ojpuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMWE3NjE3OTVmMGY2NmJmZjI0NzhiNDY4Y2RlMGQ4NTFl
ZDE4ODcwHhcNMjUwNDE5MTkwMDI1WhcNMjUwNDIwMTkwMDI1WjAzMTEwLwYDVQQD
Eyg1ZDk0M2RmNDgyZGI0OTRjZjM3OGRlNDYwNjRhNjZmN2EzNjA2ZmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04RhCSbHwViGtmHN7Q83GC3YrSYz
T4zcEU73Ksrs+UxeCkVUmQC+dafusv38QsCni5COuZVKxB8oOWsTR6UPvKqvOmLE
+r1LVWL/uVpWtNAhqckFgDoRezrZv78biEQvZy9GtuyuYZ4l983wuvRgexvvTIcA
EAywzzozEAJuzIbkj/yTsDE6WjIoiPsIH5XxSftnBuXQduBdkszCaVU45Caeifns
RtXeH/Y3x5UEkR6nRRRX1G8cPtkyk8yZS7CadeTflieswMq+Io1YBkM7p/V0ZXUU
kyrjRcoGRAEkVAEGryleYr6+7HtjrnggkycMA5if0PsmqQpfLYLqlHnllQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2UPfSC20lM83jeRgZKZvejYG+yMB8GA1UdIwQY
MBaAFGwadheV8PZr/yR4tGjN4NhR7RiHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkJwMkY1WHc5bXZfSkhpMGFNM2cyRkh0R0ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMmMzODYtZDVlOS00YWQ5LTkzOGEt
MGQxZDE3NGM0MzUxLzEvYkJwMkY1WHc5bXZfSkhpMGFNM2cyRkh0R0ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9hMmMzODYtZDVlOS00YWQ5LTkzOGEtMGQxZDE3NGM0MzUx
LzEvYkJwMkY1WHc5bXZfSkhpMGFNM2cyRkh0R0ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABQkzD1KG
Ojh13h/ZY4+2D5lSBE4r1pVa1juatFJBFeUMQbvvw761gm6/ZWkJuVc7jqC7WcTB
93FbzwvsYVO/w6BiMDYgDiMo18N0CoXTb0ONVaslMaju3gZIzE8qmvHnu0i/zlUf
1owF5OaOy9C0E3ly/nv6k/52Xn4qiwz80U9/b9Dtk4IdC18P/LQ4o6Z+pGffcmX9
jkLGH/zbjssoYjG8EGkNBtIKmoizZmUkrpDV3Ze3ClWu/5Xla952XSrcBnG15iEU
+tKH0m8z7s8TK0+iUI9YZhmzMVnqJM9xuEwxLaZUniNA3b1vvx55IQ048UJN4gXs
o4F1MgSduXt9ow==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:50:04 2025 by rpki-client