Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
File: bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft (raw, json)
Hash identifier: AV0KC9vyTfnssTGhuC/uDi7Hz9eFmFIs19gvijfdzoQ=
Subject key identifier: 22:E3:0B:98:F9:2E:F1:A7:D0:86:CE:A1:30:F4:5E:1F:27:0D:2C:54
Authority key identifier: 6C:1B:EC:3F:93:58:66:8A:87:D1:A1:6C:47:22:F4:1E:3C:23:81:E2
Certificate issuer: /CN=6c1bec3f9358668a87d1a16c4722f41e3c2381e2
Certificate serial: 0195816EA14E40C5362CA53387985FC839EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
Manifest number: 0814
Signing time: Mon 10 Mar 2025 19:01:05 +0000
Manifest this update: Mon 10 Mar 2025 19:01:05 +0000
Manifest next update: Tue 11 Mar 2025 19:01:05 +0000
Files and hashes: 1: W0hh9fYP1wBw9ymd6jWUhZc3TSg.roa (hash: 9fnzXaQKbPD2tmB/4Jx1f8muC/i0JY7hK/AaC91lAgY=)
2: bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl (hash: U7BQW9pcahFlNFaS+JU/aHlUsR6YsfS5NNbsCr/wyJo=)
3: f1Yqi8lvwcIpnbg2hTJqBii1euQ.roa (hash: thrb8BU441zB2iuhJJ9dbE9Q7lmEZNGWAp0dWfYSQoY=)
4: ojouXwxiA4Aunr-HY_Ha3X-nK8k.roa (hash: V3E89n28yhHgqS4vkCJ3f49fshGSQZ1NzPYfiDUP4Ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Mar 2025 19:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:81:6e:a1:4e:40:c5:36:2c:a5:33:87:98:5f:c8:39:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1bec3f9358668a87d1a16c4722f41e3c2381e2
Validity
Not Before: Mar 10 19:01:05 2025 GMT
Not After : Mar 11 19:01:05 2025 GMT
Subject: CN=22e30b98f92ef1a7d086cea130f45e1f270d2c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:63:23:e2:b7:db:7b:e1:3a:18:09:ba:0a:e3:
7f:ee:af:35:7f:cc:7d:35:17:66:7e:8d:08:77:81:
33:fd:85:10:2d:2f:9f:2f:81:bb:33:ca:08:86:bf:
c3:c1:ce:f1:9b:1b:ae:f7:5a:72:90:f2:c4:60:52:
47:2c:c5:3e:bf:80:d1:b6:ab:be:e9:f1:39:d3:3c:
17:26:e2:40:f4:85:ea:d3:1e:d9:3f:22:24:02:7f:
a1:43:88:af:91:a4:dc:a4:9b:87:34:b4:5e:d2:c9:
54:0b:42:a8:a1:a7:64:3d:a0:24:f0:a1:be:71:e4:
46:af:42:c1:1f:51:2f:be:00:7e:1b:6d:a8:99:f6:
4c:ce:76:f5:f6:c5:e2:4c:fe:95:17:e5:19:79:1d:
e5:2d:2d:74:c1:65:fc:cb:86:1d:39:34:30:99:61:
3e:d4:74:fe:01:4d:86:b6:31:25:a5:d4:24:6b:ad:
f3:ae:c3:11:ec:21:d5:0a:71:9f:58:09:3d:5c:49:
58:04:d4:00:60:48:1d:2b:3e:aa:02:b9:13:68:3a:
5f:c5:f9:00:28:74:f6:86:84:e6:a4:92:8a:81:e8:
65:49:16:45:82:51:e5:43:eb:10:dc:c4:e0:38:e1:
cf:d9:c8:28:f8:dc:4b:91:69:bf:97:00:3b:ca:1e:
fb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E3:0B:98:F9:2E:F1:A7:D0:86:CE:A1:30:F4:5E:1F:27:0D:2C:54
X509v3 Authority Key Identifier:
keyid:6C:1B:EC:3F:93:58:66:8A:87:D1:A1:6C:47:22:F4:1E:3C:23:81:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ce:92:f2:be:32:45:13:79:b2:4f:aa:9d:13:2d:00:bc:06:
22:66:46:8f:d1:45:f1:25:39:c5:d8:1f:70:f9:22:6b:c1:fd:
46:f2:7e:98:13:ff:b4:fe:a9:fa:ff:ca:54:2e:1e:5b:8a:2b:
9c:fa:88:86:78:c0:c4:31:a9:3e:dc:36:c8:5d:40:c0:c7:d5:
9d:be:e7:d4:52:75:69:12:ea:07:aa:5a:0d:79:98:3b:51:5f:
1b:53:84:ef:8b:85:b0:30:71:ce:45:7b:f0:93:ec:25:80:bc:
e4:1d:46:62:7b:bf:63:c7:9a:68:fd:84:b7:14:fe:d1:9e:e2:
5f:dc:c1:48:27:be:53:14:ec:fd:b5:de:28:d5:97:ce:ad:a1:
0a:81:1b:9b:7a:1b:f5:24:a0:a8:2d:7a:41:c0:7e:76:dd:4e:
9a:1e:f6:3e:63:0d:2f:97:a9:2b:4b:03:25:0d:2b:52:6c:06:
31:b1:2c:23:e6:76:13:a1:48:bf:b5:cc:7e:99:97:d3:6a:84:
8e:fb:81:d9:6a:3d:86:c8:ab:f8:71:86:8a:0b:8a:c5:1e:a0:
35:16:a4:4c:23:c2:e1:73:a9:fe:04:f9:f7:ac:c5:c6:24:e0:
77:6d:42:a5:5e:d8:fd:bc:f8:0b:31:2b:33:62:03:07:37:3c:
af:f5:90:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWBbqFOQMU2LKUzh5hfyDnrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMWJlYzNmOTM1ODY2OGE4N2QxYTE2YzQ3MjJmNDFlM2My
MzgxZTIwHhcNMjUwMzEwMTkwMTA1WhcNMjUwMzExMTkwMTA1WjAzMTEwLwYDVQQD
EygyMmUzMGI5OGY5MmVmMWE3ZDA4NmNlYTEzMGY0NWUxZjI3MGQyYzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGMj4rfbe+E6GAm6CuN/7q81f8x9
NRdmfo0Id4Ez/YUQLS+fL4G7M8oIhr/Dwc7xmxuu91pykPLEYFJHLMU+v4DRtqu+
6fE50zwXJuJA9IXq0x7ZPyIkAn+hQ4ivkaTcpJuHNLRe0slUC0KooadkPaAk8KG+
ceRGr0LBH1EvvgB+G22omfZMznb19sXiTP6VF+UZeR3lLS10wWX8y4YdOTQwmWE+
1HT+AU2GtjElpdQka63zrsMR7CHVCnGfWAk9XElYBNQAYEgdKz6qArkTaDpfxfkA
KHT2hoTmpJKKgehlSRZFglHlQ+sQ3MTgOOHP2cgo+NxLkWm/lwA7yh77/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLjC5j5LvGn0IbOoTD0Xh8nDSxUMB8GA1UdIwQY
MBaAFGwb7D+TWGaKh9GhbEci9B48I4HiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkJ2c1A1Tllab3FIMGFGc1J5TDBIandqZ2VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS84YzA0NzMtZTdkMC00ZTQzLWE3Zjkt
Nzk3ZjRjYzRiNTAwLzEvYkJ2c1A1Tllab3FIMGFGc1J5TDBIandqZ2VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS84YzA0NzMtZTdkMC00ZTQzLWE3ZjktNzk3ZjRjYzRiNTAw
LzEvYkJ2c1A1Tllab3FIMGFGc1J5TDBIandqZ2VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL86S8r4y
RRN5sk+qnRMtALwGImZGj9FF8SU5xdgfcPkia8H9RvJ+mBP/tP6p+v/KVC4eW4or
nPqIhnjAxDGpPtw2yF1AwMfVnb7n1FJ1aRLqB6paDXmYO1FfG1OE74uFsDBxzkV7
8JPsJYC85B1GYnu/Y8eaaP2EtxT+0Z7iX9zBSCe+UxTs/bXeKNWXzq2hCoEbm3ob
9SSgqC16QcB+dt1Omh72PmMNL5epK0sDJQ0rUmwGMbEsI+Z2E6FIv7XMfpmX02qE
jvuB2Wo9hsir+HGGiguKxR6gNRakTCPC4XOp/gT596zFxiTgd21CpV7Y/bz4CzEr
M2IDBzc8r/WQ/g==
-----END CERTIFICATE-----
Generated at Tue Mar 11 05:04:08 2025 by rpki-client