Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
File: BbM6ZnAbLGXUl_4ExbowG9zsttk.mft (raw, json)
Hash identifier: YntPleBqXv5Ytm+KEJbQNMCItXpAjEV6FYuEuEXxQd0=
Subject key identifier: 52:C9:02:41:20:71:C6:BF:9C:B5:20:44:78:E8:A2:C2:7C:80:04:F4
Authority key identifier: 05:B3:3A:66:70:1B:2C:65:D4:97:FE:04:C5:BA:30:1B:DC:EC:B6:D9
Certificate issuer: /CN=05b33a66701b2c65d497fe04c5ba301bdcecb6d9
Certificate serial: 019653B76E0B688A9F1ACFE6096E8CE7AE58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
Manifest number: 14F9
Signing time: Sun 20 Apr 2025 15:00:52 +0000
Manifest this update: Sun 20 Apr 2025 15:00:52 +0000
Manifest next update: Mon 21 Apr 2025 15:00:52 +0000
Files and hashes: 1: BbM6ZnAbLGXUl_4ExbowG9zsttk.crl (hash: Y6yRJxOM8ka3kvFbHUFHsxwDXjn5WtuutVjrZkRo0H4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:6e:0b:68:8a:9f:1a:cf:e6:09:6e:8c:e7:ae:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b33a66701b2c65d497fe04c5ba301bdcecb6d9
Validity
Not Before: Apr 20 15:00:52 2025 GMT
Not After : Apr 21 15:00:52 2025 GMT
Subject: CN=52c902412071c6bf9cb5204478e8a2c27c8004f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:58:f3:7e:02:25:3e:f9:92:63:66:48:6c:d3:
97:c9:e4:d1:cd:69:48:e9:96:3b:b7:18:b4:9d:29:
ec:90:a2:a5:ee:41:97:32:c1:0c:58:5e:63:bf:55:
ea:95:21:fe:4f:7f:7d:f2:ec:19:d6:fb:46:94:94:
d6:76:d5:d1:ff:24:43:de:0e:92:8d:b9:60:45:63:
f7:e4:17:08:5f:66:d4:10:a5:53:b6:53:e7:34:11:
86:02:5d:8b:36:bf:08:dd:e2:a6:f4:16:ec:23:12:
26:fe:1a:33:81:39:72:89:80:68:59:e0:f7:4e:7b:
4c:9d:83:2d:ae:82:d4:de:70:82:7b:2a:de:c9:ea:
02:01:9b:15:38:c9:0a:5b:66:97:a5:20:7e:0a:d0:
4a:9b:0a:88:3d:72:f2:47:77:fd:21:72:18:16:2b:
bb:ac:12:53:e5:df:9c:c1:b3:84:ae:66:87:a8:d4:
9c:1b:9d:71:dc:91:c0:49:d9:ba:f0:2d:60:ee:61:
42:cf:ad:7d:e1:73:e5:f0:6a:8e:9e:6f:48:e4:56:
fa:20:5b:09:43:ee:a5:55:48:eb:c7:13:c8:c6:4b:
50:47:18:db:ac:21:3b:76:7d:e6:51:c4:90:14:82:
86:66:9f:9e:65:a9:0e:29:57:ce:a8:ed:bb:a3:a5:
ec:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C9:02:41:20:71:C6:BF:9C:B5:20:44:78:E8:A2:C2:7C:80:04:F4
X509v3 Authority Key Identifier:
keyid:05:B3:3A:66:70:1B:2C:65:D4:97:FE:04:C5:BA:30:1B:DC:EC:B6:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:fe:8a:b9:63:2e:99:a7:2e:52:20:4e:65:d3:1c:4c:53:a5:
05:f4:25:a2:e1:2d:36:99:97:72:1d:35:75:69:d4:ff:33:e7:
30:63:51:e1:72:1b:83:d6:05:61:29:be:e1:78:5d:9c:3c:68:
3b:f1:db:12:a2:c5:4f:19:89:d8:ae:93:65:8f:89:a1:6a:91:
40:bb:b0:76:8b:c6:5b:67:0f:fc:54:44:b7:59:bb:15:c8:8f:
36:ab:8f:04:3c:09:38:53:40:3c:d1:7b:12:aa:a8:54:58:68:
d2:20:c5:9d:c8:b1:47:01:9d:5c:be:3b:b7:58:3b:91:03:9e:
d0:54:bb:41:9b:f4:ef:ad:7c:10:4f:f8:e3:d3:06:30:c6:2c:
78:06:2f:e1:71:20:30:da:6f:5b:72:6f:a7:bd:14:33:e8:d2:
e7:5e:40:58:a7:e8:90:a2:0f:38:ff:ee:77:d9:85:c3:40:42:
85:00:3f:13:e9:c5:47:0d:24:8f:f3:00:2d:40:31:f4:9d:eb:
a3:d3:d4:c3:3a:3d:e6:7f:f0:c5:fd:2b:3a:58:1d:b1:d5:7e:
bb:32:30:c5:a7:50:36:a9:1f:bd:27:a9:66:01:1a:eb:dc:e2:
22:44:e9:9b:aa:72:cd:93:5a:cd:10:2a:92:b1:92:5b:41:1a:
ac:8a:3c:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTt24LaIqfGs/mCW6M565YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YjMzYTY2NzAxYjJjNjVkNDk3ZmUwNGM1YmEzMDFiZGNl
Y2I2ZDkwHhcNMjUwNDIwMTUwMDUyWhcNMjUwNDIxMTUwMDUyWjAzMTEwLwYDVQQD
Eyg1MmM5MDI0MTIwNzFjNmJmOWNiNTIwNDQ3OGU4YTJjMjdjODAwNGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1jzfgIlPvmSY2ZIbNOXyeTRzWlI
6ZY7txi0nSnskKKl7kGXMsEMWF5jv1XqlSH+T3998uwZ1vtGlJTWdtXR/yRD3g6S
jblgRWP35BcIX2bUEKVTtlPnNBGGAl2LNr8I3eKm9BbsIxIm/hozgTlyiYBoWeD3
TntMnYMtroLU3nCCeyreyeoCAZsVOMkKW2aXpSB+CtBKmwqIPXLyR3f9IXIYFiu7
rBJT5d+cwbOErmaHqNScG51x3JHASdm68C1g7mFCz6194XPl8GqOnm9I5Fb6IFsJ
Q+6lVUjrxxPIxktQRxjbrCE7dn3mUcSQFIKGZp+eZakOKVfOqO27o6Xs3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFLJAkEgcca/nLUgRHjoosJ8gAT0MB8GA1UdIwQY
MBaAFAWzOmZwGyxl1Jf+BMW6MBvc7LbZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmJNNlpuQWJMR1hVbF80RXhib3dHOXpzdHRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yMzEwZjQtZDhiMy00MTM2LTk5OTct
MWJmOTRhMjUwMTRlLzEvQmJNNlpuQWJMR1hVbF80RXhib3dHOXpzdHRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8yMzEwZjQtZDhiMy00MTM2LTk5OTctMWJmOTRhMjUwMTRl
LzEvQmJNNlpuQWJMR1hVbF80RXhib3dHOXpzdHRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo/6KuWMu
macuUiBOZdMcTFOlBfQlouEtNpmXch01dWnU/zPnMGNR4XIbg9YFYSm+4XhdnDxo
O/HbEqLFTxmJ2K6TZY+JoWqRQLuwdovGW2cP/FREt1m7FciPNquPBDwJOFNAPNF7
EqqoVFho0iDFncixRwGdXL47t1g7kQOe0FS7QZv07618EE/449MGMMYseAYv4XEg
MNpvW3Jvp70UM+jS515AWKfokKIPOP/ud9mFw0BChQA/E+nFRw0kj/MALUAx9J3r
o9PUwzo95n/wxf0rOlgdsdV+uzIwxadQNqkfvSepZgEa69ziIkTpm6pyzZNazRAq
krGSW0EarIo89w==
-----END CERTIFICATE-----
Generated at Sun Apr 20 17:36:50 2025 by rpki-client