Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
File: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft (raw, json)
Hash identifier: oz8xw3W0+uRgAtKSSkoVcOZlO/B7hjSNfBsJqM6pY5k=
Subject key identifier: 3A:82:B5:04:25:35:39:E5:29:F9:ED:17:11:3C:5F:B9:5B:64:FF:64
Authority key identifier: 6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
Certificate issuer: /CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Certificate serial: 0196127D4228889CF55B228FD6D3EEAAC3FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
Manifest number: 12C0
Signing time: Mon 07 Apr 2025 23:02:00 +0000
Manifest this update: Mon 07 Apr 2025 23:02:00 +0000
Manifest next update: Tue 08 Apr 2025 23:02:00 +0000
Files and hashes: 1: 4fkynkxl95431dIe-ABsA7v5RCg.roa (hash: EGfFvZoQzCGUyDaxbnd+O3QTAMwiWmSgrk3gdk+vKlc=)
2: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl (hash: KYFYxTrlpB4xC2QxJzzeR2aJe4+8u+ieslT7ivWlo2w=)
3: lgA3OzlgN5mO-phBlXIn8VKgG_E.roa (hash: FrDJm2Vh5IZpvHu6Ip1jtuiPOr7jqRjxluv8XgGr48o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:7d:42:28:88:9c:f5:5b:22:8f:d6:d3:ee:aa:c3:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Validity
Not Before: Apr 7 23:02:00 2025 GMT
Not After : Apr 8 23:02:00 2025 GMT
Subject: CN=3a82b504253539e529f9ed17113c5fb95b64ff64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d7:15:d6:c7:15:a6:50:d4:58:0f:7d:dc:49:
03:10:db:9e:28:0c:d7:80:35:7c:6c:52:1e:bd:0a:
cc:5e:74:46:9e:b4:a3:ed:c6:aa:79:80:bf:eb:2a:
fd:14:5d:c8:9d:55:91:66:7a:d2:75:29:9b:27:f6:
5d:9d:b6:d9:b2:26:61:89:4c:2a:e5:a9:06:5e:b4:
f7:28:be:ab:fc:cd:27:7c:9d:ad:8d:ff:64:a8:30:
f6:6e:39:28:91:f7:b5:d1:c1:d3:d1:b8:38:6b:30:
21:52:5d:c0:bb:da:5b:fa:0a:6a:f2:bf:3c:42:88:
51:96:e6:2d:16:a5:ba:6e:8c:05:3b:8e:d0:a2:81:
7a:a1:f1:31:9b:6e:3a:2e:0e:ca:24:e7:fb:c3:b2:
05:bb:d5:63:b4:3c:7b:86:ce:66:58:88:a3:c3:86:
67:02:c1:e0:76:b5:84:57:45:39:1c:a1:1a:98:e7:
3f:19:79:a9:ce:5d:e9:9c:88:8a:4a:36:91:26:13:
cf:90:d4:2e:2e:51:47:6c:c7:b0:4b:41:29:8d:ab:
c3:e9:26:96:7c:86:4d:90:b1:28:7e:68:56:2b:3f:
85:49:1c:e5:f3:54:d5:d3:03:16:1c:98:17:1d:6c:
82:29:d3:e8:49:ed:a0:93:26:31:8a:ef:1f:e7:76:
c6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:82:B5:04:25:35:39:E5:29:F9:ED:17:11:3C:5F:B9:5B:64:FF:64
X509v3 Authority Key Identifier:
keyid:6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:14:0c:4d:8b:12:e1:73:75:4a:46:dd:03:11:46:2e:b3:ee:
e7:55:ed:bf:54:d3:51:b4:11:68:16:05:74:c3:55:a6:f6:6b:
30:b9:fc:4a:86:0a:ec:50:10:7e:6f:40:86:bd:d8:b9:c9:14:
ae:8f:48:cb:80:f3:65:80:89:ae:d3:95:2f:45:36:f4:18:43:
9a:4c:6f:5d:e2:0d:26:de:2f:94:79:15:a8:ce:ce:4c:5e:dd:
15:19:6c:be:11:90:ee:f9:b7:a6:1f:95:08:dd:c1:40:0c:2e:
ff:36:e0:85:b9:d9:ac:a7:61:c1:52:fe:e6:bb:7d:33:38:1d:
4b:91:62:8a:46:81:e7:e5:7e:17:78:ce:4e:77:75:d1:22:73:
79:51:e4:9c:44:1a:ec:db:96:0e:80:e0:ac:fa:bc:51:a3:99:
a8:85:7d:1d:2d:1a:2b:74:0f:f7:f1:2f:5d:89:b5:b6:63:99:
f5:cb:fe:4a:07:a5:f0:ed:fd:f0:37:44:c5:e5:32:11:b6:ea:
4c:90:a2:e8:98:ae:08:ef:42:ae:65:9f:9b:1e:0f:e2:2b:4c:
f5:c9:ba:d9:65:29:71:4a:4c:e5:6d:e8:a7:5f:c8:84:73:74:
95:e5:80:76:63:86:a6:3e:21:23:3d:e3:33:7d:7d:15:23:83:
05:d3:04:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYSfUIoiJz1WyKP1tPuqsP/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYjBkZWMxM2RmMjA1YTY2ZWM1MjI3OTI1YjhmNTZiZGIw
OWY0OTkwHhcNMjUwNDA3MjMwMjAwWhcNMjUwNDA4MjMwMjAwWjAzMTEwLwYDVQQD
EygzYTgyYjUwNDI1MzUzOWU1MjlmOWVkMTcxMTNjNWZiOTViNjRmZjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7NcV1scVplDUWA993EkDENueKAzX
gDV8bFIevQrMXnRGnrSj7caqeYC/6yr9FF3InVWRZnrSdSmbJ/ZdnbbZsiZhiUwq
5akGXrT3KL6r/M0nfJ2tjf9kqDD2bjkokfe10cHT0bg4azAhUl3Au9pb+gpq8r88
QohRluYtFqW6bowFO47QooF6ofExm246Lg7KJOf7w7IFu9VjtDx7hs5mWIijw4Zn
AsHgdrWEV0U5HKEamOc/GXmpzl3pnIiKSjaRJhPPkNQuLlFHbMewS0EpjavD6SaW
fIZNkLEofmhWKz+FSRzl81TV0wMWHJgXHWyCKdPoSe2gkyYxiu8f53bGHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqCtQQlNTnlKfntFxE8X7lbZP9kMB8GA1UdIwQY
MBaAFGyw3sE98gWmbsUieSW49WvbCfSZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkxEZXdUM3lCYVp1eFNKNUpiajFhOXNKOUprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9jYTQ2ZmMtMzg0Ny00ZjFkLTljZTQt
NTJiOWU2YTE2MzUwLzEvYkxEZXdUM3lCYVp1eFNKNUpiajFhOXNKOUprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9jYTQ2ZmMtMzg0Ny00ZjFkLTljZTQtNTJiOWU2YTE2MzUw
LzEvYkxEZXdUM3lCYVp1eFNKNUpiajFhOXNKOUprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAThQMTYsS
4XN1SkbdAxFGLrPu51Xtv1TTUbQRaBYFdMNVpvZrMLn8SoYK7FAQfm9Ahr3YuckU
ro9Iy4DzZYCJrtOVL0U29BhDmkxvXeINJt4vlHkVqM7OTF7dFRlsvhGQ7vm3ph+V
CN3BQAwu/zbghbnZrKdhwVL+5rt9MzgdS5FiikaB5+V+F3jOTnd10SJzeVHknEQa
7NuWDoDgrPq8UaOZqIV9HS0aK3QP9/EvXYm1tmOZ9cv+Sgel8O398DdExeUyEbbq
TJCi6JiuCO9CrmWfmx4P4itM9cm62WUpcUpM5W3op1/IhHN0leWAdmOGpj4hIz3j
M319FSODBdMEvw==
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:21:32 2025 by rpki-client