Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft
File: bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft (raw, json)
Hash identifier: dUHbUtVIuAQmp71w1WY91AkSogPqA5czx8F0LCRT4xw=
Subject key identifier: 90:C0:47:18:F7:53:F1:91:66:1E:D0:33:F1:99:6D:50:BB:CF:D4:AF
Authority key identifier: 6C:95:FD:CA:36:7B:CE:19:E2:F2:53:B7:8F:36:08:FF:34:14:28:C9
Certificate issuer: /CN=6c95fdca367bce19e2f253b78f3608ff341428c9
Certificate serial: 01964A7D254B8D9D60DB23612B59331F98A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJX9yjZ7zhni8lO3jzYI_zQUKMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft
Manifest number: C3
Signing time: Fri 18 Apr 2025 20:00:37 +0000
Manifest this update: Fri 18 Apr 2025 20:00:37 +0000
Manifest next update: Sat 19 Apr 2025 20:00:37 +0000
Files and hashes: 1: Lf1xzTXAc6SiNDJtIVl8iWMf5b4.roa (hash: Mlu5t33KkThbOioHblpilqA5fDGAJvYvW4onNzjvD5s=)
2: bJX9yjZ7zhni8lO3jzYI_zQUKMk.crl (hash: +X7jxb+gNhmlFU1nc4nKEDsDNaq3TbtmUxT8XuaRXU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bJX9yjZ7zhni8lO3jzYI_zQUKMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:7d:25:4b:8d:9d:60:db:23:61:2b:59:33:1f:98:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c95fdca367bce19e2f253b78f3608ff341428c9
Validity
Not Before: Apr 18 20:00:37 2025 GMT
Not After : Apr 19 20:00:37 2025 GMT
Subject: CN=90c04718f753f191661ed033f1996d50bbcfd4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fa:fd:46:fe:42:29:30:89:7f:b1:bd:f9:f5:
c4:32:2d:ef:53:cb:59:54:cc:6a:95:72:1d:b6:2b:
b0:d6:4e:c5:22:79:87:9b:4e:e7:53:35:f1:4b:e7:
be:3b:05:37:02:99:af:26:26:5d:07:f9:87:69:85:
c6:58:d6:22:62:9e:ff:fe:e5:28:1f:b4:be:57:21:
7d:e0:0a:a7:3d:46:25:9a:5e:cf:b8:12:34:bc:41:
f5:10:db:a4:21:86:5b:27:21:d1:e1:d7:e8:b3:d6:
33:d0:dc:b2:81:e5:47:f7:cc:40:57:4a:da:81:34:
06:00:ba:5e:a1:6d:65:9f:f6:b4:4d:64:f0:65:c9:
2d:69:65:31:eb:77:ee:88:78:2a:f6:81:8a:eb:60:
27:a6:ea:19:fd:36:a0:63:c6:2b:98:c1:d3:13:f7:
0c:70:ae:56:98:29:18:09:6d:e0:06:3b:5b:f5:81:
3a:02:ad:8e:00:fa:b7:97:d5:4b:1a:e6:74:e7:b6:
62:fe:a3:39:b9:05:3f:fc:9a:10:0e:d7:bd:08:3c:
b7:fb:91:b2:fb:73:61:55:fd:e1:54:c7:c0:66:af:
11:f0:e6:7a:63:30:96:04:de:a4:8e:b3:bb:84:71:
a6:40:50:73:fd:4c:aa:45:2f:92:13:29:b8:78:20:
55:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C0:47:18:F7:53:F1:91:66:1E:D0:33:F1:99:6D:50:BB:CF:D4:AF
X509v3 Authority Key Identifier:
keyid:6C:95:FD:CA:36:7B:CE:19:E2:F2:53:B7:8F:36:08:FF:34:14:28:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJX9yjZ7zhni8lO3jzYI_zQUKMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f5:71:20:47:d0:e8:17:a3:ed:8e:b1:e9:6d:9d:83:e0:36:
5c:f0:de:33:b3:48:65:29:46:86:b9:ef:77:04:9d:11:e0:ae:
6a:5c:a5:3b:3e:39:be:04:cc:4c:38:c4:20:50:42:c7:9c:ab:
fc:5e:cb:ea:9c:6f:71:93:a3:9c:64:19:79:76:6b:cd:93:b9:
87:6d:70:ea:0f:55:11:00:98:49:a3:d1:9d:50:59:1d:6d:b0:
43:01:c4:42:d7:1c:3c:ee:d1:db:13:74:2d:ab:1b:10:ee:bc:
c2:f9:d4:93:a5:07:c6:25:a8:8d:08:57:fa:c8:b0:ac:ac:61:
14:a6:b0:ef:6c:bf:b3:f4:e7:d2:c3:fe:1b:d5:13:fc:bd:fb:
aa:40:8e:9f:be:54:5e:a6:13:ef:89:68:f4:24:ba:84:8c:69:
2e:03:6e:7b:0b:ec:31:a6:c8:8c:7b:d5:10:83:22:12:1f:84:
a6:4f:b2:af:c7:a9:4d:cc:e3:03:4b:20:ca:77:e9:bc:66:cf:
74:eb:09:2d:bd:81:1c:70:1c:c8:92:7e:03:2c:fc:ba:b6:3b:
b8:4b:81:0c:b9:fe:f4:ff:ca:6f:10:18:57:73:ab:fc:c8:7c:
78:ac:ba:59:c7:5f:5b:3e:c8:e1:08:96:77:01:27:02:47:4f:
d9:11:e8:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZKfSVLjZ1g2yNhK1kzH5iiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOTVmZGNhMzY3YmNlMTllMmYyNTNiNzhmMzYwOGZmMzQx
NDI4YzkwHhcNMjUwNDE4MjAwMDM3WhcNMjUwNDE5MjAwMDM3WjAzMTEwLwYDVQQD
Eyg5MGMwNDcxOGY3NTNmMTkxNjYxZWQwMzNmMTk5NmQ1MGJiY2ZkNGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPr9Rv5CKTCJf7G9+fXEMi3vU8tZ
VMxqlXIdtiuw1k7FInmHm07nUzXxS+e+OwU3ApmvJiZdB/mHaYXGWNYiYp7//uUo
H7S+VyF94AqnPUYlml7PuBI0vEH1ENukIYZbJyHR4dfos9Yz0NyygeVH98xAV0ra
gTQGALpeoW1ln/a0TWTwZcktaWUx63fuiHgq9oGK62AnpuoZ/TagY8YrmMHTE/cM
cK5WmCkYCW3gBjtb9YE6Aq2OAPq3l9VLGuZ057Zi/qM5uQU//JoQDte9CDy3+5Gy
+3NhVf3hVMfAZq8R8OZ6YzCWBN6kjrO7hHGmQFBz/UyqRS+SEym4eCBVFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJDARxj3U/GRZh7QM/GZbVC7z9SvMB8GA1UdIwQY
MBaAFGyV/co2e84Z4vJTt482CP80FCjJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkpYOXlqWjd6aG5pOGxPM2p6WUlfelFVS01rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9mMDFhMDItNWE5ZS00NDQxLTliM2Qt
ZDVjMTg4NjJkMDI2LzEvYkpYOXlqWjd6aG5pOGxPM2p6WUlfelFVS01rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9mMDFhMDItNWE5ZS00NDQxLTliM2QtZDVjMTg4NjJkMDI2
LzEvYkpYOXlqWjd6aG5pOGxPM2p6WUlfelFVS01rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWfVxIEfQ
6Bej7Y6x6W2dg+A2XPDeM7NIZSlGhrnvdwSdEeCualylOz45vgTMTDjEIFBCx5yr
/F7L6pxvcZOjnGQZeXZrzZO5h21w6g9VEQCYSaPRnVBZHW2wQwHEQtccPO7R2xN0
LasbEO68wvnUk6UHxiWojQhX+siwrKxhFKaw72y/s/Tn0sP+G9UT/L37qkCOn75U
XqYT74lo9CS6hIxpLgNuewvsMabIjHvVEIMiEh+Epk+yr8epTczjA0sgynfpvGbP
dOsJLb2BHHAcyJJ+Ayz8urY7uEuBDLn+9P/KbxAYV3Or/Mh8eKy6WcdfWz7I4QiW
dwEnAkdP2RHoUQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 04:46:06 2025 by rpki-client