Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
File: BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft (raw, json)
Hash identifier: JNSikCtVNrZqZcqsIWos0yH1Lfg38E24ZhB4HipEaSw=
Subject key identifier: A2:88:1E:1F:32:27:32:5E:49:76:CE:37:DE:BF:19:86:F0:D7:ED:13
Authority key identifier: 04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A
Certificate issuer: /CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a
Certificate serial: 01961FCA25BE8ED8226676D1DB6F4A659C6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
Manifest number: 14E2
Signing time: Thu 10 Apr 2025 13:01:03 +0000
Manifest this update: Thu 10 Apr 2025 13:01:03 +0000
Manifest next update: Fri 11 Apr 2025 13:01:03 +0000
Files and hashes: 1: BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl (hash: cLgxW33Z5fDnH8wbIBW2O7KeckZEXcrrmTdDyseZdOw=)
2: N9wZb19u6uDl2jmJsSrj5tJBTrs.roa (hash: 0C5L52QJ9EePN5vLiQx5L6BEy17vjwGiBKVGlRWVCRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1f:ca:25:be:8e:d8:22:66:76:d1:db:6f:4a:65:9c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a
Validity
Not Before: Apr 10 13:01:03 2025 GMT
Not After : Apr 11 13:01:03 2025 GMT
Subject: CN=a2881e1f3227325e4976ce37debf1986f0d7ed13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ed:e8:8b:10:de:cc:a1:0f:da:8e:ef:f9:ca:
0e:c0:03:81:a8:e6:7c:3d:eb:3d:d9:bb:15:67:37:
aa:57:3d:45:b9:56:7f:5a:6a:48:eb:a6:39:f6:19:
b9:91:4b:b5:ad:71:e9:17:b5:e6:11:56:44:f4:12:
74:58:05:97:9f:de:82:62:c8:d3:32:ad:98:e7:04:
c4:e3:46:ee:07:6f:c0:8f:90:3a:72:1f:cb:bf:ec:
11:b4:e5:5d:fc:a7:fb:d0:d6:95:3f:dc:70:99:3f:
3f:a7:06:87:37:78:26:1b:da:21:75:a2:ec:57:19:
fa:2c:80:96:23:10:f1:51:57:01:9f:38:02:e9:ac:
73:cb:4f:62:96:20:d2:c1:ce:f0:c0:5f:8b:7c:5d:
e2:ad:d0:20:33:06:98:98:f8:97:11:15:6b:35:34:
78:b8:2b:a2:71:02:b5:c9:44:b9:93:95:83:11:2d:
55:97:95:87:bf:5d:da:de:f3:dc:0a:28:f8:38:6b:
b0:f2:c5:53:1f:c1:ef:c2:a0:8f:c0:67:bc:1d:f7:
b0:7e:e7:2f:63:ff:65:b0:78:c3:88:82:65:a8:cf:
19:0d:fb:5a:5d:73:34:7f:d3:6a:bd:c4:5d:81:be:
c8:ba:70:b6:08:16:6d:b7:5c:8d:bf:14:25:e0:01:
71:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:88:1E:1F:32:27:32:5E:49:76:CE:37:DE:BF:19:86:F0:D7:ED:13
X509v3 Authority Key Identifier:
keyid:04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:42:c6:32:a8:8f:38:d1:cb:59:d1:2a:32:e6:b4:2e:c5:fa:
60:37:71:2f:28:4c:b0:0b:1a:c6:a7:2d:92:ff:30:be:19:c9:
57:4e:50:ad:c6:24:d3:25:91:d3:e6:dc:d2:12:43:96:42:2c:
7f:01:ed:44:38:fe:11:b1:09:32:03:fe:c0:1a:19:13:5d:9e:
28:17:e3:fd:95:9e:69:d1:94:00:bd:f1:59:f2:0c:72:93:97:
df:11:11:4c:43:30:1c:b4:76:fe:33:5a:61:ba:3c:a8:3c:31:
7f:eb:56:e8:27:71:97:cc:34:55:99:d1:ac:e2:51:b6:9b:71:
4e:d6:0e:2c:0c:61:db:60:d4:0f:fb:99:9f:27:53:1a:8f:62:
35:ad:5d:51:f1:fa:0e:74:24:e5:89:2c:56:40:07:34:ec:f7:
79:cd:9e:c2:c9:fc:5f:72:ee:46:7f:81:9e:64:57:9e:30:49:
fa:8f:60:dd:b9:5b:18:f7:c1:c9:25:ec:3c:e8:0d:ee:f6:7d:
f8:63:45:89:6b:63:ce:bc:55:12:56:f9:31:12:04:3c:2b:c9:
f2:a0:c4:cd:8b:7a:34:61:db:97:fe:88:cb:5d:98:07:dc:f5:
32:3d:ce:24:3c:90:53:69:c4:50:3b:38:e4:c3:72:49:ec:51:
7c:44:e1:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYfyiW+jtgiZnbR229KZZxsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0OGIwYzMzNzc2NjYzY2I0MzIxYTEwOGYyZjRkMTYzNWI1
ZDJkOGEwHhcNMjUwNDEwMTMwMTAzWhcNMjUwNDExMTMwMTAzWjAzMTEwLwYDVQQD
EyhhMjg4MWUxZjMyMjczMjVlNDk3NmNlMzdkZWJmMTk4NmYwZDdlZDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAve3oixDezKEP2o7v+coOwAOBqOZ8
Pes92bsVZzeqVz1FuVZ/WmpI66Y59hm5kUu1rXHpF7XmEVZE9BJ0WAWXn96CYsjT
Mq2Y5wTE40buB2/Aj5A6ch/Lv+wRtOVd/Kf70NaVP9xwmT8/pwaHN3gmG9ohdaLs
Vxn6LICWIxDxUVcBnzgC6axzy09iliDSwc7wwF+LfF3irdAgMwaYmPiXERVrNTR4
uCuicQK1yUS5k5WDES1Vl5WHv13a3vPcCij4OGuw8sVTH8HvwqCPwGe8Hfewfucv
Y/9lsHjDiIJlqM8ZDftaXXM0f9NqvcRdgb7IunC2CBZtt1yNvxQl4AFxGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKKIHh8yJzJeSXbON96/GYbw1+0TMB8GA1UdIwQY
MBaAFASLDDN3ZmPLQyGhCPL00WNbXS2KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQklzTU0zZG1ZOHRESWFFSTh2VFJZMXRkTFlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC80YmI3ZjQtOTcwOS00MTA5LWIzMGUt
MjQxMTZjYjZlOTg2LzEvQklzTU0zZG1ZOHRESWFFSTh2VFJZMXRkTFlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC80YmI3ZjQtOTcwOS00MTA5LWIzMGUtMjQxMTZjYjZlOTg2
LzEvQklzTU0zZG1ZOHRESWFFSTh2VFJZMXRkTFlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ0LGMqiP
ONHLWdEqMua0LsX6YDdxLyhMsAsaxqctkv8wvhnJV05QrcYk0yWR0+bc0hJDlkIs
fwHtRDj+EbEJMgP+wBoZE12eKBfj/ZWeadGUAL3xWfIMcpOX3xERTEMwHLR2/jNa
Ybo8qDwxf+tW6Cdxl8w0VZnRrOJRtptxTtYOLAxh22DUD/uZnydTGo9iNa1dUfH6
DnQk5YksVkAHNOz3ec2ewsn8X3LuRn+BnmRXnjBJ+o9g3blbGPfBySXsPOgN7vZ9
+GNFiWtjzrxVElb5MRIEPCvJ8qDEzYt6NGHbl/6Iy12YB9z1Mj3OJDyQU2nEUDs4
5MNySexRfEThKw==
-----END CERTIFICATE-----
Generated at Thu Apr 10 15:13:08 2025 by rpki-client