Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
File: BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft (raw, json)
Hash identifier: 1x1tO7oS8INtgalKfbG9o4EmnzJ/XCKTSlsn2wsD+/k=
Subject key identifier: 56:0D:47:B8:3E:55:64:52:13:72:0C:97:57:9A:3F:1B:99:A2:45:8E
Authority key identifier: 04:34:5B:76:38:DE:9D:2D:29:66:52:7C:B3:63:E3:7C:31:D4:A1:88
Certificate issuer: /CN=04345b7638de9d2d2966527cb363e37c31d4a188
Certificate serial: 01963162A46CA7A2EE72D65F552A63200DEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
Manifest number: 041F
Signing time: Sun 13 Apr 2025 23:01:10 +0000
Manifest this update: Sun 13 Apr 2025 23:01:10 +0000
Manifest next update: Mon 14 Apr 2025 23:01:10 +0000
Files and hashes: 1: 1-XQiidk5Ct3ju0BqANY0WBDUrWI.roa (hash: hKawH5abgtjD0UmUaEbKfYzMnvjfzoeylgKFbpggieE=)
2: BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl (hash: WjY+av9CrjDBiJsZ+oAQS0E+8L7Zqs/dyv6MXN5lf+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 18:31:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:31:62:a4:6c:a7:a2:ee:72:d6:5f:55:2a:63:20:0d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04345b7638de9d2d2966527cb363e37c31d4a188
Validity
Not Before: Apr 13 23:01:10 2025 GMT
Not After : Apr 14 23:01:10 2025 GMT
Subject: CN=560d47b83e55645213720c97579a3f1b99a2458e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e2:b8:d4:6e:af:cf:f2:a9:01:da:49:62:0d:
a7:07:45:9e:b3:86:eb:4f:17:16:ca:f5:1f:f6:d2:
21:9a:45:bc:73:5d:60:b0:95:fb:43:ee:d9:12:61:
70:64:95:b0:0e:69:54:cc:8e:1b:7e:0b:de:95:f5:
71:70:5f:1e:72:ca:9c:42:c9:fe:1f:0e:20:65:d5:
2f:f8:6b:df:8f:9d:d8:90:c6:87:dd:be:ba:a3:58:
09:0e:0b:43:e1:a3:bd:9d:0b:41:b5:33:54:75:28:
76:af:8c:2d:80:f1:ff:4f:46:ee:ef:f1:93:aa:b9:
ce:1f:f6:98:31:45:27:6c:55:d5:73:8a:e9:a4:78:
89:6d:c3:f7:17:b2:c8:b0:5d:4f:b2:dc:85:21:6d:
b3:00:ec:2b:74:68:06:1f:6b:41:c0:93:15:56:0f:
73:f8:cd:f2:3e:b7:e2:ab:5c:a8:d3:3c:36:eb:1e:
a3:6f:c0:c6:fc:b5:fe:20:89:06:4e:44:1d:e5:43:
a5:b0:c8:7f:cf:8b:74:7e:0c:c9:84:c3:9b:35:9c:
46:2a:86:e7:e0:64:a6:ed:2c:6a:13:8b:eb:0f:3e:
ad:55:b2:0f:ea:86:a9:e1:43:e1:ce:72:a1:5c:d1:
e5:92:28:07:37:97:9a:9e:6c:c7:c8:60:78:29:c7:
45:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0D:47:B8:3E:55:64:52:13:72:0C:97:57:9A:3F:1B:99:A2:45:8E
X509v3 Authority Key Identifier:
keyid:04:34:5B:76:38:DE:9D:2D:29:66:52:7C:B3:63:E3:7C:31:D4:A1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:c4:2a:ee:9b:68:4f:c4:25:0d:a1:f5:c4:9c:b5:d5:b1:92:
48:e5:fe:5d:be:96:a9:65:81:1d:50:d8:25:26:02:51:2a:24:
ec:47:d6:00:1c:d1:76:a1:10:7a:c9:8d:44:f4:97:f3:23:7d:
46:56:45:2b:18:57:69:ec:e9:77:f7:d1:7c:75:41:1f:94:96:
9d:2e:b7:bd:15:3f:7c:98:5a:6d:ed:a9:94:ba:6d:73:7a:6b:
20:74:b0:d8:76:63:04:32:39:16:c1:2b:9e:30:f2:8c:49:f5:
2d:8f:bf:72:5d:27:94:d0:f5:44:eb:54:9f:52:3a:ef:26:71:
e4:59:39:62:1b:c8:4c:0c:24:96:62:83:15:69:95:f4:6d:fb:
d6:35:d8:db:89:2e:3f:cb:9a:e7:0c:11:3f:75:a4:29:1b:ad:
70:d2:8b:93:0d:a7:0a:21:79:1e:c1:da:6c:13:bd:cc:40:b0:
82:b9:ce:32:0f:bc:1e:ee:3d:be:fe:7e:d7:41:c1:33:0f:71:
7f:35:4d:66:6d:65:71:89:84:07:95:47:42:46:12:77:08:d0:
81:9b:4e:16:d4:0f:82:85:8d:98:57:bb:af:08:1b:79:87:43:
2c:ba:2e:a8:9e:c4:7a:b6:e4:6e:ef:fd:f1:7e:e3:7f:64:b2:
0b:a8:a0:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYxYqRsp6LuctZfVSpjIA3qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MzQ1Yjc2MzhkZTlkMmQyOTY2NTI3Y2IzNjNlMzdjMzFk
NGExODgwHhcNMjUwNDEzMjMwMTEwWhcNMjUwNDE0MjMwMTEwWjAzMTEwLwYDVQQD
Eyg1NjBkNDdiODNlNTU2NDUyMTM3MjBjOTc1NzlhM2YxYjk5YTI0NThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeK41G6vz/KpAdpJYg2nB0Wes4br
TxcWyvUf9tIhmkW8c11gsJX7Q+7ZEmFwZJWwDmlUzI4bfgvelfVxcF8ecsqcQsn+
Hw4gZdUv+Gvfj53YkMaH3b66o1gJDgtD4aO9nQtBtTNUdSh2r4wtgPH/T0bu7/GT
qrnOH/aYMUUnbFXVc4rppHiJbcP3F7LIsF1PstyFIW2zAOwrdGgGH2tBwJMVVg9z
+M3yPrfiq1yo0zw26x6jb8DG/LX+IIkGTkQd5UOlsMh/z4t0fgzJhMObNZxGKobn
4GSm7SxqE4vrDz6tVbIP6oap4UPhznKhXNHlkigHN5eanmzHyGB4KcdFUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFYNR7g+VWRSE3IMl1eaPxuZokWOMB8GA1UdIwQY
MBaAFAQ0W3Y43p0tKWZSfLNj43wx1KGIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkRSYmRqamVuUzBwWmxKOHMyUGpmREhVb1lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8xOTQ4NzMtN2E5My00NWQwLTk0NjUt
MjJhN2QyZTc0NTNjLzEvQkRSYmRqamVuUzBwWmxKOHMyUGpmREhVb1lnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8xOTQ4NzMtN2E5My00NWQwLTk0NjUtMjJhN2QyZTc0NTNj
LzEvQkRSYmRqamVuUzBwWmxKOHMyUGpmREhVb1lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARcQq7pto
T8QlDaH1xJy11bGSSOX+Xb6WqWWBHVDYJSYCUSok7EfWABzRdqEQesmNRPSX8yN9
RlZFKxhXaezpd/fRfHVBH5SWnS63vRU/fJhabe2plLptc3prIHSw2HZjBDI5FsEr
njDyjEn1LY+/cl0nlND1ROtUn1I67yZx5Fk5YhvITAwklmKDFWmV9G371jXY24ku
P8ua5wwRP3WkKRutcNKLkw2nCiF5HsHabBO9zECwgrnOMg+8Hu49vv5+10HBMw9x
fzVNZm1lcYmEB5VHQkYSdwjQgZtOFtQPgoWNmFe7rwgbeYdDLLouqJ7Eerbkbu/9
8X7jf2SyC6igUg==
-----END CERTIFICATE-----
Generated at Mon Apr 14 04:08:07 2025 by rpki-client