Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
File: bEme6h8J0BEiUo1BdU03xcqjS6c.mft (raw, json)
Hash identifier: fLoa2HhbiTlZBLiB26pjA2aLAbMjUiPrd2HJUVhhQ0A=
Subject key identifier: A2:34:42:CC:BC:4F:C3:21:51:08:5A:74:B2:F5:A8:5D:B0:54:E1:BC
Authority key identifier: 6C:49:9E:EA:1F:09:D0:11:22:52:8D:41:75:4D:37:C5:CA:A3:4B:A7
Certificate issuer: /CN=6c499eea1f09d01122528d41754d37c5caa34ba7
Certificate serial: 01963C53DE28A614B5C7539BFCCDE1E9A17F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
Manifest number: 0AC3
Signing time: Wed 16 Apr 2025 02:00:51 +0000
Manifest this update: Wed 16 Apr 2025 02:00:51 +0000
Manifest next update: Thu 17 Apr 2025 02:00:51 +0000
Files and hashes: 1: bEme6h8J0BEiUo1BdU03xcqjS6c.crl (hash: IgTVt55Lz3emji6keZFq3mbENk7LFNiR4p5GblN+oac=)
2: kqOQ78t4w6FZpmwe4_k_12IlEMA.roa (hash: HyBjAoXV0kXvavyvJersLyuqJgRnm+q7hrBZfg1KGdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:53:de:28:a6:14:b5:c7:53:9b:fc:cd:e1:e9:a1:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c499eea1f09d01122528d41754d37c5caa34ba7
Validity
Not Before: Apr 16 02:00:51 2025 GMT
Not After : Apr 17 02:00:51 2025 GMT
Subject: CN=a23442ccbc4fc32151085a74b2f5a85db054e1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fd:32:99:2c:b3:3c:e5:1f:76:55:21:da:d7:
82:d2:5a:ab:b3:dd:a3:90:25:ea:63:d4:85:fe:c1:
f0:a4:a3:9c:da:32:d3:12:85:4d:0d:de:12:da:51:
d5:43:e7:15:be:83:1b:f7:9a:b8:0e:73:7e:86:61:
a1:b5:44:d9:40:07:b3:83:80:42:82:ed:aa:be:56:
5e:10:41:71:b0:cc:a3:13:a3:00:1c:dd:18:b6:3d:
77:bd:42:df:66:70:52:89:a8:8d:9c:02:52:c3:26:
8e:98:53:fc:0a:21:18:9f:2a:85:79:b3:e7:a0:83:
f8:62:c0:51:74:e3:cd:a3:96:2d:29:23:d4:56:49:
a6:f9:3c:ff:79:16:66:b9:01:46:3d:9b:42:8f:20:
0f:4f:29:b6:c9:27:9b:d6:9c:0d:c2:51:54:86:98:
08:a2:d4:39:09:9f:80:41:07:e0:db:8a:21:d5:94:
27:61:5f:32:35:42:01:5d:73:52:40:8a:6f:2a:35:
83:f2:da:b7:44:9c:f1:d0:5d:c5:87:a3:bc:da:08:
5b:9a:14:a0:4b:ed:4c:1c:da:53:97:8a:1b:60:40:
10:f4:13:8e:18:41:ed:a8:5c:84:ad:d1:03:1f:d5:
c0:0f:cd:29:ee:bf:6e:6e:a8:4b:b4:cf:d6:74:14:
9b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:34:42:CC:BC:4F:C3:21:51:08:5A:74:B2:F5:A8:5D:B0:54:E1:BC
X509v3 Authority Key Identifier:
keyid:6C:49:9E:EA:1F:09:D0:11:22:52:8D:41:75:4D:37:C5:CA:A3:4B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:21:d1:ee:79:11:cb:90:1a:d3:8f:78:da:89:11:28:b1:b2:
f0:3b:b4:bc:60:41:d5:31:33:52:4d:05:35:13:f7:18:39:5f:
47:b1:02:14:af:2d:74:70:d9:f0:66:73:52:06:4f:56:2d:3b:
f7:00:af:98:ba:25:2b:13:a2:5b:ef:fc:e1:6d:6b:26:5d:88:
e4:17:b2:4e:23:bb:6d:ac:1a:27:99:17:5e:b7:6d:de:cc:db:
3e:2c:15:94:bf:14:6f:72:5e:1b:79:67:11:65:11:ce:eb:0d:
e8:65:4c:b4:80:41:c1:0f:7d:80:93:6b:cb:a3:e6:f1:94:2a:
a8:07:0e:da:01:42:13:0c:2e:7c:51:06:5b:e6:c6:0c:8f:95:
52:31:75:05:ef:a3:80:fb:a6:63:fc:0e:1c:eb:23:58:7e:10:
f5:cc:87:8b:7a:d5:36:77:58:dc:ac:a5:57:fe:42:71:9c:23:
a9:d9:5b:3a:31:2a:0b:3f:b0:ec:35:d2:6e:fc:4a:4a:ee:27:
57:16:4a:45:54:47:3f:3e:8f:fb:d7:8a:d5:61:56:42:dd:87:
c8:61:5f:36:58:b2:f5:91:4a:dc:4d:64:72:d1:f7:ca:eb:44:
77:23:79:02:46:1e:da:1d:c4:45:cc:60:0f:d6:97:ff:4e:37:
60:c6:77:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY8U94ophS1x1Ob/M3h6aF/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNDk5ZWVhMWYwOWQwMTEyMjUyOGQ0MTc1NGQzN2M1Y2Fh
MzRiYTcwHhcNMjUwNDE2MDIwMDUxWhcNMjUwNDE3MDIwMDUxWjAzMTEwLwYDVQQD
EyhhMjM0NDJjY2JjNGZjMzIxNTEwODVhNzRiMmY1YTg1ZGIwNTRlMWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/0ymSyzPOUfdlUh2teC0lqrs92j
kCXqY9SF/sHwpKOc2jLTEoVNDd4S2lHVQ+cVvoMb95q4DnN+hmGhtUTZQAezg4BC
gu2qvlZeEEFxsMyjE6MAHN0Ytj13vULfZnBSiaiNnAJSwyaOmFP8CiEYnyqFebPn
oIP4YsBRdOPNo5YtKSPUVkmm+Tz/eRZmuQFGPZtCjyAPTym2ySeb1pwNwlFUhpgI
otQ5CZ+AQQfg24oh1ZQnYV8yNUIBXXNSQIpvKjWD8tq3RJzx0F3Fh6O82ghbmhSg
S+1MHNpTl4obYEAQ9BOOGEHtqFyErdEDH9XAD80p7r9ubqhLtM/WdBSbTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKI0Qsy8T8MhUQhadLL1qF2wVOG8MB8GA1UdIwQY
MBaAFGxJnuofCdARIlKNQXVNN8XKo0unMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkVtZTZoOEowQkVpVW8xQmRVMDN4Y3FqUzZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iZGViMjctMzQzNC00MjU0LTgyNDEt
N2ZkZGQyMjIwMmJmLzEvYkVtZTZoOEowQkVpVW8xQmRVMDN4Y3FqUzZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9iZGViMjctMzQzNC00MjU0LTgyNDEtN2ZkZGQyMjIwMmJm
LzEvYkVtZTZoOEowQkVpVW8xQmRVMDN4Y3FqUzZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkSHR7nkR
y5Aa04942okRKLGy8Du0vGBB1TEzUk0FNRP3GDlfR7ECFK8tdHDZ8GZzUgZPVi07
9wCvmLolKxOiW+/84W1rJl2I5BeyTiO7bawaJ5kXXrdt3szbPiwVlL8Ub3JeG3ln
EWURzusN6GVMtIBBwQ99gJNry6Pm8ZQqqAcO2gFCEwwufFEGW+bGDI+VUjF1Be+j
gPumY/wOHOsjWH4Q9cyHi3rVNndY3KylV/5CcZwjqdlbOjEqCz+w7DXSbvxKSu4n
VxZKRVRHPz6P+9eK1WFWQt2HyGFfNliy9ZFK3E1kctH3yutEdyN5AkYe2h3ERcxg
D9aX/043YMZ3nQ==
-----END CERTIFICATE-----
Generated at Wed Apr 16 05:43:40 2025 by rpki-client