Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
File: BaQevhJyohyuDqGzXcCD-taKXX0.mft (raw, json)
Hash identifier: D0GxO0fQ4CpguMfuPFLiyaur0t46Woe49YP85kQAVkw=
Subject key identifier: B3:81:F0:5D:2E:05:0F:A9:47:B5:37:95:C0:57:95:41:1F:B1:48:F4
Authority key identifier: 05:A4:1E:BE:12:72:A2:1C:AE:0E:A1:B3:5D:C0:83:FA:D6:8A:5D:7D
Certificate issuer: /CN=05a41ebe1272a21cae0ea1b35dc083fad68a5d7d
Certificate serial: 01963FFA7BCF8937D437F9174AFB18038277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaQevhJyohyuDqGzXcCD-taKXX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
Manifest number: 14F0
Signing time: Wed 16 Apr 2025 19:01:42 +0000
Manifest this update: Wed 16 Apr 2025 19:01:42 +0000
Manifest next update: Thu 17 Apr 2025 19:01:42 +0000
Files and hashes: 1: BaQevhJyohyuDqGzXcCD-taKXX0.crl (hash: Mog1cOiHkTOaLxhgzHmdsyXKKBwdGsfOJsMLV5aCuzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaQevhJyohyuDqGzXcCD-taKXX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 19:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:fa:7b:cf:89:37:d4:37:f9:17:4a:fb:18:03:82:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a41ebe1272a21cae0ea1b35dc083fad68a5d7d
Validity
Not Before: Apr 16 19:01:42 2025 GMT
Not After : Apr 17 19:01:42 2025 GMT
Subject: CN=b381f05d2e050fa947b53795c05795411fb148f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7a:7b:1a:d8:67:57:1b:09:10:d5:5a:6c:94:
4c:ca:37:e8:9a:ab:cc:96:a7:a3:fa:b4:26:05:c0:
d2:79:4e:f0:c8:b1:e1:a3:68:b5:ce:84:fc:6b:db:
45:04:05:20:c7:96:0b:32:65:74:11:da:28:81:17:
d1:3b:10:7e:89:d6:37:a5:38:70:c3:b3:4e:d0:33:
74:34:05:e8:81:69:01:5a:8b:33:4b:1b:d1:9d:22:
2e:9e:50:e9:f7:4a:f5:ec:b5:b2:cf:c7:c5:2d:6a:
09:55:0b:02:f4:da:73:6e:e5:26:3d:3b:23:c2:fe:
6d:cb:d7:9a:f2:a9:03:3d:38:e9:02:8d:78:61:01:
c1:55:6f:b4:bb:31:35:db:66:4e:42:5f:23:eb:d5:
97:e3:12:6b:e8:48:38:cb:00:29:49:b5:ae:e1:3d:
c5:53:4d:22:ff:b0:a5:01:40:a4:cc:f0:0f:3a:c6:
a6:a1:ec:b8:ac:e8:18:8e:f5:ef:9b:44:55:ba:0a:
ef:44:40:5b:1b:5b:33:ed:b1:ca:11:5f:f8:96:e5:
0f:11:a8:7f:54:a8:aa:ae:b4:31:2a:47:20:42:4c:
3b:3b:e5:9b:95:03:1b:cf:c6:ae:54:8d:54:68:47:
85:c4:c6:77:9b:c5:de:6b:55:33:9a:23:d5:8c:e4:
31:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:81:F0:5D:2E:05:0F:A9:47:B5:37:95:C0:57:95:41:1F:B1:48:F4
X509v3 Authority Key Identifier:
keyid:05:A4:1E:BE:12:72:A2:1C:AE:0E:A1:B3:5D:C0:83:FA:D6:8A:5D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaQevhJyohyuDqGzXcCD-taKXX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c9:5f:f9:b0:b8:cc:e0:06:9c:37:a6:d9:47:2b:89:0b:7b:
c8:9a:a3:d5:74:a8:36:75:e5:0e:f1:c6:47:00:82:e4:00:cc:
38:4a:10:fa:1d:ff:6c:79:08:f8:3f:df:1b:c1:42:09:78:80:
8d:38:28:12:ee:02:c2:80:3d:4e:66:3b:c7:a6:79:79:3e:41:
5c:33:93:a9:9d:89:81:0c:a4:33:d4:04:53:55:fb:db:e9:77:
e0:8a:d7:81:a4:2f:33:9f:09:b9:8b:93:69:ea:ed:c0:da:06:
58:83:7b:b6:45:56:34:08:5a:f9:9e:9a:b1:c4:ba:77:15:37:
64:0d:23:ce:a4:c9:14:3b:b5:3f:e5:ac:f9:85:62:e0:1a:f7:
34:c7:c5:ba:de:85:e6:1d:6d:a0:35:b7:7c:83:28:9d:ea:66:
d5:9b:23:cf:6a:e5:00:af:6d:c5:33:dc:a0:78:08:70:f8:8d:
79:8d:b8:54:8f:3e:d7:fc:ad:44:92:b6:f1:c0:6d:ce:df:ac:
ff:95:3c:e8:39:b1:e5:9f:11:c8:89:45:de:c3:57:9d:39:15:
fa:90:45:e8:a0:2b:78:c5:a1:ce:31:06:61:81:6d:1b:c3:a9:
e5:2c:df:2b:80:1b:b8:22:49:6b:ed:c7:41:5e:93:e5:d3:a7:
c1:27:95:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY/+nvPiTfUN/kXSvsYA4J3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YTQxZWJlMTI3MmEyMWNhZTBlYTFiMzVkYzA4M2ZhZDY4
YTVkN2QwHhcNMjUwNDE2MTkwMTQyWhcNMjUwNDE3MTkwMTQyWjAzMTEwLwYDVQQD
EyhiMzgxZjA1ZDJlMDUwZmE5NDdiNTM3OTVjMDU3OTU0MTFmYjE0OGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHp7GthnVxsJENVabJRMyjfomqvM
lqej+rQmBcDSeU7wyLHho2i1zoT8a9tFBAUgx5YLMmV0EdoogRfROxB+idY3pThw
w7NO0DN0NAXogWkBWoszSxvRnSIunlDp90r17LWyz8fFLWoJVQsC9NpzbuUmPTsj
wv5ty9ea8qkDPTjpAo14YQHBVW+0uzE122ZOQl8j69WX4xJr6Eg4ywApSbWu4T3F
U00i/7ClAUCkzPAPOsamoey4rOgYjvXvm0RVugrvREBbG1sz7bHKEV/4luUPEah/
VKiqrrQxKkcgQkw7O+WblQMbz8auVI1UaEeFxMZ3m8Xea1UzmiPVjOQxwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLOB8F0uBQ+pR7U3lcBXlUEfsUj0MB8GA1UdIwQY
MBaAFAWkHr4ScqIcrg6hs13Ag/rWil19MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmFRZXZoSnlvaHl1RHFHelhjQ0QtdGFLWFgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi85NTYwMmUtOWViMy00MThiLWJjMDAt
MTY3ODMxNjEzMTQ1LzEvQmFRZXZoSnlvaHl1RHFHelhjQ0QtdGFLWFgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi85NTYwMmUtOWViMy00MThiLWJjMDAtMTY3ODMxNjEzMTQ1
LzEvQmFRZXZoSnlvaHl1RHFHelhjQ0QtdGFLWFgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM8lf+bC4
zOAGnDem2UcriQt7yJqj1XSoNnXlDvHGRwCC5ADMOEoQ+h3/bHkI+D/fG8FCCXiA
jTgoEu4CwoA9TmY7x6Z5eT5BXDOTqZ2JgQykM9QEU1X72+l34IrXgaQvM58JuYuT
aertwNoGWIN7tkVWNAha+Z6ascS6dxU3ZA0jzqTJFDu1P+Ws+YVi4Br3NMfFut6F
5h1toDW3fIMonepm1Zsjz2rlAK9txTPcoHgIcPiNeY24VI8+1/ytRJK28cBtzt+s
/5U86Dmx5Z8RyIlF3sNXnTkV+pBF6KAreMWhzjEGYYFtG8Op5SzfK4AbuCJJa+3H
QV6T5dOnwSeVeg==
-----END CERTIFICATE-----
Generated at Thu Apr 17 02:39:40 2025 by rpki-client