Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
File: BSQGb4Zs826cup6b5vkCZNo3Lz4.mft (raw, json)
Hash identifier: 9+85MkhayjeUrnvPOgzgzwUwKtsNMCkwJ/AI0gF9E6w=
Subject key identifier: 38:4D:31:F7:4B:48:F1:B7:54:6C:A9:89:6F:67:98:2F:7A:EB:0C:02
Authority key identifier: 05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E
Certificate issuer: /CN=0524066f866cf36e9cba9e9be6f90264da372f3e
Certificate serial: 01964A0FD0E7404E911993A4E7F405750E2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
Manifest number: 14F9
Signing time: Fri 18 Apr 2025 18:01:12 +0000
Manifest this update: Fri 18 Apr 2025 18:01:12 +0000
Manifest next update: Sat 19 Apr 2025 18:01:12 +0000
Files and hashes: 1: BSQGb4Zs826cup6b5vkCZNo3Lz4.crl (hash: RV2Tg3qu7PHXvWobXJo6+Fq72TWNwaupPWh2KgssfBI=)
2: Y3RMoJznpenQfrP3I4h7m1FHoFA.roa (hash: e1BDAMfL6M0zEJOo5zSP4vUUcw0LzSTWKVMkd0N43ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 18:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:0f:d0:e7:40:4e:91:19:93:a4:e7:f4:05:75:0e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0524066f866cf36e9cba9e9be6f90264da372f3e
Validity
Not Before: Apr 18 18:01:12 2025 GMT
Not After : Apr 19 18:01:12 2025 GMT
Subject: CN=384d31f74b48f1b7546ca9896f67982f7aeb0c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cb:a0:20:5a:4e:c3:d7:63:c1:3a:b0:e3:3d:
c8:86:b6:59:fc:25:7c:77:45:4c:ac:9a:47:4b:a0:
65:98:cc:07:21:c9:0b:d1:f5:26:2b:1b:89:fe:39:
82:9a:2b:d7:65:e7:78:e0:0a:0d:a5:ce:f1:fa:f7:
ec:30:71:2a:a1:8a:6a:2b:1f:52:72:7e:5e:07:56:
72:92:8f:93:32:c5:fc:e4:72:54:28:8b:1b:2c:a7:
51:bd:e7:a0:85:c0:0f:8c:13:b1:65:ce:96:a5:5e:
24:b5:f9:19:6c:e9:2c:38:4f:92:30:cc:1d:21:4c:
11:03:1a:45:17:c2:fe:4c:41:ee:e5:fe:75:56:6b:
96:b3:66:4b:76:4c:f8:10:06:cc:90:19:50:02:4c:
0d:f1:3f:5a:ec:00:dd:85:39:76:b6:4c:98:ce:32:
85:fa:27:1d:aa:02:e3:2c:9a:7e:60:db:bc:4c:be:
56:cf:3a:c3:cf:ba:0b:ce:b0:19:eb:89:93:20:ed:
04:35:6c:f7:a6:a9:55:7a:b9:19:1a:bf:0a:43:56:
45:35:82:aa:19:d6:b6:cb:4f:07:2a:66:f2:70:09:
0a:75:59:d8:a9:1a:27:12:31:4d:dc:44:63:16:b6:
1a:c5:bb:6a:62:12:38:60:9d:9e:e4:ed:08:63:d6:
5a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4D:31:F7:4B:48:F1:B7:54:6C:A9:89:6F:67:98:2F:7A:EB:0C:02
X509v3 Authority Key Identifier:
keyid:05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:f8:0f:e6:ce:1e:c6:8b:ff:75:1f:4c:6a:31:52:66:b9:ad:
5d:3a:6e:b4:cc:ff:6d:0d:c4:dd:68:e5:37:b6:b7:9f:8f:17:
5e:53:2a:11:4e:4e:e2:aa:cb:84:f3:1e:c9:33:4a:7d:af:aa:
ee:ca:ae:40:cc:b3:c2:c0:1f:73:b2:64:5a:3f:5f:0c:f8:b6:
1b:c3:49:ec:d7:88:16:6c:ea:af:3d:7f:f8:46:0d:d9:96:e9:
95:ad:a5:2f:8c:32:cc:4e:36:5e:54:47:84:db:63:94:96:d5:
78:31:04:5c:f7:48:50:5c:3f:f5:d9:e9:37:e9:bd:f0:9f:55:
6d:39:27:67:47:d8:64:38:d3:31:80:d6:5f:af:4f:73:78:3f:
49:df:b7:ee:a3:35:04:62:27:03:3c:eb:58:31:8c:ec:fb:dd:
d2:14:f9:ec:55:8b:41:74:14:27:48:4d:67:62:89:ad:23:0f:
89:8d:b3:9d:31:7b:45:2b:fa:ac:a1:26:74:4f:3a:01:a8:cf:
1c:d5:29:5d:5a:68:8c:7c:32:ca:17:f8:bd:13:d0:be:32:ec:
e3:be:dc:c8:b0:6b:a7:8f:a9:37:0b:53:67:de:de:4a:86:4c:
ad:e8:ff:2d:34:2a:1a:20:d7:2a:b0:c0:60:24:09:ff:a6:2c:
7b:00:70:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZKD9DnQE6RGZOk5/QFdQ4sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MjQwNjZmODY2Y2YzNmU5Y2JhOWU5YmU2ZjkwMjY0ZGEz
NzJmM2UwHhcNMjUwNDE4MTgwMTEyWhcNMjUwNDE5MTgwMTEyWjAzMTEwLwYDVQQD
EygzODRkMzFmNzRiNDhmMWI3NTQ2Y2E5ODk2ZjY3OTgyZjdhZWIwYzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcugIFpOw9djwTqw4z3IhrZZ/CV8
d0VMrJpHS6BlmMwHIckL0fUmKxuJ/jmCmivXZed44AoNpc7x+vfsMHEqoYpqKx9S
cn5eB1Zyko+TMsX85HJUKIsbLKdRveeghcAPjBOxZc6WpV4ktfkZbOksOE+SMMwd
IUwRAxpFF8L+TEHu5f51VmuWs2ZLdkz4EAbMkBlQAkwN8T9a7ADdhTl2tkyYzjKF
+icdqgLjLJp+YNu8TL5WzzrDz7oLzrAZ64mTIO0ENWz3pqlVerkZGr8KQ1ZFNYKq
Gda2y08HKmbycAkKdVnYqRonEjFN3ERjFrYaxbtqYhI4YJ2e5O0IY9ZaowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhNMfdLSPG3VGypiW9nmC966wwCMB8GA1UdIwQY
MBaAFAUkBm+GbPNunLqem+b5AmTaNy8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlNRR2I0WnM4MjZjdXA2YjV2a0NaTm8zTHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8yMTc0NTEtZTFmYi00Y2M2LTgxNjUt
ODA0YzQ2NzkwOTNmLzEvQlNRR2I0WnM4MjZjdXA2YjV2a0NaTm8zTHo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8yMTc0NTEtZTFmYi00Y2M2LTgxNjUtODA0YzQ2NzkwOTNm
LzEvQlNRR2I0WnM4MjZjdXA2YjV2a0NaTm8zTHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArPgP5s4e
xov/dR9MajFSZrmtXTputMz/bQ3E3WjlN7a3n48XXlMqEU5O4qrLhPMeyTNKfa+q
7squQMyzwsAfc7JkWj9fDPi2G8NJ7NeIFmzqrz1/+EYN2Zbpla2lL4wyzE42XlRH
hNtjlJbVeDEEXPdIUFw/9dnpN+m98J9VbTknZ0fYZDjTMYDWX69Pc3g/Sd+37qM1
BGInAzzrWDGM7Pvd0hT57FWLQXQUJ0hNZ2KJrSMPiY2znTF7RSv6rKEmdE86AajP
HNUpXVpojHwyyhf4vRPQvjLs477cyLBrp4+pNwtTZ97eSoZMrej/LTQqGiDXKrDA
YCQJ/6YsewBwiA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 03:14:18 2025 by rpki-client