Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.mft
File: bLm_6TNtoFV5BgineljMq8SWhpQ.mft (raw, json)
Hash identifier: esbO54ffM5/smgrawASLUyVQy65DpWDTylW4WmpwYAg=
Subject key identifier: D1:99:5A:CF:BC:F7:CD:56:BA:92:A0:82:71:81:1B:EF:44:4B:22:4B
Authority key identifier: 6C:B9:BF:E9:33:6D:A0:55:79:06:08:A7:7A:58:CC:AB:C4:96:86:94
Certificate issuer: /CN=6cb9bfe9336da055790608a77a58ccabc4968694
Certificate serial: 01964BFD9AEDBC53F78E3157AEFABFFBA824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLm_6TNtoFV5BgineljMq8SWhpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.mft
Manifest number: 0B9E
Signing time: Sat 19 Apr 2025 03:00:33 +0000
Manifest this update: Sat 19 Apr 2025 03:00:33 +0000
Manifest next update: Sun 20 Apr 2025 03:00:33 +0000
Files and hashes: 1: bLm_6TNtoFV5BgineljMq8SWhpQ.crl (hash: aVkrof36dRR3+8tghC4LJSxYDidt+e1GxaqZU7oLbEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLm_6TNtoFV5BgineljMq8SWhpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fd:9a:ed:bc:53:f7:8e:31:57:ae:fa:bf:fb:a8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb9bfe9336da055790608a77a58ccabc4968694
Validity
Not Before: Apr 19 03:00:33 2025 GMT
Not After : Apr 20 03:00:33 2025 GMT
Subject: CN=d1995acfbcf7cd56ba92a08271811bef444b224b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:85:ad:13:5b:9c:ef:f5:ee:1e:2b:59:01:c6:
c6:a8:b6:78:e1:48:ff:ba:42:8b:b8:57:e7:ec:26:
ea:ea:e1:03:77:55:df:49:39:61:61:c4:cd:6a:45:
e8:37:cd:11:92:72:f9:20:3c:9e:b1:7d:8e:a1:7a:
41:f4:40:b8:7d:75:49:04:b4:30:af:b2:04:39:0d:
81:4a:b6:c7:c1:cf:01:03:21:9c:f0:b5:be:17:2b:
35:f5:51:44:13:67:ac:1b:ee:c9:f8:d7:5f:ba:0c:
3a:1f:1c:73:f8:c3:ce:a3:fb:2f:37:bd:12:f5:02:
76:f0:aa:da:b5:8d:93:70:18:c8:7f:dc:54:96:20:
38:a6:b8:b0:19:69:e7:30:3f:df:e8:fd:1d:b7:2c:
a3:78:ad:6e:e2:b8:36:96:2c:a3:4a:e6:4b:22:31:
76:1b:b7:62:3e:73:56:21:74:90:77:c7:0f:f0:7d:
5e:ed:2c:47:6d:9f:58:da:fc:04:b9:16:48:5a:79:
3a:2a:44:32:32:94:04:f2:1d:99:d3:4e:2c:67:2d:
02:5a:53:07:1b:fc:a5:ac:96:79:26:21:e9:a2:2b:
6a:24:e6:fa:ed:4a:94:a6:9f:ef:53:68:a2:25:62:
c3:c2:3f:0b:9c:e6:c0:70:a1:b6:80:20:63:d1:26:
92:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:99:5A:CF:BC:F7:CD:56:BA:92:A0:82:71:81:1B:EF:44:4B:22:4B
X509v3 Authority Key Identifier:
keyid:6C:B9:BF:E9:33:6D:A0:55:79:06:08:A7:7A:58:CC:AB:C4:96:86:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLm_6TNtoFV5BgineljMq8SWhpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:bb:4c:c2:8d:df:1b:b0:cb:33:75:dc:fe:ee:54:b7:6a:c3:
84:ee:0e:84:17:1e:a5:04:a9:4b:cd:34:89:ff:57:48:7e:14:
5c:ba:62:eb:f3:1c:5b:4e:16:b5:f9:0a:46:7f:06:63:81:3e:
28:5c:6b:a8:c9:e0:2e:db:cf:25:14:2c:b4:79:93:3d:74:05:
d5:1d:1d:fc:0e:f7:64:14:70:7f:58:7e:71:40:16:ed:58:e9:
15:a9:14:f8:e3:64:fd:03:4b:cc:74:25:30:d2:67:d7:58:5f:
32:46:26:0c:49:24:e9:4b:24:75:99:46:49:42:ab:2a:04:42:
8a:23:27:ca:de:c4:92:8c:d1:99:75:73:94:60:9d:38:60:3d:
88:16:c0:3c:ce:e7:ac:46:3a:6c:40:f0:90:32:97:3a:2f:e2:
a5:3d:b4:df:c8:08:2f:aa:12:55:de:67:e4:25:23:3e:8c:05:
51:45:ae:dd:f0:b0:2e:f2:aa:86:1b:d5:bc:2d:fa:0a:9b:14:
7a:fb:53:cd:39:e9:89:71:63:a1:11:56:f8:9a:85:c6:e5:32:
42:56:52:fc:b5:68:c9:48:db:c7:83:0b:31:ca:83:0c:27:cd:
72:26:3a:61:d6:9b:d4:a8:f9:43:4a:56:c1:49:9a:ed:58:14:
77:ad:03:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZL/ZrtvFP3jjFXrvq/+6gkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYjliZmU5MzM2ZGEwNTU3OTA2MDhhNzdhNThjY2FiYzQ5
Njg2OTQwHhcNMjUwNDE5MDMwMDMzWhcNMjUwNDIwMDMwMDMzWjAzMTEwLwYDVQQD
EyhkMTk5NWFjZmJjZjdjZDU2YmE5MmEwODI3MTgxMWJlZjQ0NGIyMjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIWtE1uc7/XuHitZAcbGqLZ44Uj/
ukKLuFfn7Cbq6uEDd1XfSTlhYcTNakXoN80RknL5IDyesX2OoXpB9EC4fXVJBLQw
r7IEOQ2BSrbHwc8BAyGc8LW+Fys19VFEE2esG+7J+Ndfugw6Hxxz+MPOo/svN70S
9QJ28KratY2TcBjIf9xUliA4priwGWnnMD/f6P0dtyyjeK1u4rg2liyjSuZLIjF2
G7diPnNWIXSQd8cP8H1e7SxHbZ9Y2vwEuRZIWnk6KkQyMpQE8h2Z004sZy0CWlMH
G/ylrJZ5JiHpoitqJOb67UqUpp/vU2iiJWLDwj8LnObAcKG2gCBj0SaSZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNGZWs+8981WupKggnGBG+9ESyJLMB8GA1UdIwQY
MBaAFGy5v+kzbaBVeQYIp3pYzKvEloaUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkxtXzZUTnRvRlY1QmdpbmVsak1xOFNXaHBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi82ZmUzZmEtOTY4Mi00ODA3LTkyNzIt
Y2ZkMDBkZDgyN2VlLzEvYkxtXzZUTnRvRlY1QmdpbmVsak1xOFNXaHBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi82ZmUzZmEtOTY4Mi00ODA3LTkyNzItY2ZkMDBkZDgyN2Vl
LzEvYkxtXzZUTnRvRlY1QmdpbmVsak1xOFNXaHBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACLtMwo3f
G7DLM3Xc/u5Ut2rDhO4OhBcepQSpS800if9XSH4UXLpi6/McW04WtfkKRn8GY4E+
KFxrqMngLtvPJRQstHmTPXQF1R0d/A73ZBRwf1h+cUAW7VjpFakU+ONk/QNLzHQl
MNJn11hfMkYmDEkk6UskdZlGSUKrKgRCiiMnyt7EkozRmXVzlGCdOGA9iBbAPM7n
rEY6bEDwkDKXOi/ipT2038gIL6oSVd5n5CUjPowFUUWu3fCwLvKqhhvVvC36CpsU
evtTzTnpiXFjoRFW+JqFxuUyQlZS/LVoyUjbx4MLMcqDDCfNciY6Ydab1Kj5Q0pW
wUma7VgUd60D7A==
-----END CERTIFICATE-----
Generated at Sat Apr 19 10:40:26 2025 by rpki-client