Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.mft
File: BbiIxzyL2SyrKy9GX-Z17h9unWA.mft (raw, json)
Hash identifier: djWUc89voPd7DYt1NcvtHdoi0h+ks2zjxzvpslqQirw=
Subject key identifier: 86:94:43:5F:DD:A1:8A:30:31:BF:94:F3:6C:68:6B:82:44:62:C7:F6
Authority key identifier: 05:B8:88:C7:3C:8B:D9:2C:AB:2B:2F:46:5F:E6:75:EE:1F:6E:9D:60
Certificate issuer: /CN=05b888c73c8bd92cab2b2f465fe675ee1f6e9d60
Certificate serial: 01964A7D931B4820C714024ADB0D1E0F7E6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbiIxzyL2SyrKy9GX-Z17h9unWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.mft
Manifest number: 14F5
Signing time: Fri 18 Apr 2025 20:01:05 +0000
Manifest this update: Fri 18 Apr 2025 20:01:05 +0000
Manifest next update: Sat 19 Apr 2025 20:01:05 +0000
Files and hashes: 1: BbiIxzyL2SyrKy9GX-Z17h9unWA.crl (hash: TeRzFXwnWlzNhcCtIvIOwDUDfdD+uk1bhBLZ1bmE9ZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbiIxzyL2SyrKy9GX-Z17h9unWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 20:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:7d:93:1b:48:20:c7:14:02:4a:db:0d:1e:0f:7e:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b888c73c8bd92cab2b2f465fe675ee1f6e9d60
Validity
Not Before: Apr 18 20:01:05 2025 GMT
Not After : Apr 19 20:01:05 2025 GMT
Subject: CN=8694435fdda18a3031bf94f36c686b824462c7f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:25:0a:81:f7:01:ed:f9:40:9f:9d:0b:c4:85:
e7:24:02:4f:e8:a2:75:85:06:bf:fa:8b:c8:d9:19:
66:e9:85:1a:99:10:6d:5e:39:83:ac:f4:bb:f5:d6:
69:55:06:22:36:14:ba:69:25:05:a8:fa:ed:0f:36:
d7:ad:8e:55:85:8f:43:d3:2d:75:d4:6e:fb:8d:11:
b2:ca:12:90:92:99:72:37:fe:dd:58:0a:11:b3:4a:
f9:c7:69:e1:e0:52:ea:8f:a8:7f:f5:b7:63:87:77:
e1:9d:4e:92:01:61:ab:e4:8f:1b:5d:bf:9f:00:5e:
30:da:32:9b:e6:c0:ee:16:a6:fe:98:1a:a6:23:60:
99:2b:97:c8:82:44:b9:3f:ff:36:e6:49:73:4a:9e:
23:30:e3:ed:8c:97:af:17:50:2f:32:19:08:1a:23:
a6:2b:dc:a1:1b:09:12:d4:a4:90:6b:39:c3:bc:dd:
7e:f9:f6:e0:7f:a8:94:ec:e2:97:e7:0c:80:db:23:
0a:55:8c:b0:8b:21:cc:2e:d9:c8:17:7d:89:85:50:
9a:d6:e3:04:b5:fd:3b:32:b6:eb:c2:cf:a8:f0:af:
7d:1a:73:fc:00:e8:69:e7:2d:05:ed:ea:73:11:f2:
d5:0a:4e:60:7a:66:c5:2f:da:5d:8f:3f:4e:ad:98:
59:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:94:43:5F:DD:A1:8A:30:31:BF:94:F3:6C:68:6B:82:44:62:C7:F6
X509v3 Authority Key Identifier:
keyid:05:B8:88:C7:3C:8B:D9:2C:AB:2B:2F:46:5F:E6:75:EE:1F:6E:9D:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbiIxzyL2SyrKy9GX-Z17h9unWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:80:3e:cf:06:04:7f:36:4d:74:1c:06:e7:40:28:35:ca:59:
76:be:64:65:0f:30:2e:8a:df:da:b0:da:11:12:4d:4d:7c:60:
71:42:d4:b0:3d:f3:f0:64:4d:74:08:40:db:cb:07:cc:5e:55:
6f:8d:a3:5c:c5:31:61:a9:1b:0f:15:9f:12:f6:f6:c5:99:a8:
57:06:4d:73:e2:70:17:83:eb:15:cc:7b:71:f6:2f:81:7a:4b:
41:fa:5a:c5:4f:76:93:41:6e:66:39:b3:1b:fb:2b:35:c9:41:
70:71:c9:77:08:e4:39:79:37:a2:f5:b9:50:4a:54:c7:bd:0c:
c1:95:fd:97:c8:e5:fb:3c:d3:6d:64:ac:44:08:c3:5a:13:d5:
8c:3e:bd:ff:99:7e:96:1e:4b:20:a8:a3:67:e5:52:24:3a:63:
4f:8e:09:6e:a3:82:e7:4f:b0:fd:1b:ab:3f:a8:bc:8b:c6:ca:
7b:a5:20:a3:74:73:7e:e8:c4:12:70:e5:4a:6c:2b:34:55:5e:
36:22:21:dd:d2:ed:5e:6e:d4:83:07:aa:3c:16:d8:f8:6b:a1:
be:e5:07:5e:12:35:4f:a6:77:4a:75:e6:5e:26:f5:18:99:ee:
0b:e5:16:d5:cb:c4:06:29:fa:b1:c1:c4:64:55:bc:92:06:5e:
96:09:d7:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZKfZMbSCDHFAJK2w0eD35rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1Yjg4OGM3M2M4YmQ5MmNhYjJiMmY0NjVmZTY3NWVlMWY2
ZTlkNjAwHhcNMjUwNDE4MjAwMTA1WhcNMjUwNDE5MjAwMTA1WjAzMTEwLwYDVQQD
Eyg4Njk0NDM1ZmRkYTE4YTMwMzFiZjk0ZjM2YzY4NmI4MjQ0NjJjN2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviUKgfcB7flAn50LxIXnJAJP6KJ1
hQa/+ovI2Rlm6YUamRBtXjmDrPS79dZpVQYiNhS6aSUFqPrtDzbXrY5VhY9D0y11
1G77jRGyyhKQkplyN/7dWAoRs0r5x2nh4FLqj6h/9bdjh3fhnU6SAWGr5I8bXb+f
AF4w2jKb5sDuFqb+mBqmI2CZK5fIgkS5P/825klzSp4jMOPtjJevF1AvMhkIGiOm
K9yhGwkS1KSQaznDvN1++fbgf6iU7OKX5wyA2yMKVYywiyHMLtnIF32JhVCa1uME
tf07Mrbrws+o8K99GnP8AOhp5y0F7epzEfLVCk5gembFL9pdjz9OrZhZxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIaUQ1/doYowMb+U82xoa4JEYsf2MB8GA1UdIwQY
MBaAFAW4iMc8i9ksqysvRl/mde4fbp1gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmJpSXh6eUwyU3lyS3k5R1gtWjE3aDl1bldBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8xNTQxZTAtODhkNy00OGRkLTg5YmMt
Y2U2MzY3ZTQ0ZTZiLzEvQmJpSXh6eUwyU3lyS3k5R1gtWjE3aDl1bldBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8xNTQxZTAtODhkNy00OGRkLTg5YmMtY2U2MzY3ZTQ0ZTZi
LzEvQmJpSXh6eUwyU3lyS3k5R1gtWjE3aDl1bldBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbYA+zwYE
fzZNdBwG50AoNcpZdr5kZQ8wLorf2rDaERJNTXxgcULUsD3z8GRNdAhA28sHzF5V
b42jXMUxYakbDxWfEvb2xZmoVwZNc+JwF4PrFcx7cfYvgXpLQfpaxU92k0FuZjmz
G/srNclBcHHJdwjkOXk3ovW5UEpUx70MwZX9l8jl+zzTbWSsRAjDWhPVjD69/5l+
lh5LIKijZ+VSJDpjT44JbqOC50+w/RurP6i8i8bKe6Ugo3RzfujEEnDlSmwrNFVe
NiIh3dLtXm7UgweqPBbY+GuhvuUHXhI1T6Z3SnXmXib1GJnuC+UW1cvEBin6scHE
ZFW8kgZelgnXwg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:21:24 2025 by rpki-client