Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
File: BdTUnaPhSFWnuINgP_FIwbsh9pA.mft (raw, json)
Hash identifier: pwHwiqwD+p+xuBZyVAOLxQdnH7N1AjqGVvuOaqUE/UE=
Subject key identifier: A1:EA:63:2C:61:A9:34:E7:92:B9:2F:55:BA:26:E7:E2:0C:48:3B:55
Authority key identifier: 05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
Certificate issuer: /CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Certificate serial: 01973FC0100F080686D8BED0518A0D76C41B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
Manifest number: 55
Signing time: Thu 05 Jun 2025 11:00:40 +0000
Manifest this update: Thu 05 Jun 2025 11:00:40 +0000
Manifest next update: Fri 06 Jun 2025 11:00:40 +0000
Files and hashes: 1: BdTUnaPhSFWnuINgP_FIwbsh9pA.crl (hash: q4KXD+AWH4L8t8CCKqF45qon1wCfOc/2JddRhbg3o/8=)
2: ET1qcB4V98A_IKXLYXraZJzJShg.roa (hash: tEszrUqZF8KTNTKLbhCoEtjCpoq/ERwnRwZKBj0QR6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3f:c0:10:0f:08:06:86:d8:be:d0:51:8a:0d:76:c4:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Validity
Not Before: Jun 5 11:00:40 2025 GMT
Not After : Jun 6 11:00:40 2025 GMT
Subject: CN=a1ea632c61a934e792b92f55ba26e7e20c483b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c7:f3:b9:d5:23:33:e9:d3:d8:10:ed:a9:02:
19:c7:76:c7:00:36:33:6d:57:da:1d:69:bd:93:bd:
13:be:8b:23:72:82:d7:88:26:22:0e:29:bd:cf:a6:
fa:eb:3c:e5:71:ca:26:c6:1f:a0:5b:5f:c7:b4:b9:
9f:b6:b8:cb:ea:8f:87:f0:ab:9a:f5:34:90:14:d5:
73:71:0e:0f:80:8c:6c:20:2e:14:8b:13:50:c4:c0:
13:0d:69:fb:55:7d:b8:60:c0:89:f1:c2:f9:74:be:
07:51:1b:3a:05:27:dd:ab:53:dd:8b:fd:00:47:2a:
e7:ef:fe:e0:d9:dc:86:51:db:14:8f:b8:b4:0e:e1:
02:54:9d:4d:f0:d8:08:44:1d:91:09:9a:ee:a1:c7:
b7:59:46:15:45:74:b8:35:62:69:61:f0:8e:cf:a7:
11:45:a4:30:4a:ce:8c:70:bd:72:e7:e4:61:97:a1:
93:3e:23:8d:a4:49:02:0a:cc:45:89:55:20:f0:20:
9c:18:e1:18:7c:3d:4e:e4:47:a4:13:75:39:83:93:
7f:f2:8f:0a:24:01:1d:c6:4c:b1:4a:cb:42:43:57:
32:cd:b5:f9:5f:5d:a7:a4:c0:9f:d5:62:5e:c0:88:
ac:9b:63:f6:68:38:9a:5d:bd:0c:3d:7b:1a:74:df:
78:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:EA:63:2C:61:A9:34:E7:92:B9:2F:55:BA:26:E7:E2:0C:48:3B:55
X509v3 Authority Key Identifier:
keyid:05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:7b:5e:7a:34:71:a2:2a:87:d8:64:e1:fa:7e:52:4f:82:15:
14:a2:f3:66:38:c4:bb:d1:cb:cd:02:8e:6d:94:d9:4c:09:2b:
97:12:23:38:42:52:14:a8:0a:6d:76:43:79:78:44:84:c7:55:
6a:2a:77:5b:e3:0f:e4:73:5a:0a:93:ff:35:ee:58:86:49:52:
cc:cd:6e:b2:d7:9c:3c:48:39:1a:43:2c:8a:91:01:da:26:dc:
94:e2:bc:5b:18:45:2a:36:ab:22:60:23:a9:c9:96:c7:eb:33:
64:a3:4f:00:25:5a:c3:e5:3e:b5:e5:d1:4e:c9:ad:59:97:f2:
4d:32:c7:d2:2d:f1:79:1c:0e:a3:81:f2:99:3b:ba:b9:d5:f5:
3a:71:f4:4e:79:1d:b7:f3:fe:97:df:af:2a:3d:61:3b:de:65:
7e:60:17:7f:55:27:96:ec:c2:39:5f:8c:15:c4:74:02:00:d3:
01:01:68:5f:f5:1a:88:91:58:e5:69:bc:5a:f3:e9:e0:d3:6d:
03:d2:8a:e1:5e:db:18:30:10:fd:f5:ab:4e:d9:a4:9b:d6:05:
f4:34:4b:fa:63:42:8e:d5:0a:b0:bb:6c:bc:48:19:7b:48:b1:
57:45:9d:ff:c2:ca:54:4b:e3:f5:52:ce:ca:92:ce:0c:c7:2e:
5e:53:1d:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZc/wBAPCAaG2L7QUYoNdsQbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZDRkNDlkYTNlMTQ4NTVhN2I4ODM2MDNmZjE0OGMxYmIy
MWY2OTAwHhcNMjUwNjA1MTEwMDQwWhcNMjUwNjA2MTEwMDQwWjAzMTEwLwYDVQQD
EyhhMWVhNjMyYzYxYTkzNGU3OTJiOTJmNTViYTI2ZTdlMjBjNDgzYjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssfzudUjM+nT2BDtqQIZx3bHADYz
bVfaHWm9k70TvosjcoLXiCYiDim9z6b66zzlccomxh+gW1/HtLmftrjL6o+H8Kua
9TSQFNVzcQ4PgIxsIC4UixNQxMATDWn7VX24YMCJ8cL5dL4HURs6BSfdq1Pdi/0A
Ryrn7/7g2dyGUdsUj7i0DuECVJ1N8NgIRB2RCZruoce3WUYVRXS4NWJpYfCOz6cR
RaQwSs6McL1y5+Rhl6GTPiONpEkCCsxFiVUg8CCcGOEYfD1O5EekE3U5g5N/8o8K
JAEdxkyxSstCQ1cyzbX5X12npMCf1WJewIism2P2aDiaXb0MPXsadN949wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHqYyxhqTTnkrkvVbom5+IMSDtVMB8GA1UdIwQY
MBaAFAXU1J2j4UhVp7iDYD/xSMG7IfaQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmRUVW5hUGhTRldudUlOZ1BfRkl3YnNoOXBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8xYTNmOTEtMTViYy00ZWI4LTk3ZGQt
NThmMWNiZjNjYWMzLzEvQmRUVW5hUGhTRldudUlOZ1BfRkl3YnNoOXBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8xYTNmOTEtMTViYy00ZWI4LTk3ZGQtNThmMWNiZjNjYWMz
LzEvQmRUVW5hUGhTRldudUlOZ1BfRkl3YnNoOXBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFnteejRx
oiqH2GTh+n5ST4IVFKLzZjjEu9HLzQKObZTZTAkrlxIjOEJSFKgKbXZDeXhEhMdV
aip3W+MP5HNaCpP/Ne5YhklSzM1ustecPEg5GkMsipEB2ibclOK8WxhFKjarImAj
qcmWx+szZKNPACVaw+U+teXRTsmtWZfyTTLH0i3xeRwOo4HymTu6udX1OnH0Tnkd
t/P+l9+vKj1hO95lfmAXf1UnluzCOV+MFcR0AgDTAQFoX/UaiJFY5Wm8WvPp4NNt
A9KK4V7bGDAQ/fWrTtmkm9YF9DRL+mNCjtUKsLtsvEgZe0ixV0Wd/8LKVEvj9VLO
ypLODMcuXlMd7w==
-----END CERTIFICATE-----
Generated at Thu Jun 5 19:17:36 2025 by rpki-client