Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.mft
File: bu8NxR3_8BA0GVmZBjZVcrf-SP4.mft (raw, json)
Hash identifier: DMkcxf3GL57dDysBZhY+eda1aVMPG3LQ74qtQ85B220=
Subject key identifier: AD:61:8F:DC:2C:9F:25:60:4B:DB:6B:D1:87:72:EE:E4:22:67:1B:45
Authority key identifier: 6E:EF:0D:C5:1D:FF:F0:10:34:19:59:99:06:36:55:72:B7:FE:48:FE
Certificate issuer: /CN=6eef0dc51dfff0103419599906365572b7fe48fe
Certificate serial: 0196515AB97CF320B0C03D96A2A184021481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bu8NxR3_8BA0GVmZBjZVcrf-SP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.mft
Manifest number: 1459
Signing time: Sun 20 Apr 2025 04:00:22 +0000
Manifest this update: Sun 20 Apr 2025 04:00:22 +0000
Manifest next update: Mon 21 Apr 2025 04:00:22 +0000
Files and hashes: 1: U6RWD9aj4OMHo0yZqYie1YKgXI8.roa (hash: 4jGk3sD+7Q1BY6xahD0ze9ksbE/y7sr9QeBNFj05KaY=)
2: bu8NxR3_8BA0GVmZBjZVcrf-SP4.crl (hash: 1149U91LiNYkpVFJxE9klqsEcNgIJnkFsm/BUiMClKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bu8NxR3_8BA0GVmZBjZVcrf-SP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5a:b9:7c:f3:20:b0:c0:3d:96:a2:a1:84:02:14:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eef0dc51dfff0103419599906365572b7fe48fe
Validity
Not Before: Apr 20 04:00:22 2025 GMT
Not After : Apr 21 04:00:22 2025 GMT
Subject: CN=ad618fdc2c9f25604bdb6bd18772eee422671b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0c:b7:aa:5f:3b:97:3f:e0:b8:13:05:fb:4f:
11:cf:d0:dc:d5:b0:3a:2d:54:4d:74:b1:b7:93:e0:
9a:07:dc:7a:45:dc:be:d5:83:c4:bc:30:67:13:87:
48:74:88:c7:db:82:59:f2:db:10:3c:09:06:ae:7c:
4f:27:0f:07:45:5b:f8:3e:43:55:af:19:23:f4:20:
3a:7c:7b:e0:a0:ad:79:6a:e2:18:ea:c1:87:4e:ec:
b8:21:79:ba:d7:83:76:e0:71:36:e8:02:09:0f:40:
ed:b9:da:10:f6:0b:7b:7d:09:e2:4f:53:af:ed:9e:
12:ec:16:fc:34:de:f1:f9:57:e7:45:17:a0:bc:34:
d0:1a:57:b7:72:6a:c9:fe:49:cc:5c:0e:fc:b1:6a:
e1:f8:41:e3:f8:63:71:45:92:0f:37:29:4e:51:e6:
4b:15:03:5b:93:c7:da:0d:fa:52:6c:0a:16:10:2f:
5f:1f:4c:39:47:02:5b:53:0c:8c:25:50:f5:c9:10:
30:67:f4:5e:d2:40:7d:04:bb:f6:7d:02:8c:c4:31:
36:97:f7:b5:47:dc:b0:ad:dd:1a:9e:8d:2e:9e:66:
eb:9a:ef:c9:6a:46:77:1a:6c:22:cf:dc:bd:3d:51:
80:4f:3d:14:d2:ab:2f:93:51:2e:53:e3:3e:9c:3b:
15:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:61:8F:DC:2C:9F:25:60:4B:DB:6B:D1:87:72:EE:E4:22:67:1B:45
X509v3 Authority Key Identifier:
keyid:6E:EF:0D:C5:1D:FF:F0:10:34:19:59:99:06:36:55:72:B7:FE:48:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bu8NxR3_8BA0GVmZBjZVcrf-SP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:26:68:ac:a4:9e:b9:e5:ff:08:09:a2:98:12:9e:ff:82:cd:
a3:eb:94:b6:85:57:f3:5f:b0:dc:f5:a4:b9:82:d4:86:37:9e:
aa:9e:d2:88:c7:a5:64:ee:16:f3:a0:22:15:4c:72:00:7d:9b:
13:a0:42:0e:b8:63:3d:f6:d0:e9:9a:7e:49:cf:18:17:02:51:
26:8b:00:06:d7:e4:86:ff:1c:69:87:9f:7b:7e:70:66:96:fe:
30:a4:9e:a0:ec:54:09:15:86:5f:50:36:10:2c:c5:38:69:7a:
4f:ad:26:d6:fa:46:34:35:36:a7:9f:0c:2b:1b:c7:4d:b1:e0:
25:e7:bb:45:f7:cf:10:52:ea:77:cb:aa:c8:6e:4f:5b:ba:e9:
30:e8:34:4e:e3:16:72:4c:07:ef:7a:b4:15:7d:a4:3e:9f:d6:
4a:7d:a2:00:37:c3:8e:c2:99:e5:cf:50:09:2c:10:19:8a:21:
21:f1:a6:72:b7:1a:1d:77:c4:fb:c0:85:d9:32:10:6b:d6:03:
fd:43:06:6e:66:e0:ee:02:49:2f:e7:20:3d:d4:e8:b7:c4:8e:
b2:9f:a0:cd:a4:3e:91:73:b8:be:cb:00:83:73:f1:4b:b8:cc:
d7:9a:ec:1e:52:ce:5a:a5:ab:e5:66:f7:c2:96:22:2b:bc:f7:
9c:f7:06:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZRWrl88yCwwD2WoqGEAhSBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlZWYwZGM1MWRmZmYwMTAzNDE5NTk5OTA2MzY1NTcyYjdm
ZTQ4ZmUwHhcNMjUwNDIwMDQwMDIyWhcNMjUwNDIxMDQwMDIyWjAzMTEwLwYDVQQD
EyhhZDYxOGZkYzJjOWYyNTYwNGJkYjZiZDE4NzcyZWVlNDIyNjcxYjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAy3ql87lz/guBMF+08Rz9Dc1bA6
LVRNdLG3k+CaB9x6Rdy+1YPEvDBnE4dIdIjH24JZ8tsQPAkGrnxPJw8HRVv4PkNV
rxkj9CA6fHvgoK15auIY6sGHTuy4IXm614N24HE26AIJD0DtudoQ9gt7fQniT1Ov
7Z4S7Bb8NN7x+VfnRRegvDTQGle3cmrJ/knMXA78sWrh+EHj+GNxRZIPNylOUeZL
FQNbk8faDfpSbAoWEC9fH0w5RwJbUwyMJVD1yRAwZ/Re0kB9BLv2fQKMxDE2l/e1
R9ywrd0ano0unmbrmu/JakZ3Gmwiz9y9PVGATz0U0qsvk1EuU+M+nDsVzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK1hj9wsnyVgS9tr0Ydy7uQiZxtFMB8GA1UdIwQY
MBaAFG7vDcUd//AQNBlZmQY2VXK3/kj+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnU4TnhSM184QkEwR1ZtWkJqWlZjcmYtU1A0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS81ZjIxN2EtZGUyNi00YmYwLWFjMjAt
NGZkYWUwOWE2NzdkLzEvYnU4TnhSM184QkEwR1ZtWkJqWlZjcmYtU1A0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS81ZjIxN2EtZGUyNi00YmYwLWFjMjAtNGZkYWUwOWE2Nzdk
LzEvYnU4TnhSM184QkEwR1ZtWkJqWlZjcmYtU1A0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARCZorKSe
ueX/CAmimBKe/4LNo+uUtoVX81+w3PWkuYLUhjeeqp7SiMelZO4W86AiFUxyAH2b
E6BCDrhjPfbQ6Zp+Sc8YFwJRJosABtfkhv8caYefe35wZpb+MKSeoOxUCRWGX1A2
ECzFOGl6T60m1vpGNDU2p58MKxvHTbHgJee7RffPEFLqd8uqyG5PW7rpMOg0TuMW
ckwH73q0FX2kPp/WSn2iADfDjsKZ5c9QCSwQGYohIfGmcrcaHXfE+8CF2TIQa9YD
/UMGbmbg7gJJL+cgPdTot8SOsp+gzaQ+kXO4vssAg3PxS7jM15rsHlLOWqWr5Wb3
wpYiK7z3nPcGoA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:15:25 2025 by rpki-client