Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
File: BuS72riW5mET81G02cgt9Q5mpxI.mft (raw, json)
Hash identifier: vCC8geUlQ34oPC0jkWVMpuzS1njdy7CuP7i/Lv6TBQM=
Subject key identifier: 24:31:DA:56:84:9D:EF:B8:DB:84:40:D9:5F:49:B8:23:56:90:54:92
Authority key identifier: 06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12
Certificate issuer: /CN=06e4bbdab896e66113f351b4d9c82df50e66a712
Certificate serial: 019645567AF04125ECCCD960B610BEF4085E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
Manifest number: 047F
Signing time: Thu 17 Apr 2025 20:00:17 +0000
Manifest this update: Thu 17 Apr 2025 20:00:17 +0000
Manifest next update: Fri 18 Apr 2025 20:00:17 +0000
Files and hashes: 1: BuS72riW5mET81G02cgt9Q5mpxI.crl (hash: 3isxRxAjKmPnd2CgFfmAkER9cnF2jELHzu7X8K1FqEk=)
2: YmfxS-GgNftFlff0Z2MZRV7dFdg.roa (hash: udDDnBYDprQnDTUgHyUZUopukV2qllWtt5uqI+VT1iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:56:7a:f0:41:25:ec:cc:d9:60:b6:10:be:f4:08:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06e4bbdab896e66113f351b4d9c82df50e66a712
Validity
Not Before: Apr 17 20:00:17 2025 GMT
Not After : Apr 18 20:00:17 2025 GMT
Subject: CN=2431da56849defb8db8440d95f49b82356905492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:82:cf:de:2a:ca:54:3a:30:1e:7e:9d:93:be:
eb:b0:a7:15:f4:ae:b9:fb:ce:dd:af:0e:b2:fb:ec:
6d:ec:db:e1:e1:4f:c4:d2:ea:15:02:4e:70:bc:7d:
da:ca:c2:f9:ae:86:87:bb:de:a1:f3:92:5b:b9:ff:
8c:f0:aa:71:8d:b7:0c:ee:03:09:9d:10:ec:2d:5a:
39:d5:15:b8:08:41:a3:34:9b:bc:89:9c:92:d6:44:
af:71:ac:07:db:cc:bf:dc:37:6e:14:21:f8:74:18:
c6:dc:59:06:71:e8:3d:5e:57:cd:4a:a2:22:b7:fa:
fc:49:2a:e9:ca:83:5d:fd:47:79:59:59:ed:31:b5:
c7:b7:24:2a:ff:b1:17:27:fc:e8:52:5a:2e:3a:21:
94:32:f4:cf:65:50:f5:ff:f9:28:77:4b:18:7c:22:
2b:54:43:74:fd:c1:04:5f:ac:59:6a:30:05:22:b4:
46:e7:c5:d9:d5:88:94:ba:ab:0f:4b:e8:30:21:e2:
c4:52:1b:ab:86:53:8f:24:6d:00:6c:bd:fb:c7:0d:
24:3e:93:9e:db:ea:f0:b0:86:61:6c:0f:f7:27:71:
91:90:c7:ca:cf:6c:47:94:48:f8:94:0d:65:54:20:
80:2b:6d:1d:d1:e4:08:9b:0c:67:f5:79:40:ef:2e:
ee:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:31:DA:56:84:9D:EF:B8:DB:84:40:D9:5F:49:B8:23:56:90:54:92
X509v3 Authority Key Identifier:
keyid:06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f6:73:07:fb:73:5a:64:48:1d:60:b1:7c:5e:63:1a:52:4a:
07:c5:8a:9f:58:82:29:d9:5d:04:d0:d7:9f:42:50:73:a1:f8:
bd:ec:d0:b9:c7:40:c4:18:70:7f:74:7d:24:a5:97:6b:61:8a:
16:ce:b4:c3:d8:7a:b0:da:b9:e2:26:37:b4:ec:78:a1:f5:f1:
bd:54:d7:80:72:c1:e6:06:85:5e:5f:06:33:bc:99:4c:81:0d:
2a:f7:72:14:77:77:24:a0:2b:2b:a7:d6:12:a7:e7:ec:02:34:
b6:3a:e0:d2:4e:69:c3:ea:0f:95:0b:72:d4:40:95:d5:a0:f3:
13:17:d5:aa:da:11:4e:ed:c0:5a:df:28:69:e7:13:43:26:d6:
33:5a:13:f4:ee:d6:de:bd:7b:55:15:6b:72:8a:0f:20:b1:38:
5d:7c:af:c5:a2:5c:e3:44:51:25:69:50:3a:01:8e:f2:04:31:
f2:f2:94:bb:7d:04:00:bc:b4:c9:b2:d4:69:1f:b5:40:27:cc:
70:42:ba:5f:3f:ab:8a:79:3d:51:c1:69:d5:46:5f:c8:5f:d1:
5b:bd:92:6c:0a:af:59:92:9a:71:f9:51:32:98:1e:6e:98:4e:
4d:b6:22:76:9a:15:b9:55:73:79:35:30:87:3c:2e:db:3d:79:
4a:0e:e3:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZFVnrwQSXszNlgthC+9AheMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2ZTRiYmRhYjg5NmU2NjExM2YzNTFiNGQ5YzgyZGY1MGU2
NmE3MTIwHhcNMjUwNDE3MjAwMDE3WhcNMjUwNDE4MjAwMDE3WjAzMTEwLwYDVQQD
EygyNDMxZGE1Njg0OWRlZmI4ZGI4NDQwZDk1ZjQ5YjgyMzU2OTA1NDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYLP3irKVDowHn6dk77rsKcV9K65
+87drw6y++xt7Nvh4U/E0uoVAk5wvH3aysL5roaHu96h85Jbuf+M8KpxjbcM7gMJ
nRDsLVo51RW4CEGjNJu8iZyS1kSvcawH28y/3DduFCH4dBjG3FkGceg9XlfNSqIi
t/r8SSrpyoNd/Ud5WVntMbXHtyQq/7EXJ/zoUlouOiGUMvTPZVD1//kod0sYfCIr
VEN0/cEEX6xZajAFIrRG58XZ1YiUuqsPS+gwIeLEUhurhlOPJG0AbL37xw0kPpOe
2+rwsIZhbA/3J3GRkMfKz2xHlEj4lA1lVCCAK20d0eQImwxn9XlA7y7uNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQx2laEne+424RA2V9JuCNWkFSSMB8GA1UdIwQY
MBaAFAbku9q4luZhE/NRtNnILfUOZqcSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnVTNzJyaVc1bUVUODFHMDJjZ3Q5UTVtcHhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9kOTk5NDctMjI5OC00MjJmLTlkYTAt
ZmUwZDI4YjY4Y2Q1LzEvQnVTNzJyaVc1bUVUODFHMDJjZ3Q5UTVtcHhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9kOTk5NDctMjI5OC00MjJmLTlkYTAtZmUwZDI4YjY4Y2Q1
LzEvQnVTNzJyaVc1bUVUODFHMDJjZ3Q5UTVtcHhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT/ZzB/tz
WmRIHWCxfF5jGlJKB8WKn1iCKdldBNDXn0JQc6H4vezQucdAxBhwf3R9JKWXa2GK
Fs60w9h6sNq54iY3tOx4ofXxvVTXgHLB5gaFXl8GM7yZTIENKvdyFHd3JKArK6fW
Eqfn7AI0tjrg0k5pw+oPlQty1ECV1aDzExfVqtoRTu3AWt8oaecTQybWM1oT9O7W
3r17VRVrcooPILE4XXyvxaJc40RRJWlQOgGO8gQx8vKUu30EALy0ybLUaR+1QCfM
cEK6Xz+rink9UcFp1UZfyF/RW72SbAqvWZKacflRMpgebphOTbYidpoVuVVzeTUw
hzwu2z15Sg7jaQ==
-----END CERTIFICATE-----
Generated at Fri Apr 18 07:01:05 2025 by rpki-client