Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
File: 1-BjewyV4QBB3SCAJDo4KCD3d29w.mft (raw, json)
Hash identifier: 7oAos/WhLrhgz8arAWYf7HTYv0kue/I+MWlDt4xTqYc=
Subject key identifier: EA:EA:79:38:CB:EF:A9:B7:4F:D0:56:F7:F2:AD:CE:99:38:EB:D3:AB
Authority key identifier: F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC
Certificate issuer: /CN=f818dec325784010774820090e8e0a083ddddbdc
Certificate serial: 01964F357CE55BC71830C3D1EC820FA6AD70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
Manifest number: 11FF
Signing time: Sat 19 Apr 2025 18:00:27 +0000
Manifest this update: Sat 19 Apr 2025 18:00:27 +0000
Manifest next update: Sun 20 Apr 2025 18:00:27 +0000
Files and hashes: 1: 1-BjewyV4QBB3SCAJDo4KCD3d29w.crl (hash: FFwftOrhRy9ZsQ5bW7n/0ZgAjprbd2L613CfiOXEUCQ=)
2: 4F5-U-IyeBv7jgG-t4o9hlhRjTc.roa (hash: gpdr7Kl3pmYPlDObQ8u3VFe1L12/MWoBa72QoNTdi8I=)
3: CpPijEmYlerTV19r3A6mYbWd_7U.roa (hash: paOU+LXyw4VdCUY8Gvj627Nds5jNeA0tyswAnoZqaYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:35:7c:e5:5b:c7:18:30:c3:d1:ec:82:0f:a6:ad:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f818dec325784010774820090e8e0a083ddddbdc
Validity
Not Before: Apr 19 18:00:27 2025 GMT
Not After : Apr 20 18:00:27 2025 GMT
Subject: CN=eaea7938cbefa9b74fd056f7f2adce9938ebd3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9f:d8:6f:82:ba:2d:2d:c0:37:a8:50:1e:f7:
8a:e3:4f:e6:7d:3c:59:2c:0a:e2:c2:ee:df:62:d3:
a6:8c:4f:f9:26:10:32:32:6f:60:68:33:a4:22:d9:
d6:d1:00:83:14:c1:8a:45:88:12:e6:90:29:27:5b:
8d:f7:54:f0:d6:72:8e:9e:95:64:15:7d:8b:67:a1:
24:f4:76:69:c8:7c:6a:f1:06:83:c1:cc:7d:54:c3:
30:87:59:61:64:9c:9c:26:1a:dd:ba:78:f2:fa:19:
73:6f:78:b4:18:49:dd:55:b0:d6:2e:f2:6e:ea:f2:
c1:be:a9:35:2f:6b:8e:b9:12:36:5b:1b:1f:44:6d:
22:80:e6:8f:6a:81:7d:7b:a1:6d:39:d3:f2:23:93:
f0:da:fd:a3:62:16:17:8d:5d:35:2a:76:6f:ce:95:
3a:56:9f:7a:cb:bb:48:e1:5b:c5:ef:e5:16:b3:e0:
92:bf:13:bd:d9:4b:0d:e1:4c:4c:c5:19:a5:9d:ce:
9d:64:ed:87:b2:1f:59:1b:19:e9:5a:09:32:1a:b7:
2d:1a:0e:27:6d:75:91:2e:e3:e4:1a:4a:e0:0f:5a:
b0:76:1f:12:17:43:22:a6:28:ac:c4:44:9f:d9:74:
88:e8:71:04:f1:94:29:9d:0e:f9:54:a2:4d:40:cc:
a5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EA:79:38:CB:EF:A9:B7:4F:D0:56:F7:F2:AD:CE:99:38:EB:D3:AB
X509v3 Authority Key Identifier:
keyid:F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:b5:6b:42:03:86:43:78:2b:01:99:9b:df:43:fe:71:5d:bb:
b1:63:a8:11:4a:28:c8:50:99:59:ce:41:e0:3c:9c:bd:c7:1e:
f4:6d:29:5f:75:f9:10:66:38:8c:f9:e9:76:ff:a0:79:06:a6:
a8:05:0c:49:01:2b:1e:c4:10:92:5f:18:69:85:9c:f1:67:5f:
89:a2:06:12:3f:69:93:db:82:9f:a2:cb:f6:f0:44:81:3e:33:
c4:e2:d9:20:46:d7:77:f3:87:e9:77:0b:c8:8a:a8:b8:d1:d5:
a2:9d:0c:c4:a6:6f:76:af:47:7f:37:98:b6:0b:11:b1:93:a9:
22:24:64:59:8c:fe:7a:cc:55:14:16:90:14:2e:1b:aa:2f:09:
a7:af:85:20:10:1a:e1:02:24:e3:29:8e:63:93:bb:23:c4:6e:
22:36:45:54:41:4b:7b:6d:5e:ae:47:ae:9b:30:5e:2c:d1:af:
71:36:28:72:ce:1a:49:4c:3b:32:27:63:88:ae:e6:d2:91:8d:
1b:dd:9d:79:d0:47:61:32:8c:07:82:75:75:68:0d:be:8f:2c:
44:3d:ef:d0:38:df:94:43:c7:04:89:a3:f1:ee:8f:f3:c1:83:
fd:6c:db:a2:3e:56:cb:df:65:46:78:c6:bd:f6:40:c6:2a:d8:
12:4e:57:21
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZZPNXzlW8cYMMPR7IIPpq1wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MThkZWMzMjU3ODQwMTA3NzQ4MjAwOTBlOGUwYTA4M2Rk
ZGRiZGMwHhcNMjUwNDE5MTgwMDI3WhcNMjUwNDIwMTgwMDI3WjAzMTEwLwYDVQQD
EyhlYWVhNzkzOGNiZWZhOWI3NGZkMDU2ZjdmMmFkY2U5OTM4ZWJkM2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5/Yb4K6LS3AN6hQHveK40/mfTxZ
LAriwu7fYtOmjE/5JhAyMm9gaDOkItnW0QCDFMGKRYgS5pApJ1uN91Tw1nKOnpVk
FX2LZ6Ek9HZpyHxq8QaDwcx9VMMwh1lhZJycJhrdunjy+hlzb3i0GEndVbDWLvJu
6vLBvqk1L2uOuRI2WxsfRG0igOaPaoF9e6FtOdPyI5Pw2v2jYhYXjV01KnZvzpU6
Vp96y7tI4VvF7+UWs+CSvxO92UsN4UxMxRmlnc6dZO2Hsh9ZGxnpWgkyGrctGg4n
bXWRLuPkGkrgD1qwdh8SF0MipiisxESf2XSI6HEE8ZQpnQ75VKJNQMylewIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOrqeTjL76m3T9BW9/Ktzpk469OrMB8GA1UdIwQY
MBaAFPgY3sMleEAQd0ggCQ6OCgg93dvcMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1CamV3eVY0UUJCM1NDQUpEbzRLQ0QzZDI5dy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvMjk1OWZiLTg4ZjYtNDliNS1iYjAw
LTgzYTBkOWVmZWMyZC8xLzEtQmpld3lWNFFCQjNTQ0FKRG80S0NEM2QyOXcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzY5LzI5NTlmYi04OGY2LTQ5YjUtYmIwMC04M2EwZDllZmVj
MmQvMS8xLUJqZXd5VjRRQkIzU0NBSkRvNEtDRDNkMjl3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaLVr
QgOGQ3grAZmb30P+cV27sWOoEUooyFCZWc5B4Dycvcce9G0pX3X5EGY4jPnpdv+g
eQamqAUMSQErHsQQkl8YaYWc8WdfiaIGEj9pk9uCn6LL9vBEgT4zxOLZIEbXd/OH
6XcLyIqouNHVop0MxKZvdq9HfzeYtgsRsZOpIiRkWYz+esxVFBaQFC4bqi8Jp6+F
IBAa4QIk4ymOY5O7I8RuIjZFVEFLe21erkeumzBeLNGvcTYocs4aSUw7MidjiK7m
0pGNG92dedBHYTKMB4J1dWgNvo8sRD3v0DjflEPHBImj8e6P88GD/Wzboj5Wy99l
RnjGvfZAxirYEk5XIQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:19:23 2025 by rpki-client