Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
File: BA3T08UtTG-lG3qDNXjO-zqyZkk.mft (raw, json)
Hash identifier: ces943bdM2rBrqRiCqALb3Womro/Vh/fO1WHzodpLVQ=
Subject key identifier: 51:D8:6C:99:C9:F2:82:06:28:18:5F:75:B3:4B:C5:5A:BC:41:B0:CA
Authority key identifier: 04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
Certificate issuer: /CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Certificate serial: 019747E78BB8D9AA309D69FCE005FDE0911F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 01:00:46 +0000
Manifest this update: Sat 07 Jun 2025 01:00:46 +0000
Manifest next update: Sun 08 Jun 2025 01:00:46 +0000
Files and hashes: 1: BA3T08UtTG-lG3qDNXjO-zqyZkk.crl (hash: Sw9kV6jCgw6ZTGoEMczsFdue2PkGZyRIbDz2yjkjkJ0=)
2: CZQw40ubgHVu1Jof03ClaqRzNO0.roa (hash: ryau3A+d+gfpE7i1EIyrHi9oMGq0/6OLOcTA/JPeZzo=)
3: MR_mra2KXDxOhSmirjUVkdnLe2A.roa (hash: XKtS3itRVqfOpu81ikpDBZ+IyS8k+qng+AJNKrqJmHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:8b:b8:d9:aa:30:9d:69:fc:e0:05:fd:e0:91:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Validity
Not Before: Jun 7 01:00:46 2025 GMT
Not After : Jun 8 01:00:46 2025 GMT
Subject: CN=51d86c99c9f2820628185f75b34bc55abc41b0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:06:ae:5b:13:2e:89:0f:a6:6e:da:6f:10:2d:
28:b4:a9:aa:dc:c0:ff:b2:14:c7:fd:bc:fd:7b:5c:
9f:e8:45:68:7a:5e:23:86:5d:32:dc:15:dc:0f:66:
e4:3b:38:18:ef:05:37:74:1e:5a:87:10:c3:65:ce:
6f:6a:8c:70:4c:ca:d7:49:73:19:2a:e5:b9:bb:65:
aa:ff:f2:42:80:66:a5:b9:6a:92:e7:27:e5:52:e5:
85:88:21:0d:73:1a:0f:2c:d5:62:50:cf:f4:5b:bc:
c4:1b:96:d7:d9:4a:42:ce:80:71:be:9f:c3:dc:79:
a4:93:4c:5f:1e:23:82:58:dc:31:b1:1b:c9:88:16:
f8:1f:5d:7a:65:f6:45:cb:d8:15:95:aa:dc:ca:6c:
f0:0d:8e:e5:0a:5c:1a:06:6c:c3:99:3f:fb:64:ef:
70:c8:89:5c:fa:e7:6c:34:60:af:8e:a7:4d:c6:f9:
9c:bc:18:05:31:20:90:fc:f9:fa:7d:c2:38:05:9e:
d8:02:d6:bb:79:26:22:fd:57:4e:7a:fc:dd:c1:b1:
03:9c:8e:a3:bb:df:48:6b:c7:e0:c6:e1:ba:c6:68:
21:01:c3:84:ac:9c:24:f8:70:b5:95:b1:98:cd:09:
82:c3:14:c8:c6:f3:be:b0:10:ed:66:24:35:aa:11:
9b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D8:6C:99:C9:F2:82:06:28:18:5F:75:B3:4B:C5:5A:BC:41:B0:CA
X509v3 Authority Key Identifier:
keyid:04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:77:e7:64:0c:44:1d:56:1a:a8:a8:8b:a5:06:6a:77:70:5b:
90:11:95:e1:1c:5b:b9:19:0e:a9:1d:f7:1a:66:64:e1:2f:f5:
bd:2f:5d:e3:9f:cb:3a:e9:80:c1:b4:c1:a6:cf:fa:95:0b:28:
e1:e4:3e:38:2e:cc:d0:06:d2:01:cb:95:05:5f:df:4d:75:7f:
47:59:f0:55:09:c9:8e:ac:7a:21:cf:8f:f5:bb:26:f6:fc:d4:
2c:a7:44:dc:3c:f2:34:01:fb:70:1e:f3:e9:99:9d:69:08:50:
b5:e1:87:a0:68:5b:6f:33:f0:46:89:25:2c:ca:43:85:a4:ef:
cd:78:6d:2e:04:6c:67:3e:6e:f5:64:23:7a:94:04:52:99:56:
88:22:2b:a6:c9:31:4b:91:b8:73:70:48:d4:45:1c:3c:4b:e1:
84:87:4c:9a:f6:7d:de:5e:24:17:a1:e7:bd:fe:b7:1e:14:48:
95:80:6e:92:a4:82:9c:e9:7d:ba:f7:e1:17:ef:f0:a9:ac:a8:
36:de:a3:49:17:f3:19:a8:49:3a:53:4d:8e:0a:06:a0:3e:14:
64:b5:8c:6d:a2:67:a3:c1:de:e0:cd:3a:8e:a1:21:d9:6c:61:
22:01:67:ff:f9:de:a6:f3:06:6d:b2:8c:81:5f:4e:16:20:a6:
21:c0:0a:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdH54u42aownWn84AX94JEfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MGRkM2QzYzUyZDRjNmZhNTFiN2E4MzM1NzhjZWZiM2Fi
MjY2NDkwHhcNMjUwNjA3MDEwMDQ2WhcNMjUwNjA4MDEwMDQ2WjAzMTEwLwYDVQQD
Eyg1MWQ4NmM5OWM5ZjI4MjA2MjgxODVmNzViMzRiYzU1YWJjNDFiMGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAauWxMuiQ+mbtpvEC0otKmq3MD/
shTH/bz9e1yf6EVoel4jhl0y3BXcD2bkOzgY7wU3dB5ahxDDZc5vaoxwTMrXSXMZ
KuW5u2Wq//JCgGaluWqS5yflUuWFiCENcxoPLNViUM/0W7zEG5bX2UpCzoBxvp/D
3Hmkk0xfHiOCWNwxsRvJiBb4H116ZfZFy9gVlarcymzwDY7lClwaBmzDmT/7ZO9w
yIlc+udsNGCvjqdNxvmcvBgFMSCQ/Pn6fcI4BZ7YAta7eSYi/VdOevzdwbEDnI6j
u99Ia8fgxuG6xmghAcOErJwk+HC1lbGYzQmCwxTIxvO+sBDtZiQ1qhGbUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHYbJnJ8oIGKBhfdbNLxVq8QbDKMB8GA1UdIwQY
MBaAFAQN09PFLUxvpRt6gzV4zvs6smZJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkEzVDA4VXRURy1sRzNxRE5Yak8tenF5WmtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mZmMzNDktZjMyNi00MDk2LWJjYjMt
YzJjMmFjYjkwOGJjLzEvQkEzVDA4VXRURy1sRzNxRE5Yak8tenF5WmtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9mZmMzNDktZjMyNi00MDk2LWJjYjMtYzJjMmFjYjkwOGJj
LzEvQkEzVDA4VXRURy1sRzNxRE5Yak8tenF5WmtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWnfnZAxE
HVYaqKiLpQZqd3BbkBGV4RxbuRkOqR33GmZk4S/1vS9d45/LOumAwbTBps/6lQso
4eQ+OC7M0AbSAcuVBV/fTXV/R1nwVQnJjqx6Ic+P9bsm9vzULKdE3DzyNAH7cB7z
6ZmdaQhQteGHoGhbbzPwRoklLMpDhaTvzXhtLgRsZz5u9WQjepQEUplWiCIrpskx
S5G4c3BI1EUcPEvhhIdMmvZ93l4kF6Hnvf63HhRIlYBukqSCnOl9uvfhF+/wqayo
Nt6jSRfzGahJOlNNjgoGoD4UZLWMbaJno8He4M06jqEh2WxhIgFn//nepvMGbbKM
gV9OFiCmIcAKUg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:26:36 2025 by rpki-client