Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft
File: bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft (raw, json)
Hash identifier: DjYA1s7RVuignsD/mykJwgxN3ElRZLIVmjB9cyX4f30=
Subject key identifier: A5:5F:BD:79:0E:AA:51:67:4F:2D:33:9E:6B:CE:8B:1C:35:8F:60:2F
Authority key identifier: 6D:DD:42:FF:DB:7E:82:77:02:3F:10:19:B5:54:FE:B1:9F:5C:3F:23
Certificate issuer: /CN=6ddd42ffdb7e8277023f1019b554feb19f5c3f23
Certificate serial: 01965725DE8267F9D0A772116EABD3684C5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bd1C_9t-gncCPxAZtVT-sZ9cPyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft
Manifest number: 0376
Signing time: Mon 21 Apr 2025 07:00:21 +0000
Manifest this update: Mon 21 Apr 2025 07:00:21 +0000
Manifest next update: Tue 22 Apr 2025 07:00:21 +0000
Files and hashes: 1: KNlHZhzvj3c5evx_WYZ3PPymDMg.roa (hash: VIooQbblCXzCvlc89EdzqvODc1G/is8eypm36M8wtX0=)
2: bd1C_9t-gncCPxAZtVT-sZ9cPyM.crl (hash: CGXWprjk3qdgUBuQkUwfTBfgPyeB/yRhvPteTtgdAgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bd1C_9t-gncCPxAZtVT-sZ9cPyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:25:de:82:67:f9:d0:a7:72:11:6e:ab:d3:68:4c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddd42ffdb7e8277023f1019b554feb19f5c3f23
Validity
Not Before: Apr 21 07:00:21 2025 GMT
Not After : Apr 22 07:00:21 2025 GMT
Subject: CN=a55fbd790eaa51674f2d339e6bce8b1c358f602f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ad:76:9b:5e:04:26:cb:8f:7b:68:d8:3b:14:
7a:87:79:63:a6:d8:32:f3:cc:e6:65:51:d2:96:4c:
7c:11:4b:8e:38:2f:bd:37:ef:7d:93:53:0c:78:d4:
fd:e8:b9:77:b9:b4:c3:70:7a:0c:21:91:4e:e0:66:
80:2c:12:fd:76:7d:68:fa:93:01:64:01:ff:d5:38:
1f:ea:5a:2a:54:57:75:16:13:f9:a8:41:e1:49:04:
e9:d2:f3:00:07:1a:c6:c3:e1:09:7e:99:53:8d:eb:
8c:cb:55:f2:d8:d5:f0:a0:6d:2b:7c:64:17:5c:3c:
cf:98:04:b3:bb:12:ce:13:23:11:84:7d:f3:1e:47:
5f:15:4c:fb:ab:51:84:88:85:a9:5c:1d:ea:aa:cd:
7f:58:f7:2f:70:58:41:3a:7a:45:fc:72:17:88:de:
f4:75:d1:dc:f1:f3:a9:17:5c:d4:f0:95:38:15:ec:
6e:1c:ca:b8:8b:5a:33:f4:e6:d8:d0:cd:2e:7a:16:
2c:ec:b9:db:38:ea:8b:f7:1b:19:7c:1f:60:dd:e2:
51:31:ab:6e:1e:03:a0:5f:25:cd:9b:0f:fe:d6:26:
5c:01:99:fa:32:39:aa:e5:83:03:7a:35:7c:71:7d:
32:18:33:d9:40:61:8a:f6:fe:9f:2d:63:7f:c7:d5:
95:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5F:BD:79:0E:AA:51:67:4F:2D:33:9E:6B:CE:8B:1C:35:8F:60:2F
X509v3 Authority Key Identifier:
keyid:6D:DD:42:FF:DB:7E:82:77:02:3F:10:19:B5:54:FE:B1:9F:5C:3F:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd1C_9t-gncCPxAZtVT-sZ9cPyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:06:1f:85:ec:6a:21:5c:8c:f5:48:36:b9:a9:ac:d3:14:e8:
23:b7:94:85:95:a3:45:46:f1:12:bd:f2:3c:8d:78:79:1e:31:
23:0e:38:1d:cf:e4:6e:75:78:17:c0:ff:7f:16:72:21:2a:54:
f2:79:7d:f6:54:80:e0:c1:81:7f:b2:17:06:d1:02:bf:82:0f:
ee:bb:ad:26:1a:6b:67:62:9f:55:16:7a:34:6e:83:03:50:96:
d1:3c:ac:cb:84:8e:72:89:e4:35:a1:be:36:81:ce:c9:84:6c:
a6:bc:2c:55:92:34:6c:d0:6f:3d:be:f3:93:07:07:4f:da:6b:
d0:c5:e3:81:87:06:b7:0b:db:a6:d1:93:4e:c2:cd:1c:64:e0:
d3:f5:72:5b:81:e7:76:66:b5:8d:59:4a:de:49:5d:7a:db:87:
c5:1e:13:26:1d:1a:b9:13:14:95:c3:e0:ef:5f:8d:13:60:33:
1c:0e:18:0a:e3:81:20:80:12:c5:5f:b2:c6:b6:14:35:3f:e2:
9f:d8:53:de:d2:b2:7b:f6:9a:0a:43:17:9d:c8:f1:ef:af:d2:
e3:19:4f:e6:31:b6:30:ac:16:e1:d0:f8:74:fb:61:6e:34:00:
08:9d:71:5e:6f:2e:53:1c:b8:99:40:bf:8f:06:71:3c:e0:1d:
d0:d1:9c:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXJd6CZ/nQp3IRbqvTaExfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZGQ0MmZmZGI3ZTgyNzcwMjNmMTAxOWI1NTRmZWIxOWY1
YzNmMjMwHhcNMjUwNDIxMDcwMDIxWhcNMjUwNDIyMDcwMDIxWjAzMTEwLwYDVQQD
EyhhNTVmYmQ3OTBlYWE1MTY3NGYyZDMzOWU2YmNlOGIxYzM1OGY2MDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3q12m14EJsuPe2jYOxR6h3ljptgy
88zmZVHSlkx8EUuOOC+9N+99k1MMeNT96Ll3ubTDcHoMIZFO4GaALBL9dn1o+pMB
ZAH/1Tgf6loqVFd1FhP5qEHhSQTp0vMABxrGw+EJfplTjeuMy1Xy2NXwoG0rfGQX
XDzPmASzuxLOEyMRhH3zHkdfFUz7q1GEiIWpXB3qqs1/WPcvcFhBOnpF/HIXiN70
ddHc8fOpF1zU8JU4FexuHMq4i1oz9ObY0M0uehYs7LnbOOqL9xsZfB9g3eJRMatu
HgOgXyXNmw/+1iZcAZn6Mjmq5YMDejV8cX0yGDPZQGGK9v6fLWN/x9WVkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKVfvXkOqlFnTy0znmvOixw1j2AvMB8GA1UdIwQY
MBaAFG3dQv/bfoJ3Aj8QGbVU/rGfXD8jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmQxQ185dC1nbmNDUHhBWnRWVC1zWjljUHlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9mMWMzNzUtNDFkYS00ZWE2LWFjZDEt
MDliYzkyZDRlZDk2LzEvYmQxQ185dC1nbmNDUHhBWnRWVC1zWjljUHlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9mMWMzNzUtNDFkYS00ZWE2LWFjZDEtMDliYzkyZDRlZDk2
LzEvYmQxQ185dC1nbmNDUHhBWnRWVC1zWjljUHlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQYfhexq
IVyM9Ug2uams0xToI7eUhZWjRUbxEr3yPI14eR4xIw44Hc/kbnV4F8D/fxZyISpU
8nl99lSA4MGBf7IXBtECv4IP7rutJhprZ2KfVRZ6NG6DA1CW0Tysy4SOconkNaG+
NoHOyYRsprwsVZI0bNBvPb7zkwcHT9pr0MXjgYcGtwvbptGTTsLNHGTg0/VyW4Hn
dma1jVlK3kldetuHxR4TJh0auRMUlcPg71+NE2AzHA4YCuOBIIASxV+yxrYUNT/i
n9hT3tKye/aaCkMXncjx76/S4xlP5jG2MKwW4dD4dPthbjQACJ1xXm8uUxy4mUC/
jwZxPOAd0NGcAw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:22 2025 by rpki-client