Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
File: Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft (raw, json)
Hash identifier: Vlwh8zxdAoSdZxfE322qP+7J/cLO9MQUgLFJNClLAOU=
Subject key identifier: 53:DF:43:A8:C9:1A:55:25:71:62:34:62:13:59:CD:EB:C2:E8:A5:3B
Authority key identifier: 05:DF:1C:A3:B6:65:F2:4C:BE:10:1C:FC:2F:38:34:4D:A8:B1:76:8D
Certificate issuer: /CN=05df1ca3b665f24cbe101cfc2f38344da8b1768d
Certificate serial: 0196564A30DA7600C0AB1847F0FFB94B8158
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
Manifest number: 14FE
Signing time: Mon 21 Apr 2025 03:00:24 +0000
Manifest this update: Mon 21 Apr 2025 03:00:24 +0000
Manifest next update: Tue 22 Apr 2025 03:00:24 +0000
Files and hashes: 1: Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl (hash: ORAAq5Kg60TRZeybWPQLqKkB1vNqPASweDcP/kcZiPw=)
2: FNPjMOoGw_qr5syHiMbZO5lzjMQ.roa (hash: 5qw3tWosyd4KlYSn8mbGOq7ldklrf0oZDzLLsc6wFlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:30:da:76:00:c0:ab:18:47:f0:ff:b9:4b:81:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05df1ca3b665f24cbe101cfc2f38344da8b1768d
Validity
Not Before: Apr 21 03:00:24 2025 GMT
Not After : Apr 22 03:00:24 2025 GMT
Subject: CN=53df43a8c91a5525716234621359cdebc2e8a53b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1a:2d:ca:76:28:c8:15:b3:55:06:c2:6d:8e:
83:4d:86:62:04:9b:11:9e:3d:a7:e3:74:44:78:8c:
04:1c:fb:24:ed:13:e6:9f:54:a5:3e:61:f4:a7:94:
f8:53:b5:27:fb:a9:91:03:2b:e3:8b:2b:68:0c:0a:
36:a8:9f:3b:c6:80:94:c7:e9:68:8b:3a:f4:41:9e:
5a:03:86:f5:2a:94:b1:8c:d5:57:e0:43:86:1e:66:
64:78:a7:81:78:c0:2e:9a:0e:de:2d:5e:df:d0:05:
59:e7:20:7c:ab:64:12:ac:1d:ed:52:34:cb:66:c6:
ed:20:f4:0a:11:84:06:65:10:80:80:f9:c9:6d:f7:
fe:ea:8c:44:62:ec:35:77:ff:f3:51:58:78:4b:14:
42:8f:97:21:7f:4a:0f:c5:93:1f:1e:45:d2:de:68:
48:06:4c:47:88:ec:e2:ba:6d:98:80:19:79:3f:b0:
67:2f:36:14:74:8e:6a:fe:e9:e3:0e:c1:06:6f:b3:
0b:71:87:bf:a3:b3:4c:7e:69:10:7f:2e:1a:47:44:
30:d0:6e:a7:3b:7f:7a:7a:35:36:9a:37:56:0d:df:
3b:10:2e:0c:5b:4b:08:40:68:25:a3:b1:1f:83:6f:
eb:c8:cd:49:39:a1:ce:24:9f:e1:cc:f7:2d:b7:8a:
ea:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DF:43:A8:C9:1A:55:25:71:62:34:62:13:59:CD:EB:C2:E8:A5:3B
X509v3 Authority Key Identifier:
keyid:05:DF:1C:A3:B6:65:F2:4C:BE:10:1C:FC:2F:38:34:4D:A8:B1:76:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:26:eb:f1:1a:c3:b8:9a:7f:68:00:5b:36:b6:56:25:35:8d:
57:8a:01:4f:be:b7:dc:16:e4:4d:24:3a:34:f2:08:13:98:fa:
33:46:a1:8e:53:bf:87:32:13:35:41:65:ef:fd:da:6f:5c:e1:
cb:93:07:b2:7f:97:58:ac:43:23:4f:d6:6b:56:b6:79:d6:c1:
53:9e:a9:57:98:15:78:14:68:83:d1:b9:7b:a6:06:3d:f7:95:
17:f6:59:da:81:da:e2:c9:c2:ba:0b:c5:f7:ac:1e:92:e1:28:
34:64:ae:f2:cb:9d:2c:3c:86:cf:c9:83:37:1d:fc:d3:47:94:
3c:c6:ee:76:c2:bc:10:e7:8f:5a:e7:30:ef:e7:b4:90:4e:14:
d7:37:3b:4a:94:fb:50:c2:96:fd:44:11:65:00:28:b6:25:8e:
ac:28:4c:99:82:ba:b9:35:86:61:de:61:f2:80:3a:15:01:93:
1e:17:34:21:3f:61:7c:2d:71:84:10:31:d6:6e:64:70:d5:ac:
ad:97:9e:c3:0d:4b:ee:ab:a8:ab:05:70:d7:a1:cf:64:0c:7b:
41:97:41:42:bd:ef:50:5c:f9:d4:8c:31:10:a7:3d:1d:18:67:
12:87:0d:3e:8b:6d:96:a2:11:40:97:54:7a:17:85:31:e7:e4:
f4:62:3a:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWSjDadgDAqxhH8P+5S4FYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZGYxY2EzYjY2NWYyNGNiZTEwMWNmYzJmMzgzNDRkYThi
MTc2OGQwHhcNMjUwNDIxMDMwMDI0WhcNMjUwNDIyMDMwMDI0WjAzMTEwLwYDVQQD
Eyg1M2RmNDNhOGM5MWE1NTI1NzE2MjM0NjIxMzU5Y2RlYmMyZThhNTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRotynYoyBWzVQbCbY6DTYZiBJsR
nj2n43REeIwEHPsk7RPmn1SlPmH0p5T4U7Un+6mRAyvjiytoDAo2qJ87xoCUx+lo
izr0QZ5aA4b1KpSxjNVX4EOGHmZkeKeBeMAumg7eLV7f0AVZ5yB8q2QSrB3tUjTL
ZsbtIPQKEYQGZRCAgPnJbff+6oxEYuw1d//zUVh4SxRCj5chf0oPxZMfHkXS3mhI
BkxHiOzium2YgBl5P7BnLzYUdI5q/unjDsEGb7MLcYe/o7NMfmkQfy4aR0Qw0G6n
O396ejU2mjdWDd87EC4MW0sIQGglo7Efg2/ryM1JOaHOJJ/hzPctt4rqYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFPfQ6jJGlUlcWI0YhNZzevC6KU7MB8GA1UdIwQY
MBaAFAXfHKO2ZfJMvhAc/C84NE2osXaNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmQ4Y283Wmw4a3ktRUJ6OEx6ZzBUYWl4ZG8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84OGQzYjMtODI1Ny00N2FhLWEyMjct
ZDAyYWFmYjgzMmM0LzEvQmQ4Y283Wmw4a3ktRUJ6OEx6ZzBUYWl4ZG8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi84OGQzYjMtODI1Ny00N2FhLWEyMjctZDAyYWFmYjgzMmM0
LzEvQmQ4Y283Wmw4a3ktRUJ6OEx6ZzBUYWl4ZG8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFCbr8RrD
uJp/aABbNrZWJTWNV4oBT7633BbkTSQ6NPIIE5j6M0ahjlO/hzITNUFl7/3ab1zh
y5MHsn+XWKxDI0/Wa1a2edbBU56pV5gVeBRog9G5e6YGPfeVF/ZZ2oHa4snCugvF
96wekuEoNGSu8sudLDyGz8mDNx3800eUPMbudsK8EOePWucw7+e0kE4U1zc7SpT7
UMKW/UQRZQAotiWOrChMmYK6uTWGYd5h8oA6FQGTHhc0IT9hfC1xhBAx1m5kcNWs
rZeeww1L7quoqwVw16HPZAx7QZdBQr3vUFz51IwxEKc9HRhnEocNPottlqIRQJdU
eheFMefk9GI6LA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:36:34 2025 by rpki-client