Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e5dfe6-18bb-48a5-8622-59207d8420d0/1/bzycduKvxzzO28ngKS_7mfZec1I.mft
File: bzycduKvxzzO28ngKS_7mfZec1I.mft (raw, json)
Hash identifier: VfaqWapr0wkNVwdEM+4ZApMgeqn+nZnfyz93bJyqyP0=
Subject key identifier: 51:59:A3:00:BB:C4:C4:D1:E4:5F:DF:1F:E2:38:FD:CF:ED:B7:25:BF
Authority key identifier: 6F:3C:9C:76:E2:AF:C7:3C:CE:DB:C9:E0:29:2F:FB:99:F6:5E:73:52
Certificate issuer: /CN=6f3c9c76e2afc73ccedbc9e0292ffb99f65e7352
Certificate serial: 0194BABB51682788A18B5C5517E1BEE1550F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzycduKvxzzO28ngKS_7mfZec1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e5dfe6-18bb-48a5-8622-59207d8420d0/1/bzycduKvxzzO28ngKS_7mfZec1I.mft
Manifest number: 0B86
Signing time: Fri 31 Jan 2025 05:00:25 +0000
Manifest this update: Fri 31 Jan 2025 05:00:25 +0000
Manifest next update: Sat 01 Feb 2025 05:00:25 +0000
Files and hashes: 1: 0uWLA5mOdiy3OLJeZ1Ov94IOtqs.roa (hash: buxeJp/x66aw9yBb+1kLLqoKDBL9w3efxSEQZ/YnH08=)
2: bzycduKvxzzO28ngKS_7mfZec1I.crl (hash: SAdl5FatXumErnoiVynwshYuSbz5anx1n/rKG5NvlGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e5dfe6-18bb-48a5-8622-59207d8420d0/1/bzycduKvxzzO28ngKS_7mfZec1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e5dfe6-18bb-48a5-8622-59207d8420d0/1/bzycduKvxzzO28ngKS_7mfZec1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzycduKvxzzO28ngKS_7mfZec1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:51:68:27:88:a1:8b:5c:55:17:e1:be:e1:55:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3c9c76e2afc73ccedbc9e0292ffb99f65e7352
Validity
Not Before: Jan 31 05:00:25 2025 GMT
Not After : Feb 1 05:00:25 2025 GMT
Subject: CN=5159a300bbc4c4d1e45fdf1fe238fdcfedb725bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7e:35:48:ce:95:99:01:bb:80:b5:43:7f:04:
eb:fa:d8:17:ce:93:30:c7:5c:46:b3:34:25:2a:1d:
e5:c7:4b:77:d1:8e:f3:75:6d:c9:af:4a:1a:51:8c:
14:7a:fa:f6:a5:1f:2a:59:94:6c:2e:19:02:19:8c:
16:7a:5a:11:c3:0e:c0:14:61:ea:6b:df:c2:f3:90:
c8:2f:63:ec:28:81:2c:10:2c:ce:9b:20:6b:9c:75:
e3:6d:d9:d5:f4:64:8a:c6:72:55:07:48:64:12:77:
a2:55:41:71:c4:32:06:7a:0e:aa:c3:33:ee:4b:e0:
47:d6:23:37:76:00:41:9f:18:12:d1:20:b6:2e:87:
b7:99:86:ce:9b:a5:7b:49:75:8a:df:49:db:57:f2:
02:a5:9e:a5:3f:3a:d8:e9:80:0c:a4:d9:7b:06:1a:
4d:8d:ce:e8:a4:0c:a2:68:c7:43:e5:ec:56:a0:d0:
0c:57:2c:95:fa:62:fb:93:43:b1:59:f6:7c:c5:71:
7e:e5:a2:09:8f:17:f7:f8:3a:97:2d:b3:93:15:ba:
42:39:9e:dc:f5:30:50:d4:29:2a:35:d9:00:e4:0d:
65:27:54:6c:6a:14:9b:1f:f3:04:80:97:7d:5c:af:
73:1d:44:fd:3f:ee:1e:64:16:4f:7b:91:f1:07:13:
42:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:59:A3:00:BB:C4:C4:D1:E4:5F:DF:1F:E2:38:FD:CF:ED:B7:25:BF
X509v3 Authority Key Identifier:
keyid:6F:3C:9C:76:E2:AF:C7:3C:CE:DB:C9:E0:29:2F:FB:99:F6:5E:73:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzycduKvxzzO28ngKS_7mfZec1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e5dfe6-18bb-48a5-8622-59207d8420d0/1/bzycduKvxzzO28ngKS_7mfZec1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e5dfe6-18bb-48a5-8622-59207d8420d0/1/bzycduKvxzzO28ngKS_7mfZec1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:61:d9:8e:ee:8c:b9:7b:fe:58:89:61:c7:d0:fa:87:4a:ba:
80:7d:d9:f0:67:53:fd:c0:ef:5a:85:ef:68:33:bb:34:5d:70:
ee:e2:d3:96:af:33:2c:61:51:66:a3:00:dd:67:11:d6:9f:74:
2f:99:2b:3d:e3:dd:64:43:dd:45:1d:fa:59:85:18:60:1b:78:
ef:a8:ea:52:a4:8f:81:81:c8:2a:a6:78:bd:ac:28:4c:9a:ed:
40:00:fe:c8:72:51:ce:96:e8:2e:b2:39:8f:1f:00:99:cf:61:
f0:aa:fa:06:6f:d2:89:c5:06:71:2d:74:eb:f8:a8:8d:9c:b5:
46:21:23:20:34:07:71:7d:da:e2:01:28:49:85:df:09:c1:30:
ba:09:34:71:3b:c5:13:db:11:f9:60:c1:ca:cf:47:26:53:bd:
83:bc:02:e8:43:ae:12:c7:a1:65:c6:7c:5a:f4:19:2c:54:1d:
7f:c7:f4:a4:a9:a0:e3:a7:35:76:75:ad:07:8e:3b:85:51:3d:
a2:b6:84:ba:a0:75:af:2f:fb:ee:ce:17:40:95:02:35:eb:48:
2d:ea:64:e4:d6:1e:e0:e9:28:8b:dd:50:1c:11:84:ca:96:8d:
7f:7c:de:f4:37:3d:92:2a:b0:c7:a2:e5:b4:4a:ee:73:47:32:
eb:02:a5:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u1FoJ4ihi1xVF+G+4VUPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmM2M5Yzc2ZTJhZmM3M2NjZWRiYzllMDI5MmZmYjk5ZjY1
ZTczNTIwHhcNMjUwMTMxMDUwMDI1WhcNMjUwMjAxMDUwMDI1WjAzMTEwLwYDVQQD
Eyg1MTU5YTMwMGJiYzRjNGQxZTQ1ZmRmMWZlMjM4ZmRjZmVkYjcyNWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq341SM6VmQG7gLVDfwTr+tgXzpMw
x1xGszQlKh3lx0t30Y7zdW3Jr0oaUYwUevr2pR8qWZRsLhkCGYwWeloRww7AFGHq
a9/C85DIL2PsKIEsECzOmyBrnHXjbdnV9GSKxnJVB0hkEneiVUFxxDIGeg6qwzPu
S+BH1iM3dgBBnxgS0SC2Loe3mYbOm6V7SXWK30nbV/ICpZ6lPzrY6YAMpNl7BhpN
jc7opAyiaMdD5exWoNAMVyyV+mL7k0OxWfZ8xXF+5aIJjxf3+DqXLbOTFbpCOZ7c
9TBQ1CkqNdkA5A1lJ1RsahSbH/MEgJd9XK9zHUT9P+4eZBZPe5HxBxNCcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFFZowC7xMTR5F/fH+I4/c/ttyW/MB8GA1UdIwQY
MBaAFG88nHbir8c8ztvJ4Ckv+5n2XnNSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnp5Y2R1S3Z4enpPMjhuZ0tTXzdtZlplYzFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lNWRmZTYtMThiYi00OGE1LTg2MjIt
NTkyMDdkODQyMGQwLzEvYnp5Y2R1S3Z4enpPMjhuZ0tTXzdtZlplYzFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9lNWRmZTYtMThiYi00OGE1LTg2MjItNTkyMDdkODQyMGQw
LzEvYnp5Y2R1S3Z4enpPMjhuZ0tTXzdtZlplYzFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGHZju6M
uXv+WIlhx9D6h0q6gH3Z8GdT/cDvWoXvaDO7NF1w7uLTlq8zLGFRZqMA3WcR1p90
L5krPePdZEPdRR36WYUYYBt476jqUqSPgYHIKqZ4vawoTJrtQAD+yHJRzpboLrI5
jx8Amc9h8Kr6Bm/SicUGcS106/iojZy1RiEjIDQHcX3a4gEoSYXfCcEwugk0cTvF
E9sR+WDBys9HJlO9g7wC6EOuEsehZcZ8WvQZLFQdf8f0pKmg46c1dnWtB447hVE9
oraEuqB1ry/77s4XQJUCNetILepk5NYe4Okoi91QHBGEypaNf3ze9Dc9kiqwx6Ll
tEruc0cy6wKl7w==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:50 2025 by rpki-client on console-fra.rpki-client.org