
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.mft
File: bFMRpXzPy1E1Jh_zm9GaEV7z588.mft (raw, json)
Hash identifier: reEIQcxKqrTwfREF9Zcg8u7J8gc0+KCx0EXlvaRpzL8=
Subject key identifier: 5C:4B:02:16:95:FE:42:24:6D:0E:E3:7A:97:81:93:77:09:B1:40:90
Authority key identifier: 6C:53:11:A5:7C:CF:CB:51:35:26:1F:F3:9B:D1:9A:11:5E:F3:E7:CF
Certificate issuer: /CN=6c5311a57ccfcb5135261ff39bd19a115ef3e7cf
Certificate serial: 01964A462EC57968C590F104A0399651B4B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFMRpXzPy1E1Jh_zm9GaEV7z588.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.mft
Manifest number: 14FA
Signing time: Fri 18 Apr 2025 19:00:35 +0000
Manifest this update: Fri 18 Apr 2025 19:00:35 +0000
Manifest next update: Sat 19 Apr 2025 19:00:35 +0000
Files and hashes: 1: YJycfGdeJ164QrjQ89Pquxal_pc.roa (hash: fDEXe9y2Vppryd4ojiqVG2aN2es1Vh/q/2xftzkXWbQ=)
2: bFMRpXzPy1E1Jh_zm9GaEV7z588.crl (hash: Xx7PWJJnPF0uVIp0+lczQdgtES7bS/noDYWhSgSK8Qw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFMRpXzPy1E1Jh_zm9GaEV7z588.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:46:2e:c5:79:68:c5:90:f1:04:a0:39:96:51:b4:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5311a57ccfcb5135261ff39bd19a115ef3e7cf
Validity
Not Before: Apr 18 19:00:35 2025 GMT
Not After : Apr 19 19:00:35 2025 GMT
Subject: CN=5c4b021695fe42246d0ee37a9781937709b14090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f6:64:7f:c1:82:78:de:c1:e3:b6:eb:0f:e7:
36:4e:ad:9e:40:25:0d:a9:c1:51:2e:de:6c:d6:0d:
3d:2b:bf:7b:b5:71:c8:d9:3d:55:51:74:c4:56:40:
a7:53:8d:39:90:f7:07:a4:5e:e1:fc:f3:5f:d8:08:
8b:0c:17:d5:71:d9:a7:b7:bc:41:9d:1b:91:6b:43:
9a:5f:e2:2c:85:93:97:1e:60:5d:3c:47:ca:63:22:
e5:0a:a9:57:01:13:61:c6:1f:c6:60:da:91:f7:1f:
59:f8:80:e0:c9:4f:0b:8a:b1:20:31:b9:38:10:2a:
ab:7b:5c:91:2e:76:1b:42:bd:d2:d4:bc:79:72:ab:
52:0a:1d:0f:63:50:38:a5:39:11:12:78:ec:79:50:
04:1d:b9:6d:fb:a7:3f:02:cc:f8:fb:bf:a2:c3:b5:
11:df:4a:13:8a:82:29:dd:98:50:58:c0:8e:e4:37:
58:31:ba:76:eb:27:b5:42:0e:e9:58:6b:ef:0d:23:
94:92:0e:fa:d9:c1:c7:60:63:af:31:52:6d:8c:19:
21:4b:a5:17:60:53:29:50:6c:66:20:23:ef:68:a3:
c4:ab:5c:ae:d1:07:c1:a8:e9:69:50:83:b4:15:ed:
84:4e:ec:03:36:a3:6e:d5:5c:15:c0:c5:b9:4e:d9:
6c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4B:02:16:95:FE:42:24:6D:0E:E3:7A:97:81:93:77:09:B1:40:90
X509v3 Authority Key Identifier:
keyid:6C:53:11:A5:7C:CF:CB:51:35:26:1F:F3:9B:D1:9A:11:5E:F3:E7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFMRpXzPy1E1Jh_zm9GaEV7z588.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:0b:b3:ff:41:bb:83:2e:24:e8:37:23:75:c2:67:92:09:44:
2d:60:ab:77:af:d6:45:9a:2b:a7:9b:d0:c2:6e:7d:87:45:c5:
e7:a3:28:ff:f1:be:06:d5:16:73:8d:a2:95:fd:d6:fc:09:89:
6c:09:94:73:95:37:7b:97:79:7e:67:9f:23:d6:3e:2c:c9:74:
5f:91:c7:b4:50:90:d3:6c:55:9e:d0:cd:de:58:95:44:ee:79:
eb:15:d3:05:db:19:35:60:24:dc:99:0d:c1:9c:02:40:be:f8:
75:82:83:61:f2:45:73:a8:c3:7d:06:0a:6d:91:3d:39:0a:e5:
24:ed:ad:f8:43:b2:69:d2:83:c7:26:8b:35:fe:b0:b4:e1:05:
ef:8f:a2:4f:1d:c2:77:2c:f3:0a:68:6e:34:6b:52:9b:13:52:
85:a5:33:bd:cb:67:77:7c:0d:2d:cd:b4:9d:d1:b8:21:9d:73:
54:46:89:73:b3:59:e1:af:9a:4b:05:f5:d1:6e:fd:8b:dd:67:
04:36:f2:77:0f:86:1f:86:ba:7e:d8:dc:4b:09:e6:b8:83:9c:
ac:ea:ec:64:da:01:4e:3d:09:41:f3:c5:15:af:a1:d8:92:fd:
a4:61:69:5f:13:57:bc:92:84:2d:5e:37:26:78:72:89:da:fc:
82:e7:32:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZKRi7FeWjFkPEEoDmWUbS2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNTMxMWE1N2NjZmNiNTEzNTI2MWZmMzliZDE5YTExNWVm
M2U3Y2YwHhcNMjUwNDE4MTkwMDM1WhcNMjUwNDE5MTkwMDM1WjAzMTEwLwYDVQQD
Eyg1YzRiMDIxNjk1ZmU0MjI0NmQwZWUzN2E5NzgxOTM3NzA5YjE0MDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/Zkf8GCeN7B47brD+c2Tq2eQCUN
qcFRLt5s1g09K797tXHI2T1VUXTEVkCnU405kPcHpF7h/PNf2AiLDBfVcdmnt7xB
nRuRa0OaX+IshZOXHmBdPEfKYyLlCqlXARNhxh/GYNqR9x9Z+IDgyU8LirEgMbk4
ECqre1yRLnYbQr3S1Lx5cqtSCh0PY1A4pTkREnjseVAEHblt+6c/Asz4+7+iw7UR
30oTioIp3ZhQWMCO5DdYMbp26ye1Qg7pWGvvDSOUkg762cHHYGOvMVJtjBkhS6UX
YFMpUGxmICPvaKPEq1yu0QfBqOlpUIO0Fe2ETuwDNqNu1VwVwMW5TtlsVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxLAhaV/kIkbQ7jepeBk3cJsUCQMB8GA1UdIwQY
MBaAFGxTEaV8z8tRNSYf85vRmhFe8+fPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkZNUnBYelB5MUUxSmhfem05R2FFVjd6NTg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9kOTgzY2QtM2Y4ZS00ZDZlLWEzOGMt
NGQ4ZDYyYjE4ZTg5LzEvYkZNUnBYelB5MUUxSmhfem05R2FFVjd6NTg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9kOTgzY2QtM2Y4ZS00ZDZlLWEzOGMtNGQ4ZDYyYjE4ZTg5
LzEvYkZNUnBYelB5MUUxSmhfem05R2FFVjd6NTg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfAuz/0G7
gy4k6DcjdcJnkglELWCrd6/WRZorp5vQwm59h0XF56Mo//G+BtUWc42ilf3W/AmJ
bAmUc5U3e5d5fmefI9Y+LMl0X5HHtFCQ02xVntDN3liVRO556xXTBdsZNWAk3JkN
wZwCQL74dYKDYfJFc6jDfQYKbZE9OQrlJO2t+EOyadKDxyaLNf6wtOEF74+iTx3C
dyzzCmhuNGtSmxNShaUzvctnd3wNLc20ndG4IZ1zVEaJc7NZ4a+aSwX10W79i91n
BDbydw+GH4a6ftjcSwnmuIOcrOrsZNoBTj0JQfPFFa+h2JL9pGFpXxNXvJKELV43
Jnhyidr8gucyZQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 05:03:37 2025 by rpki-client