Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
File: bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft (raw, json)
Hash identifier: fIsxujcMgKb6zxhZpEpikhtRdfk7w2ofNHojS3tEkfw=
Subject key identifier: DE:F7:1A:D4:6B:38:FD:9D:E9:9E:5A:E2:57:C5:1D:01:C4:B2:6E:09
Authority key identifier: 6C:12:AB:70:63:C8:5D:FE:22:FA:7A:99:D9:C6:FC:E5:E6:16:10:31
Certificate issuer: /CN=6c12ab7063c85dfe22fa7a99d9c6fce5e6161031
Certificate serial: 01964D46EAFBA50E939969EC0B4D48D0B379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 09:00:15 +0000
Manifest this update: Sat 19 Apr 2025 09:00:15 +0000
Manifest next update: Sun 20 Apr 2025 09:00:15 +0000
Files and hashes: 1: 4ZrViR6MQ2LLwx-EpgYcmNOkhLU.roa (hash: CcPs0/7vgqCna/xx+mVGMJUsG3faAZo8Ob5SJoRyZWw=)
2: bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl (hash: bhZxbXQ4harxlHVFJY+oSSFqigbIVSYDpUQsy/XULkg=)
3: rUMFzM_6Km-2DqJ2YTtdSrWtUek.roa (hash: abXfjUUyhIhLutP9c/7/Y4Znd/9ps5Twdqn7uTEich0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:46:ea:fb:a5:0e:93:99:69:ec:0b:4d:48:d0:b3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c12ab7063c85dfe22fa7a99d9c6fce5e6161031
Validity
Not Before: Apr 19 09:00:15 2025 GMT
Not After : Apr 20 09:00:15 2025 GMT
Subject: CN=def71ad46b38fd9de99e5ae257c51d01c4b26e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e7:c6:46:c2:84:5a:00:a4:cc:54:a0:ee:ae:
63:b3:ff:f9:d9:49:b7:42:70:d5:71:21:b3:18:10:
db:e3:34:2b:88:e0:29:f1:f1:ec:3b:94:17:f6:52:
db:06:f9:4b:58:75:f7:34:28:9a:7d:ea:cb:64:92:
fb:9f:4a:a2:a4:bd:de:35:4a:69:c7:f7:31:e9:43:
aa:c9:36:8f:cb:1e:bd:97:f6:f0:db:d7:19:d7:00:
ed:f3:52:ab:73:e4:73:68:2a:f9:73:44:59:21:93:
15:2d:2f:f2:2d:d6:13:a3:76:1b:35:51:bf:58:e0:
31:0f:14:50:26:54:8b:6b:03:98:ec:71:3a:e4:2c:
2c:6b:92:48:8d:a6:31:9e:f7:82:79:2e:21:78:24:
37:be:f3:84:5c:46:62:db:b5:6b:40:cf:ab:02:82:
bf:71:52:64:b9:c1:ed:2c:95:58:5f:c7:5b:a5:83:
c0:30:48:93:ee:77:06:f4:d8:3f:40:6b:b6:8e:55:
39:8b:52:30:cf:cd:a3:20:ad:b3:7d:a4:03:af:19:
65:39:13:5a:fd:61:22:88:24:9c:29:99:7f:dc:90:
15:65:48:53:4c:33:65:7b:7f:94:a6:be:47:6c:36:
02:f9:43:92:c7:1f:92:53:63:73:a8:57:c2:57:8c:
52:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F7:1A:D4:6B:38:FD:9D:E9:9E:5A:E2:57:C5:1D:01:C4:B2:6E:09
X509v3 Authority Key Identifier:
keyid:6C:12:AB:70:63:C8:5D:FE:22:FA:7A:99:D9:C6:FC:E5:E6:16:10:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:15:af:ba:4e:7c:03:74:aa:24:0c:f5:81:f9:5e:b1:a8:66:
91:dc:6d:08:4d:01:ad:71:fc:62:96:02:6d:54:ef:d7:dd:aa:
ce:72:2e:c2:04:4d:b5:ff:17:52:38:7d:73:f7:7c:78:fe:cd:
96:37:90:4d:75:c2:49:a7:fe:0f:e6:46:80:f1:cc:14:99:a7:
0e:84:e8:10:b0:e7:e5:11:c6:21:0f:ad:93:23:03:f9:1c:c2:
af:a9:bb:c4:db:e8:3b:57:fa:91:f0:a4:2d:91:96:3b:c0:94:
d1:f3:c6:9c:4a:f9:52:1b:ba:c1:22:e4:b5:0d:8c:f5:06:b0:
ea:c1:31:ab:b9:c1:a5:c0:53:5c:ed:91:03:b1:f4:7b:47:65:
4c:4b:63:5e:e4:92:58:95:99:fd:ad:95:b0:2c:1d:62:49:67:
a5:bd:0e:56:7a:77:0c:ce:69:48:60:84:d7:03:4e:0a:cc:8a:
f4:d7:14:cd:88:56:c4:bc:9b:ea:28:43:64:94:52:0d:93:ad:
1c:2f:65:4a:79:d0:dd:52:c8:05:01:3f:40:33:8a:91:9e:a4:
aa:67:0c:69:75:4f:f5:2e:31:8e:55:a5:cd:40:83:40:02:41:
4c:cb:1c:10:ec:17:c8:3e:09:ee:a9:5b:bb:e1:0b:0f:5e:69:
09:9b:2d:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNRur7pQ6TmWnsC01I0LN5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMTJhYjcwNjNjODVkZmUyMmZhN2E5OWQ5YzZmY2U1ZTYx
NjEwMzEwHhcNMjUwNDE5MDkwMDE1WhcNMjUwNDIwMDkwMDE1WjAzMTEwLwYDVQQD
EyhkZWY3MWFkNDZiMzhmZDlkZTk5ZTVhZTI1N2M1MWQwMWM0YjI2ZTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+fGRsKEWgCkzFSg7q5js//52Um3
QnDVcSGzGBDb4zQriOAp8fHsO5QX9lLbBvlLWHX3NCiaferLZJL7n0qipL3eNUpp
x/cx6UOqyTaPyx69l/bw29cZ1wDt81Krc+RzaCr5c0RZIZMVLS/yLdYTo3YbNVG/
WOAxDxRQJlSLawOY7HE65Cwsa5JIjaYxnveCeS4heCQ3vvOEXEZi27VrQM+rAoK/
cVJkucHtLJVYX8dbpYPAMEiT7ncG9Ng/QGu2jlU5i1Iwz82jIK2zfaQDrxllORNa
/WEiiCScKZl/3JAVZUhTTDNle3+Upr5HbDYC+UOSxx+SU2NzqFfCV4xSEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN73GtRrOP2d6Z5a4lfFHQHEsm4JMB8GA1UdIwQY
MBaAFGwSq3BjyF3+Ivp6mdnG/OXmFhAxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkJLcmNHUElYZjRpLW5xWjJjYjg1ZVlXRURFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xMmU2NzktODU2Yy00OGVhLWEwNjIt
OTU5ZWJiOTA1YjNhLzEvYkJLcmNHUElYZjRpLW5xWjJjYjg1ZVlXRURFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8xMmU2NzktODU2Yy00OGVhLWEwNjItOTU5ZWJiOTA1YjNh
LzEvYkJLcmNHUElYZjRpLW5xWjJjYjg1ZVlXRURFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGxWvuk58
A3SqJAz1gflesahmkdxtCE0BrXH8YpYCbVTv192qznIuwgRNtf8XUjh9c/d8eP7N
ljeQTXXCSaf+D+ZGgPHMFJmnDoToELDn5RHGIQ+tkyMD+RzCr6m7xNvoO1f6kfCk
LZGWO8CU0fPGnEr5Uhu6wSLktQ2M9Qaw6sExq7nBpcBTXO2RA7H0e0dlTEtjXuSS
WJWZ/a2VsCwdYklnpb0OVnp3DM5pSGCE1wNOCsyK9NcUzYhWxLyb6ihDZJRSDZOt
HC9lSnnQ3VLIBQE/QDOKkZ6kqmcMaXVP9S4xjlWlzUCDQAJBTMscEOwXyD4J7qlb
u+ELD15pCZstiw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 14:46:53 2025 by rpki-client