Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
File: bCynx_AN7ET0jEnyKldylIaaqbo.mft (raw, json)
Hash identifier: 8gpJNdO7aU1h3J8euA06CuuHG4WFVLjwYbh0WP49YBI=
Subject key identifier: EE:37:BA:69:55:F3:A5:36:D5:0F:0D:C9:9C:5E:10:11:B4:5C:3A:F0
Authority key identifier: 6C:2C:A7:C7:F0:0D:EC:44:F4:8C:49:F2:2A:57:72:94:86:9A:A9:BA
Certificate issuer: /CN=6c2ca7c7f00dec44f48c49f22a577294869aa9ba
Certificate serial: 019655DCCFB9A2139BA9A790CC2A733E1968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
Manifest number: 14FD
Signing time: Mon 21 Apr 2025 01:00:56 +0000
Manifest this update: Mon 21 Apr 2025 01:00:56 +0000
Manifest next update: Tue 22 Apr 2025 01:00:56 +0000
Files and hashes: 1: CFjxJzCmd6HUFa7VuE6yI0I0AMQ.roa (hash: MIyflourwhBuhTA+A0FwkrenrfoY9JbHcdU1eop0jPQ=)
2: bCynx_AN7ET0jEnyKldylIaaqbo.crl (hash: lWBffcbK/0IdHKf5dUyKBsp6PytGHuyOb0EtaQBlQWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:cf:b9:a2:13:9b:a9:a7:90:cc:2a:73:3e:19:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c2ca7c7f00dec44f48c49f22a577294869aa9ba
Validity
Not Before: Apr 21 01:00:56 2025 GMT
Not After : Apr 22 01:00:56 2025 GMT
Subject: CN=ee37ba6955f3a536d50f0dc99c5e1011b45c3af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c0:6e:cf:26:61:a7:8b:de:19:17:0a:ca:ad:
9c:1e:12:22:5a:e5:5b:a2:83:32:a5:6d:12:6a:a2:
e5:19:a9:0a:ce:d5:21:4d:36:09:d8:ce:e1:e0:b3:
4d:e7:44:da:36:a3:56:e5:b3:bf:06:1f:ff:c1:1f:
fd:c9:ce:11:64:45:58:5b:91:b8:8a:e6:23:d7:55:
b9:f6:7f:71:fa:bb:91:1f:b1:59:59:6f:c0:21:fc:
61:b1:f5:38:4d:ac:b3:21:9c:91:db:91:27:1c:15:
94:c0:a0:eb:30:49:89:65:c4:23:e3:1a:eb:46:90:
0d:41:64:1c:53:4e:f3:ce:31:84:4d:86:3f:3c:8a:
83:ba:05:05:d0:d9:00:78:67:4d:de:41:8e:ac:91:
76:67:b5:76:73:a6:5a:9a:1e:31:28:40:ae:b1:9c:
6f:ef:10:fd:a1:2e:82:1e:4e:03:cc:6b:4b:e9:ad:
49:76:da:95:d5:0a:42:8d:4f:17:67:63:fc:f4:1c:
f2:db:ad:21:49:53:8e:b7:83:24:c1:ad:01:f0:47:
cc:52:80:d5:03:3b:f9:2b:b9:b4:a1:7e:61:49:36:
87:b0:ed:6e:66:f9:72:84:cb:fb:ed:62:70:e3:8e:
08:dd:2d:de:d3:2b:9d:ff:03:7a:b8:d1:0b:4f:a5:
27:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:37:BA:69:55:F3:A5:36:D5:0F:0D:C9:9C:5E:10:11:B4:5C:3A:F0
X509v3 Authority Key Identifier:
keyid:6C:2C:A7:C7:F0:0D:EC:44:F4:8C:49:F2:2A:57:72:94:86:9A:A9:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:92:2c:18:1e:72:55:fb:37:28:2e:68:c4:cb:3a:6f:f0:b1:
03:1b:33:49:92:0b:43:81:62:08:57:aa:ee:e1:62:6b:10:0d:
42:86:97:ac:2a:98:3b:9d:1c:89:01:2f:71:6c:a5:60:47:9b:
80:9b:e8:b1:83:3f:75:92:19:ab:15:fd:37:01:8a:65:10:de:
b2:ea:d3:15:de:f4:1e:e4:3f:b0:80:68:0c:a1:50:8f:d7:cb:
79:04:78:db:97:c7:d1:55:a4:33:6a:74:78:f0:fb:fc:24:57:
6a:63:80:b8:90:b1:b7:29:51:95:29:98:45:f2:13:f7:97:dc:
16:25:4e:e3:eb:0c:d3:a6:9d:16:fa:61:76:02:b0:0b:43:3a:
cf:39:a1:91:a0:04:32:45:e7:71:76:6f:ea:e9:19:cc:f4:fe:
c0:2f:39:2b:49:62:d2:6d:6d:a9:81:87:ab:9c:f0:62:1c:76:
74:18:57:0f:3c:48:5b:60:b9:82:77:eb:8c:70:4c:47:71:87:
5e:75:67:0f:3f:af:50:b5:3a:a5:d5:58:ee:64:1d:fc:d9:a1:
63:cc:2a:f7:3d:fc:c9:31:4a:d3:3b:ce:48:33:bc:c0:95:0a:
ed:e0:9c:b4:53:f2:1e:38:03:58:e4:06:e3:df:c2:ee:eb:9c:
0f:ad:ed:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZV3M+5ohObqaeQzCpzPhloMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMmNhN2M3ZjAwZGVjNDRmNDhjNDlmMjJhNTc3Mjk0ODY5
YWE5YmEwHhcNMjUwNDIxMDEwMDU2WhcNMjUwNDIyMDEwMDU2WjAzMTEwLwYDVQQD
EyhlZTM3YmE2OTU1ZjNhNTM2ZDUwZjBkYzk5YzVlMTAxMWI0NWMzYWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28BuzyZhp4veGRcKyq2cHhIiWuVb
ooMypW0SaqLlGakKztUhTTYJ2M7h4LNN50TaNqNW5bO/Bh//wR/9yc4RZEVYW5G4
iuYj11W59n9x+ruRH7FZWW/AIfxhsfU4TayzIZyR25EnHBWUwKDrMEmJZcQj4xrr
RpANQWQcU07zzjGETYY/PIqDugUF0NkAeGdN3kGOrJF2Z7V2c6Zamh4xKECusZxv
7xD9oS6CHk4DzGtL6a1JdtqV1QpCjU8XZ2P89Bzy260hSVOOt4Mkwa0B8EfMUoDV
Azv5K7m0oX5hSTaHsO1uZvlyhMv77WJw444I3S3e0yud/wN6uNELT6UnOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO43umlV86U21Q8NyZxeEBG0XDrwMB8GA1UdIwQY
MBaAFGwsp8fwDexE9IxJ8ipXcpSGmqm6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkN5bnhfQU43RVQwakVueUtsZHlsSWFhcWJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC85YTU1OTktZDM4OS00ODM2LTgwMzMt
NDNkYzJiNWVlYjViLzEvYkN5bnhfQU43RVQwakVueUtsZHlsSWFhcWJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC85YTU1OTktZDM4OS00ODM2LTgwMzMtNDNkYzJiNWVlYjVi
LzEvYkN5bnhfQU43RVQwakVueUtsZHlsSWFhcWJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC5IsGB5y
Vfs3KC5oxMs6b/CxAxszSZILQ4FiCFeq7uFiaxANQoaXrCqYO50ciQEvcWylYEeb
gJvosYM/dZIZqxX9NwGKZRDesurTFd70HuQ/sIBoDKFQj9fLeQR425fH0VWkM2p0
ePD7/CRXamOAuJCxtylRlSmYRfIT95fcFiVO4+sM06adFvphdgKwC0M6zzmhkaAE
MkXncXZv6ukZzPT+wC85K0li0m1tqYGHq5zwYhx2dBhXDzxIW2C5gnfrjHBMR3GH
XnVnDz+vULU6pdVY7mQd/NmhY8wq9z38yTFK0zvOSDO8wJUK7eCctFPyHjgDWOQG
49/C7uucD63tng==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:50:38 2025 by rpki-client