Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
File: bd2PHjjJH1sXw9GnI05JyccNwyQ.mft (raw, json)
Hash identifier: ob2ejy+vcwIxTE2quHJ7/lVi+piy3+DUScwbPX0JQLA=
Subject key identifier: C2:79:C9:B9:56:A3:6C:CA:F1:69:E0:49:5F:4C:E7:A7:17:FE:D3:E2
Authority key identifier: 6D:DD:8F:1E:38:C9:1F:5B:17:C3:D1:A7:23:4E:49:C9:C7:0D:C3:24
Certificate issuer: /CN=6ddd8f1e38c91f5b17c3d1a7234e49c9c70dc324
Certificate serial: 01966096BC470BA54F6AEB909C0FB678B5A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
Manifest number: 1505
Signing time: Wed 23 Apr 2025 03:00:13 +0000
Manifest this update: Wed 23 Apr 2025 03:00:13 +0000
Manifest next update: Thu 24 Apr 2025 03:00:13 +0000
Files and hashes: 1: BKts92Cgp762t7JNofBM7L5uftM.roa (hash: WTNLkBIvgvxJFEXIWZr47BOElViaMRJym9HooD5Dr3Q=)
2: bd2PHjjJH1sXw9GnI05JyccNwyQ.crl (hash: KEF+I3tS7yJ8S4/+kElh9eQ4kL/Ntv0RZV2csSt60Lc=)
3: jypSqMvt2NprsB0DoEFG-cYXk3g.roa (hash: 20GE86V+BpBjF8cWsWZrxYRlzb0k0GNnTKWyu1nZsto=)
4: z53iYrx_shu0WdCaV4v6ZXfJyfA.roa (hash: ySckjx3fnBbjiCnJf7c10h+wH/jcKQr5e8Rmhk0EXE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:60:96:bc:47:0b:a5:4f:6a:eb:90:9c:0f:b6:78:b5:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddd8f1e38c91f5b17c3d1a7234e49c9c70dc324
Validity
Not Before: Apr 23 03:00:13 2025 GMT
Not After : Apr 24 03:00:13 2025 GMT
Subject: CN=c279c9b956a36ccaf169e0495f4ce7a717fed3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ce:b1:5e:12:f6:ab:5a:f4:62:23:26:e8:72:
17:ba:b2:70:4b:c7:93:f6:db:43:f1:14:73:5b:de:
7a:4c:00:bd:12:c9:bf:af:8d:48:26:58:bd:20:41:
ec:d2:a3:0a:ab:0f:49:8f:c9:4b:bb:a5:16:e0:65:
3d:0e:14:e1:15:23:0f:64:08:5b:ec:f2:fc:13:b6:
b1:a9:9d:0d:77:40:4b:be:d7:e5:bf:9a:33:31:42:
00:dc:7e:f9:37:a8:7c:3c:b7:23:6e:9a:ca:2c:2d:
5b:f8:4e:0e:62:03:96:a1:5d:c5:17:26:ca:61:2d:
4c:f9:63:6d:71:c5:8f:3b:7b:c6:65:73:02:0e:b4:
99:c4:44:6c:4e:04:0b:39:5d:50:19:a8:59:2a:57:
99:52:36:ee:51:d7:59:f7:07:5a:72:76:a8:df:3d:
8e:e9:fb:6d:47:78:a0:0c:cf:c3:07:92:d6:85:98:
65:24:48:12:cc:43:2d:6a:e1:8f:ee:18:1b:40:08:
f2:2a:02:30:ac:dd:5b:56:1f:b1:00:f9:5b:6a:f6:
7a:85:0f:97:64:14:9f:5b:d3:8f:db:28:c5:5f:e6:
e4:3b:c1:28:5a:80:83:c5:20:3a:93:09:1b:4d:82:
8f:6b:63:52:28:b8:fa:c2:21:ad:13:a7:e7:0b:11:
16:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:79:C9:B9:56:A3:6C:CA:F1:69:E0:49:5F:4C:E7:A7:17:FE:D3:E2
X509v3 Authority Key Identifier:
keyid:6D:DD:8F:1E:38:C9:1F:5B:17:C3:D1:A7:23:4E:49:C9:C7:0D:C3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:5a:02:ca:58:c5:34:d0:06:6b:ac:6b:11:ef:b7:a2:46:68:
42:13:ec:58:26:fa:57:5a:9d:7c:d4:f4:d6:f4:67:68:b0:cf:
b7:b7:04:b9:62:8e:5e:53:ef:44:64:c1:9e:b4:3b:31:ae:7c:
96:0e:f2:63:96:dd:04:8e:87:da:9e:6f:4b:52:36:e9:63:cb:
ba:16:e2:ab:9b:12:95:61:e7:1d:54:6b:7f:d8:2a:28:d1:58:
89:f8:84:51:41:e8:a6:c4:13:ca:70:36:34:1e:e7:c9:49:3e:
d7:a3:38:dd:46:16:54:90:ca:33:9b:6f:24:d8:98:e2:ff:86:
22:06:85:f7:c3:46:b7:42:c9:11:83:96:bb:78:2d:78:db:a0:
41:9c:5f:8c:73:d1:24:36:85:8a:7d:ac:20:0a:8d:1b:b4:15:
71:f0:ef:f8:2d:c5:9c:cb:00:90:bd:f8:34:50:b4:bf:c4:46:
d9:de:b7:85:93:ba:c3:95:8a:34:12:d4:ab:7c:64:fb:0a:d2:
ad:1a:fe:18:43:48:5c:e6:fa:27:79:cd:1a:57:91:25:e8:b9:
65:16:04:a1:da:39:6d:79:d7:83:47:dc:fa:2e:ae:37:26:35:
af:93:fe:35:71:3f:a8:16:50:09:5d:4f:c4:01:bc:5b:5c:97:
97:b3:51:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZglrxHC6VPauuQnA+2eLWlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZGQ4ZjFlMzhjOTFmNWIxN2MzZDFhNzIzNGU0OWM5Yzcw
ZGMzMjQwHhcNMjUwNDIzMDMwMDEzWhcNMjUwNDI0MDMwMDEzWjAzMTEwLwYDVQQD
EyhjMjc5YzliOTU2YTM2Y2NhZjE2OWUwNDk1ZjRjZTdhNzE3ZmVkM2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3M6xXhL2q1r0YiMm6HIXurJwS8eT
9ttD8RRzW956TAC9Esm/r41IJli9IEHs0qMKqw9Jj8lLu6UW4GU9DhThFSMPZAhb
7PL8E7axqZ0Nd0BLvtflv5ozMUIA3H75N6h8PLcjbprKLC1b+E4OYgOWoV3FFybK
YS1M+WNtccWPO3vGZXMCDrSZxERsTgQLOV1QGahZKleZUjbuUddZ9wdacnao3z2O
6fttR3igDM/DB5LWhZhlJEgSzEMtauGP7hgbQAjyKgIwrN1bVh+xAPlbavZ6hQ+X
ZBSfW9OP2yjFX+bkO8EoWoCDxSA6kwkbTYKPa2NSKLj6wiGtE6fnCxEWjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJ5yblWo2zK8WngSV9M56cX/tPiMB8GA1UdIwQY
MBaAFG3djx44yR9bF8PRpyNOScnHDcMkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmQyUEhqakpIMXNYdzlHbkkwNUp5Y2NOd3lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8zMTZjOGYtNWUzNi00NzFmLTk1NTUt
ZjYyOTdhNzdhMzdiLzEvYmQyUEhqakpIMXNYdzlHbkkwNUp5Y2NOd3lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8zMTZjOGYtNWUzNi00NzFmLTk1NTUtZjYyOTdhNzdhMzdi
LzEvYmQyUEhqakpIMXNYdzlHbkkwNUp5Y2NOd3lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWFoCyljF
NNAGa6xrEe+3okZoQhPsWCb6V1qdfNT01vRnaLDPt7cEuWKOXlPvRGTBnrQ7Ma58
lg7yY5bdBI6H2p5vS1I26WPLuhbiq5sSlWHnHVRrf9gqKNFYifiEUUHopsQTynA2
NB7nyUk+16M43UYWVJDKM5tvJNiY4v+GIgaF98NGt0LJEYOWu3gteNugQZxfjHPR
JDaFin2sIAqNG7QVcfDv+C3FnMsAkL34NFC0v8RG2d63hZO6w5WKNBLUq3xk+wrS
rRr+GENIXOb6J3nNGleRJei5ZRYEodo5bXnXg0fc+i6uNyY1r5P+NXE/qBZQCV1P
xAG8W1yXl7NRtA==
-----END CERTIFICATE-----
Generated at Wed Apr 23 05:10:34 2025 by rpki-client