Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft
File: bHOgSn0Ost9H2vDDn7p142XIhT0.mft (raw, json)
Hash identifier: zOi7LYdQzotPIKDgh86mQULNCRlmgEfbh8HTkrBa+t0=
Subject key identifier: 7D:C4:44:66:DF:D9:8B:4E:E5:61:CD:99:B1:5F:B9:F7:ED:D3:8E:F2
Authority key identifier: 6C:73:A0:4A:7D:0E:B2:DF:47:DA:F0:C3:9F:BA:75:E3:65:C8:85:3D
Certificate issuer: /CN=6c73a04a7d0eb2df47daf0c39fba75e365c8853d
Certificate serial: 01958B16B97A35D56BD10DDC768AE3870F0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft
Manifest number: 0E67
Signing time: Wed 12 Mar 2025 16:01:16 +0000
Manifest this update: Wed 12 Mar 2025 16:01:16 +0000
Manifest next update: Thu 13 Mar 2025 16:01:16 +0000
Files and hashes: 1: 1g8u0Gir8yCyVBvzcuA27ZsMTcA.roa (hash: hLEqWjYzmOf232eRZFufaSm1niRcj5QeYBzcD6/dycc=)
2: bHOgSn0Ost9H2vDDn7p142XIhT0.crl (hash: l0LRnQd1i4NV9HDkw4EQZCYn9ZxtpFE+BVzie2zgpOw=)
3: uSLH-6azWyM6_toWim6PNb4arp4.roa (hash: imwU+Zb8TWocoYkIF0ZGoxJDK+doen6jZopoR2zFVWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 16:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:16:b9:7a:35:d5:6b:d1:0d:dc:76:8a:e3:87:0f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c73a04a7d0eb2df47daf0c39fba75e365c8853d
Validity
Not Before: Mar 12 16:01:16 2025 GMT
Not After : Mar 13 16:01:16 2025 GMT
Subject: CN=7dc44466dfd98b4ee561cd99b15fb9f7edd38ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:67:11:4c:1a:4f:0d:7b:20:6d:f9:28:1f:e4:
91:29:37:5c:45:82:c8:e9:27:f7:aa:e1:f7:58:0a:
0b:3e:e8:77:1d:3b:d6:85:48:2b:13:cb:f2:13:32:
cb:fd:11:c0:85:5f:91:2a:cd:6d:65:36:0e:60:d8:
37:28:86:35:70:72:eb:ff:d1:15:e9:12:4c:a8:80:
e6:34:c0:c9:17:0d:9d:b1:bc:6d:a2:74:9e:78:d4:
05:53:5d:b5:c5:be:d6:79:96:f1:71:49:e4:56:5f:
e7:07:b1:2d:db:0a:07:11:b0:b3:53:89:53:3c:b8:
f5:62:18:14:56:9c:c1:f6:b3:96:f8:4a:06:4f:ec:
62:7a:8b:3d:46:90:12:ce:ac:fc:dd:71:9a:92:c6:
8e:d0:37:8c:5f:87:fb:b8:37:26:ed:f7:a7:4e:19:
06:a2:96:07:c1:46:cd:75:f0:6a:ab:fd:c4:c1:d2:
39:57:97:c3:67:fc:a9:d7:53:20:b5:5b:72:54:48:
88:73:81:8a:ce:15:80:04:bc:e9:a0:9d:dd:b3:c6:
99:67:8e:6b:72:70:2d:fc:19:ec:65:1a:ce:57:95:
c9:0c:c2:fc:d7:43:20:bb:a8:de:dc:ee:38:39:ca:
d4:1d:9e:b7:f2:72:e1:1c:8f:0a:68:72:71:d7:9a:
e3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C4:44:66:DF:D9:8B:4E:E5:61:CD:99:B1:5F:B9:F7:ED:D3:8E:F2
X509v3 Authority Key Identifier:
keyid:6C:73:A0:4A:7D:0E:B2:DF:47:DA:F0:C3:9F:BA:75:E3:65:C8:85:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:36:8f:3e:db:35:6a:a9:fa:03:95:4e:bd:22:00:43:f1:16:
6a:a5:38:60:d1:9d:76:1f:19:f4:00:d7:2f:2d:ad:ee:f2:a9:
9b:58:95:c4:66:fc:51:08:4a:e5:12:d1:e5:1d:ef:ed:e0:f6:
8d:38:16:48:d8:8b:9d:d3:c7:52:09:72:5a:15:94:ce:42:d0:
21:c0:79:04:3e:92:56:33:c6:de:4f:bf:a2:3a:6c:96:86:62:
f4:85:fd:ab:05:f3:74:bb:72:1d:52:fd:fd:75:84:0e:d7:e1:
e7:fb:0e:c1:fe:ec:20:d8:c9:7f:16:cf:72:a2:fa:71:45:fd:
c0:3a:e1:73:f1:8f:98:41:09:c5:12:2a:65:2b:d1:44:76:c2:
54:29:41:f1:b2:ae:14:75:55:16:71:22:21:36:d0:d5:9e:45:
ef:30:41:f9:09:48:5b:14:e8:14:f4:4b:ef:ca:c2:a1:c8:d9:
80:5d:62:2c:bf:3f:54:d3:56:d2:6e:45:d3:94:f9:db:23:8a:
e5:bc:b6:c0:b4:ab:81:33:f7:fe:9d:20:f8:58:db:22:dd:ee:
3e:5b:98:c0:01:2c:e3:e3:7d:84:5f:a0:6f:cd:ff:e1:5d:3a:
20:c9:a5:c7:26:61:95:e8:77:88:2e:ef:ed:40:4a:65:17:21:
0c:6f:8a:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWLFrl6NdVr0Q3cdorjhw8KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNzNhMDRhN2QwZWIyZGY0N2RhZjBjMzlmYmE3NWUzNjVj
ODg1M2QwHhcNMjUwMzEyMTYwMTE2WhcNMjUwMzEzMTYwMTE2WjAzMTEwLwYDVQQD
Eyg3ZGM0NDQ2NmRmZDk4YjRlZTU2MWNkOTliMTVmYjlmN2VkZDM4ZWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WcRTBpPDXsgbfkoH+SRKTdcRYLI
6Sf3quH3WAoLPuh3HTvWhUgrE8vyEzLL/RHAhV+RKs1tZTYOYNg3KIY1cHLr/9EV
6RJMqIDmNMDJFw2dsbxtonSeeNQFU121xb7WeZbxcUnkVl/nB7Et2woHEbCzU4lT
PLj1YhgUVpzB9rOW+EoGT+xieos9RpASzqz83XGaksaO0DeMX4f7uDcm7fenThkG
opYHwUbNdfBqq/3EwdI5V5fDZ/yp11MgtVtyVEiIc4GKzhWABLzpoJ3ds8aZZ45r
cnAt/BnsZRrOV5XJDML810Mgu6je3O44OcrUHZ638nLhHI8KaHJx15rjhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3ERGbf2YtO5WHNmbFfufft047yMB8GA1UdIwQY
MBaAFGxzoEp9DrLfR9rww5+6deNlyIU9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkhPZ1NuME9zdDlIMnZERG43cDE0MlhJaFQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi80MmFmMWUtZDU1My00ZmU2LTlmYzMt
Zjk2MzMyOTJjOTc3LzEvYkhPZ1NuME9zdDlIMnZERG43cDE0MlhJaFQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi80MmFmMWUtZDU1My00ZmU2LTlmYzMtZjk2MzMyOTJjOTc3
LzEvYkhPZ1NuME9zdDlIMnZERG43cDE0MlhJaFQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmDaPPts1
aqn6A5VOvSIAQ/EWaqU4YNGddh8Z9ADXLy2t7vKpm1iVxGb8UQhK5RLR5R3v7eD2
jTgWSNiLndPHUglyWhWUzkLQIcB5BD6SVjPG3k+/ojpsloZi9IX9qwXzdLtyHVL9
/XWEDtfh5/sOwf7sINjJfxbPcqL6cUX9wDrhc/GPmEEJxRIqZSvRRHbCVClB8bKu
FHVVFnEiITbQ1Z5F7zBB+QlIWxToFPRL78rCocjZgF1iLL8/VNNW0m5F05T52yOK
5by2wLSrgTP3/p0g+FjbIt3uPluYwAEs4+N9hF+gb83/4V06IMmlxyZhleh3iC7v
7UBKZRchDG+KnQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:48:05 2025 by rpki-client