Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
File: Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft (raw, json)
Hash identifier: Zrm8jnuO5ITx+bjPkNIkP19Jrlv8bFrGsg8EinCBTIU=
Subject key identifier: A1:33:E4:E0:78:03:12:0C:3A:5D:44:12:78:E8:D4:D7:45:CB:CC:8B
Authority key identifier: 05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
Certificate issuer: /CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Certificate serial: 01976CCFD10FF9708B54F23442D914EA77DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 05:00:48 +0000
Manifest this update: Sat 14 Jun 2025 05:00:48 +0000
Manifest next update: Sun 15 Jun 2025 05:00:48 +0000
Files and hashes: 1: AsYD6hoeMD1Ii3ouRsCjixk0isY.roa (hash: zcxHBop/y0fEgcQmkIj/4jrHcOuohd20eiO0g8A5mhM=)
2: Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl (hash: ilZsm6wxkdZiTFduS1mIVIQaGo08WG2iuk8Noe5NbYk=)
3: unS2BH6IRvMlWO0CeZZ9qSzMqA0.roa (hash: 7PVmOlO8Ugj501NmZwLgajumsSoAEyC9CKRs3IKLmtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:d1:0f:f9:70:8b:54:f2:34:42:d9:14:ea:77:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Validity
Not Before: Jun 14 05:00:48 2025 GMT
Not After : Jun 15 05:00:48 2025 GMT
Subject: CN=a133e4e07803120c3a5d441278e8d4d745cbcc8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:75:92:66:57:d5:cf:f2:c8:33:fc:eb:70:c6:
93:d0:11:f9:b3:97:73:ae:b8:08:16:70:1e:61:22:
79:b9:03:92:6b:12:83:d3:f4:03:e2:c1:4d:0e:1f:
2a:98:cf:e6:4b:f1:8b:6c:e4:27:6e:14:2a:f7:7e:
3e:05:c8:e2:1e:c5:f0:e6:28:79:53:74:6f:44:d0:
98:ed:bd:90:3c:0d:eb:06:61:97:e3:b6:a4:4d:77:
ba:03:b8:07:8e:64:bf:2b:dc:ff:b1:6c:f0:ec:8d:
4c:6f:41:6d:5d:6b:c5:f2:55:05:cb:1a:37:91:ba:
0d:41:1c:d8:4d:59:ac:a2:e7:ae:04:94:a2:08:10:
e6:3b:93:48:a3:e5:5f:ed:c4:fc:b3:7f:8f:9c:cf:
c0:0a:d4:64:92:82:fc:dd:60:63:76:46:2f:93:04:
cd:03:37:c7:1a:3c:dd:45:cf:94:f8:e4:92:ea:0f:
14:d7:4f:db:b4:fd:35:06:c7:af:c1:e4:42:1d:79:
4c:ff:39:4c:fa:3d:85:54:5c:39:76:3b:dc:4c:5f:
5f:24:2f:9a:46:95:53:d4:19:28:ef:80:70:82:f1:
55:7a:2c:40:d9:37:63:62:54:40:cc:b6:49:ac:e6:
52:77:3a:2b:f3:8e:fe:8c:3a:dd:33:6e:1b:7f:07:
18:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:33:E4:E0:78:03:12:0C:3A:5D:44:12:78:E8:D4:D7:45:CB:CC:8B
X509v3 Authority Key Identifier:
keyid:05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:d6:d2:48:22:54:1a:2b:91:9b:9c:d7:d7:9f:1d:66:d1:d4:
8c:dc:a4:49:48:49:63:73:fe:82:45:8c:04:ea:7e:e6:ab:6a:
3b:8e:a5:37:b3:78:f1:4f:11:a3:bc:69:da:1b:28:3e:82:14:
ad:7e:4c:12:63:69:e0:9d:ba:da:71:82:a2:ce:bb:8d:cf:59:
b7:be:70:b6:0c:0b:42:c5:b0:6e:c3:82:d1:ab:64:f4:2f:68:
98:ca:d7:bd:b1:72:f4:c4:52:4b:06:54:44:ee:67:75:d4:62:
8e:bb:ab:c8:9e:14:bf:33:1f:41:5f:6e:24:81:cf:3a:59:37:
6c:7d:d7:a9:24:ae:82:95:96:43:9e:9d:5b:93:e6:aa:4a:63:
f1:90:f5:bc:02:cb:61:f7:9d:90:df:31:51:0d:fd:34:2b:f1:
8a:24:59:40:b9:14:46:77:27:8a:b4:bf:bb:63:2d:cd:f1:00:
6f:07:f7:0e:eb:93:d3:6c:1c:eb:5a:82:41:90:7d:0f:16:e7:
e1:42:1d:3d:b5:68:6f:7a:89:7a:cc:86:d0:74:dd:22:82:f5:
16:71:22:40:40:56:d1:14:ad:7a:4a:22:78:e7:4b:be:1d:72:
7f:90:b9:59:3c:af:aa:e5:52:9e:a2:ec:32:40:1a:fb:c8:23:
ec:55:8f:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsz9EP+XCLVPI0QtkU6nfaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZGE3NTcxYzVlYjEzYjFhZTRmNDQxN2NlZmVjMmJkNzc5
MDJlMmQwHhcNMjUwNjE0MDUwMDQ4WhcNMjUwNjE1MDUwMDQ4WjAzMTEwLwYDVQQD
EyhhMTMzZTRlMDc4MDMxMjBjM2E1ZDQ0MTI3OGU4ZDRkNzQ1Y2JjYzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnWSZlfVz/LIM/zrcMaT0BH5s5dz
rrgIFnAeYSJ5uQOSaxKD0/QD4sFNDh8qmM/mS/GLbOQnbhQq934+BcjiHsXw5ih5
U3RvRNCY7b2QPA3rBmGX47akTXe6A7gHjmS/K9z/sWzw7I1Mb0FtXWvF8lUFyxo3
kboNQRzYTVmsoueuBJSiCBDmO5NIo+Vf7cT8s3+PnM/ACtRkkoL83WBjdkYvkwTN
AzfHGjzdRc+U+OSS6g8U10/btP01BsevweRCHXlM/zlM+j2FVFw5djvcTF9fJC+a
RpVT1Bko74BwgvFVeixA2TdjYlRAzLZJrOZSdzor847+jDrdM24bfwcY5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEz5OB4AxIMOl1EEnjo1NdFy8yLMB8GA1UdIwQY
MBaAFAXadXHF6xOxrk9EF87+wr13kC4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmRwMWNjWHJFN0d1VDBRWHp2N0N2WGVRTGkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjRmODMtMzcwYS00OTAxLThiZmEt
MzY1NTMwMmJmMDA1LzEvQmRwMWNjWHJFN0d1VDBRWHp2N0N2WGVRTGkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9mNjRmODMtMzcwYS00OTAxLThiZmEtMzY1NTMwMmJmMDA1
LzEvQmRwMWNjWHJFN0d1VDBRWHp2N0N2WGVRTGkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAldbSSCJU
GiuRm5zX158dZtHUjNykSUhJY3P+gkWMBOp+5qtqO46lN7N48U8Ro7xp2hsoPoIU
rX5MEmNp4J262nGCos67jc9Zt75wtgwLQsWwbsOC0atk9C9omMrXvbFy9MRSSwZU
RO5nddRijruryJ4UvzMfQV9uJIHPOlk3bH3XqSSugpWWQ56dW5Pmqkpj8ZD1vALL
YfedkN8xUQ39NCvxiiRZQLkURncnirS/u2MtzfEAbwf3DuuT02wc61qCQZB9Dxbn
4UIdPbVob3qJesyG0HTdIoL1FnEiQEBW0RStekoieOdLvh1yf5C5WTyvquVSnqLs
MkAa+8gj7FWPtA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 08:43:14 2025 by rpki-client