Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
File: 1bgBgLQNWFtzZlh9-13nvzB3hD4.mft (raw, json)
Hash identifier: HSINj01LL0m5lNwj6aM01PB3Pq1U9J2/SMJntBjfEdI=
Subject key identifier: BD:4E:CB:9A:09:5E:F6:CA:98:0B:9D:8A:18:92:CB:92:81:C4:AD:52
Authority key identifier: D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E
Certificate issuer: /CN=d5b80180b40d585b7366587dfb5de7bf3077843e
Certificate serial: 01965F84B398EC21FC9CEC62C11D8DE8F13C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
Manifest number: 0ADE
Signing time: Tue 22 Apr 2025 22:00:54 +0000
Manifest this update: Tue 22 Apr 2025 22:00:54 +0000
Manifest next update: Wed 23 Apr 2025 22:00:54 +0000
Files and hashes: 1: 1bgBgLQNWFtzZlh9-13nvzB3hD4.crl (hash: SwyljYVz6hAM9iDwZUkJLMr4hVEgbBbeUvlZjfY6zuE=)
2: pIHIruBkWSXEhwElM3sSrgjzMr0.roa (hash: fGR515hTUFGy9ET2ASre0fRJ4owzzw/uRYZkelb0/PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:84:b3:98:ec:21:fc:9c:ec:62:c1:1d:8d:e8:f1:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b80180b40d585b7366587dfb5de7bf3077843e
Validity
Not Before: Apr 22 22:00:54 2025 GMT
Not After : Apr 23 22:00:54 2025 GMT
Subject: CN=bd4ecb9a095ef6ca980b9d8a1892cb9281c4ad52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3e:eb:7d:9f:2b:17:9f:1f:a0:5d:1d:d2:a4:
58:16:00:34:20:ab:0a:56:2d:58:29:47:1e:20:dd:
91:a4:e9:d7:e2:ff:9b:65:23:52:0c:23:4d:9e:ab:
6b:d6:6f:cc:77:6f:9f:c7:c9:24:1f:c0:84:5f:59:
2e:ae:c1:93:91:ba:95:6d:9c:75:e5:1b:3f:77:ca:
f7:17:a9:dd:cf:08:0a:cd:9b:92:37:6f:e8:16:5b:
08:ed:88:52:7f:c3:86:1d:9c:10:7a:51:f9:ec:8f:
79:1d:42:ac:43:a3:c9:27:14:f3:98:d6:63:bb:e8:
09:56:e0:ea:50:97:c0:f9:85:55:8c:df:d0:e8:17:
60:bd:4d:4b:13:39:dc:dd:74:85:a8:b8:e6:15:98:
32:23:4a:db:1e:e5:3e:6e:03:d7:44:f2:e1:f6:25:
27:b1:b6:b9:9e:79:7f:86:75:65:11:70:df:06:72:
b4:80:10:07:bb:30:1a:0b:98:4d:72:50:ca:11:2b:
48:83:8c:7a:54:c7:05:1c:10:1f:7a:e6:4f:de:4a:
a3:2b:63:7f:f7:41:ec:bf:93:f3:05:b1:53:b0:73:
32:66:a6:1f:83:3a:d2:6f:cb:0a:e7:93:03:93:4f:
4a:f3:30:19:e5:01:73:e2:ee:bd:0a:94:81:26:df:
15:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4E:CB:9A:09:5E:F6:CA:98:0B:9D:8A:18:92:CB:92:81:C4:AD:52
X509v3 Authority Key Identifier:
keyid:D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:75:e3:1b:f2:e1:34:3a:0b:0b:f7:59:b0:01:ad:0c:bd:2d:
bf:1f:b5:c1:e7:9d:8f:74:75:18:95:22:e6:ff:bd:2a:76:f1:
ad:a1:ea:e9:a2:bb:8d:55:78:2f:af:c1:a9:fa:a3:b1:76:21:
2d:f0:07:8c:e9:2c:60:a2:74:cb:4c:0d:87:32:e4:9a:d8:1b:
d7:95:d7:96:48:ea:2f:92:93:93:dc:ba:64:56:2a:95:73:e3:
13:5e:07:ec:91:9e:45:02:be:40:e0:81:6c:34:5a:18:fb:50:
3f:c0:83:09:55:49:42:7c:f7:b7:40:06:80:12:9d:ce:58:fe:
11:5a:c0:7d:d0:84:b6:f5:2c:f9:f9:10:07:94:d0:3d:80:17:
07:9e:ad:d1:f9:fb:a2:db:48:5b:67:d6:79:e6:a5:cb:4a:3d:
9c:55:cd:7e:9e:d3:02:66:a1:ca:94:90:c5:36:0a:31:68:00:
99:f1:c9:f0:3e:f8:28:ed:af:61:e1:40:8f:fb:e0:e8:42:10:
ae:34:11:da:d8:d2:35:d0:d7:b5:01:cd:f1:1c:62:9c:23:94:
26:db:e0:17:2e:bf:9e:23:fc:e3:08:9c:c2:14:d4:a8:5b:b6:
c1:6e:cd:4f:4a:d4:b8:5d:30:20:2a:b7:94:ed:41:f9:28:6a:
71:99:23:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZfhLOY7CH8nOxiwR2N6PE8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YjgwMTgwYjQwZDU4NWI3MzY2NTg3ZGZiNWRlN2JmMzA3
Nzg0M2UwHhcNMjUwNDIyMjIwMDU0WhcNMjUwNDIzMjIwMDU0WjAzMTEwLwYDVQQD
EyhiZDRlY2I5YTA5NWVmNmNhOTgwYjlkOGExODkyY2I5MjgxYzRhZDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD7rfZ8rF58foF0d0qRYFgA0IKsK
Vi1YKUceIN2RpOnX4v+bZSNSDCNNnqtr1m/Md2+fx8kkH8CEX1kursGTkbqVbZx1
5Rs/d8r3F6ndzwgKzZuSN2/oFlsI7YhSf8OGHZwQelH57I95HUKsQ6PJJxTzmNZj
u+gJVuDqUJfA+YVVjN/Q6BdgvU1LEznc3XSFqLjmFZgyI0rbHuU+bgPXRPLh9iUn
sba5nnl/hnVlEXDfBnK0gBAHuzAaC5hNclDKEStIg4x6VMcFHBAfeuZP3kqjK2N/
90Hsv5PzBbFTsHMyZqYfgzrSb8sK55MDk09K8zAZ5QFz4u69CpSBJt8VeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1Oy5oJXvbKmAudihiSy5KBxK1SMB8GA1UdIwQY
MBaAFNW4AYC0DVhbc2ZYfftd578wd4Q+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWJnQmdMUU5XRnR6WmxoOS0xM252ekIzaEQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wZTVhNzEtMmMwYi00ZjA0LTk0NjYt
MzE0MTFkOTE1NzZhLzEvMWJnQmdMUU5XRnR6WmxoOS0xM252ekIzaEQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8wZTVhNzEtMmMwYi00ZjA0LTk0NjYtMzE0MTFkOTE1NzZh
LzEvMWJnQmdMUU5XRnR6WmxoOS0xM252ekIzaEQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALHXjG/Lh
NDoLC/dZsAGtDL0tvx+1weedj3R1GJUi5v+9KnbxraHq6aK7jVV4L6/BqfqjsXYh
LfAHjOksYKJ0y0wNhzLkmtgb15XXlkjqL5KTk9y6ZFYqlXPjE14H7JGeRQK+QOCB
bDRaGPtQP8CDCVVJQnz3t0AGgBKdzlj+EVrAfdCEtvUs+fkQB5TQPYAXB56t0fn7
ottIW2fWeealy0o9nFXNfp7TAmahypSQxTYKMWgAmfHJ8D74KO2vYeFAj/vg6EIQ
rjQR2tjSNdDXtQHN8RxinCOUJtvgFy6/niP84wicwhTUqFu2wW7NT0rUuF0wICq3
lO1B+ShqcZkjWA==
-----END CERTIFICATE-----
Generated at Wed Apr 23 05:19:33 2025 by rpki-client