Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
File: BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft (raw, json)
Hash identifier: TExB+47Tn4IANO+frHLQS7fx8soR1CBLlJ3GEVE7lNg=
Subject key identifier: C2:D5:8A:6B:3D:FB:75:CC:E2:31:CC:31:5C:F3:A0:8D:5B:AC:42:38
Authority key identifier: 04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
Certificate issuer: /CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Certificate serial: 019651C8925E7448FAA4A6A507E8E5D89A8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
Manifest number: 0E43
Signing time: Sun 20 Apr 2025 06:00:21 +0000
Manifest this update: Sun 20 Apr 2025 06:00:21 +0000
Manifest next update: Mon 21 Apr 2025 06:00:21 +0000
Files and hashes: 1: BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl (hash: zt+b+py4NhdYlugpETODX3bDuixOp3P68Nmm7s5CVNo=)
2: IoQeF12RJ4sobu5Ga8Eq38fp9lU.roa (hash: ZHXqTkRKDBNra810QH5vCpMO7yqivWRXintrYhNzM9E=)
3: SQ8WO3hellEKsQ4Y9NCRSIjTvBQ.roa (hash: BhoaWfa6WtuVRoo3cEi7UmyVvyoDyPTAAx6/lySfFlU=)
4: SiZIShqgNqX8HAwZHazZNECjby8.roa (hash: pRsgCD3V+Trdu45mh9GvK7xoM8z4mazBwLyC1V4JY0Q=)
5: VHskNMe_9EcN5Ps8VV0dA6UjJfM.roa (hash: +hDMAKuEEYDkIBhUAQS0ED3/5LZ3DcqLT6h5fu0q5Vc=)
6: du_h3WrA0m1xhUnyJPLIuGO4kpA.roa (hash: JDpeOD7xV2ekG+eEesG9qUfLmZmSMWruOGhX64DbBEc=)
7: icyI7vtUu_VifuFeglKfEW94_GM.roa (hash: GtavNKaMLIdLn9+Xx38qptYW+E+bTW1Tx9pUb3Adoq0=)
8: slVrsnHd8rCIfEnbwuX_9NfM9i4.roa (hash: /3BENw/pyYjv+JfWEh8xWz895hOHXgoCQXPnKDlVros=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c8:92:5e:74:48:fa:a4:a6:a5:07:e8:e5:d8:9a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Validity
Not Before: Apr 20 06:00:21 2025 GMT
Not After : Apr 21 06:00:21 2025 GMT
Subject: CN=c2d58a6b3dfb75cce231cc315cf3a08d5bac4238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0b:2f:32:65:42:6b:20:f0:63:f3:c5:e8:22:
b0:e4:ae:ac:6d:5b:ae:7c:6d:64:0b:db:2e:af:33:
72:d8:d1:6b:24:29:18:c7:21:32:d2:e3:66:da:80:
a5:8d:fe:73:e7:9c:88:78:43:fd:e1:2b:06:95:b4:
95:61:76:ec:ef:9c:83:f4:b4:5f:3e:05:7b:df:e4:
69:fc:1e:cd:a5:46:44:c4:ed:a5:1d:56:cd:e9:ea:
d2:67:4f:dd:39:be:ff:95:c8:02:e4:3a:04:d2:05:
7b:cc:e0:6a:0b:10:22:3f:e9:21:56:cf:6e:58:ea:
c1:f2:1a:a8:87:1e:34:21:90:9a:ad:a4:b4:bf:b7:
8f:da:06:ec:f2:79:4f:94:08:5c:5e:04:7a:10:b9:
1a:1a:34:3a:46:e6:73:77:d1:68:fd:8e:0e:32:f7:
9f:27:16:ad:97:78:57:cb:ff:16:d8:18:d5:cb:a6:
6b:12:a7:f8:15:ed:b8:50:56:94:42:df:09:da:ff:
69:08:0a:4d:36:47:2b:ad:23:59:73:7e:f4:4d:51:
0e:84:b7:15:e2:ef:d1:d7:b6:8a:45:4b:1e:13:18:
9e:14:ba:cd:39:55:4f:ec:e2:15:4e:df:82:bd:00:
b5:6c:67:e1:cf:6b:a3:07:4b:e1:08:88:73:ac:74:
79:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D5:8A:6B:3D:FB:75:CC:E2:31:CC:31:5C:F3:A0:8D:5B:AC:42:38
X509v3 Authority Key Identifier:
keyid:04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:36:3a:17:cd:a7:1f:65:22:eb:3f:1c:29:bf:8f:d8:f2:0b:
4f:f2:f9:7d:95:7b:18:23:fd:f3:62:da:90:f8:ee:c9:55:c1:
32:69:05:f5:4f:56:35:e4:7b:36:95:9f:5a:40:44:3e:64:99:
30:47:79:10:be:b8:3a:1b:0c:ca:25:b6:c9:9e:76:57:ba:1b:
d2:3d:39:34:59:e7:02:2d:55:9a:55:b8:92:26:dd:b4:ef:97:
dd:62:77:98:9a:17:f7:17:62:29:7d:15:f3:1d:78:9a:d7:28:
68:c7:41:0f:89:dc:e4:a2:1b:ce:4a:f6:3c:3a:cf:8a:38:bf:
0c:77:9e:b8:a5:ac:b4:5e:81:9d:16:18:99:a2:70:82:8a:53:
5d:73:14:8a:31:c4:08:35:98:9b:db:12:60:a1:4f:26:19:22:
01:04:05:42:e4:78:8c:15:84:81:c5:72:2c:bc:ce:40:cd:e4:
47:8b:84:52:38:3f:97:fb:d5:3f:63:0b:bc:73:34:5a:04:58:
2f:e7:fe:e5:b9:e6:69:31:5d:ea:8d:ea:81:d5:8a:78:5f:11:
52:2d:c4:b5:00:65:41:e6:9b:67:25:73:9a:46:f9:fd:4b:02:
37:c7:a0:6c:65:97:7a:84:c5:00:5c:a7:8b:dc:55:27:5e:e9:
95:a1:aa:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZRyJJedEj6pKalB+jl2JqNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YTJhZTJjZDA5NDMzMzAxOGM0MWRhYWZiNDc0YzZjZmE4
MGQwN2QwHhcNMjUwNDIwMDYwMDIxWhcNMjUwNDIxMDYwMDIxWjAzMTEwLwYDVQQD
EyhjMmQ1OGE2YjNkZmI3NWNjZTIzMWNjMzE1Y2YzYTA4ZDViYWM0MjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQsvMmVCayDwY/PF6CKw5K6sbVuu
fG1kC9surzNy2NFrJCkYxyEy0uNm2oCljf5z55yIeEP94SsGlbSVYXbs75yD9LRf
PgV73+Rp/B7NpUZExO2lHVbN6erSZ0/dOb7/lcgC5DoE0gV7zOBqCxAiP+khVs9u
WOrB8hqohx40IZCaraS0v7eP2gbs8nlPlAhcXgR6ELkaGjQ6RuZzd9Fo/Y4OMvef
Jxatl3hXy/8W2BjVy6ZrEqf4Fe24UFaUQt8J2v9pCApNNkcrrSNZc370TVEOhLcV
4u/R17aKRUseExieFLrNOVVP7OIVTt+CvQC1bGfhz2ujB0vhCIhzrHR5GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMLVims9+3XM4jHMMVzzoI1brEI4MB8GA1UdIwQY
MBaAFASirizQlDMwGMQdqvtHTGz6gNB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQktLdUxOQ1VNekFZeEIycS0wZE1iUHFBMEgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS82MzRhMTItZTU4Yy00NTVjLTg5MzMt
NmU2ZThkOTMwM2U5LzEvQktLdUxOQ1VNekFZeEIycS0wZE1iUHFBMEgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS82MzRhMTItZTU4Yy00NTVjLTg5MzMtNmU2ZThkOTMwM2U5
LzEvQktLdUxOQ1VNekFZeEIycS0wZE1iUHFBMEgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPjY6F82n
H2Ui6z8cKb+P2PILT/L5fZV7GCP982LakPjuyVXBMmkF9U9WNeR7NpWfWkBEPmSZ
MEd5EL64OhsMyiW2yZ52V7ob0j05NFnnAi1VmlW4kibdtO+X3WJ3mJoX9xdiKX0V
8x14mtcoaMdBD4nc5KIbzkr2PDrPiji/DHeeuKWstF6BnRYYmaJwgopTXXMUijHE
CDWYm9sSYKFPJhkiAQQFQuR4jBWEgcVyLLzOQM3kR4uEUjg/l/vVP2MLvHM0WgRY
L+f+5bnmaTFd6o3qgdWKeF8RUi3EtQBlQeabZyVzmkb5/UsCN8egbGWXeoTFAFyn
i9xVJ17plaGqXQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:21:11 2025 by rpki-client