Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
File: BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft (raw, json)
Hash identifier: g4/VSO7fEdp9/6dnqcvGPABg8qvR5ah65CfKVk44b6c=
Subject key identifier: 87:19:F6:FE:02:A6:48:DA:55:46:80:E0:12:88:9A:BA:B9:70:71:3C
Authority key identifier: 04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
Certificate issuer: /CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Certificate serial: 019510C68D6FB7BA02BD61C27D24D602FCE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
Manifest number: 0D9C
Signing time: Sun 16 Feb 2025 22:00:02 +0000
Manifest this update: Sun 16 Feb 2025 22:00:02 +0000
Manifest next update: Mon 17 Feb 2025 22:00:02 +0000
Files and hashes: 1: BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl (hash: WWITWsFN+1Dzh3O8F5mJO6lVX8CMsFYTQJGYmmPJNuo=)
2: SQ8WO3hellEKsQ4Y9NCRSIjTvBQ.roa (hash: BhoaWfa6WtuVRoo3cEi7UmyVvyoDyPTAAx6/lySfFlU=)
3: SiZIShqgNqX8HAwZHazZNECjby8.roa (hash: pRsgCD3V+Trdu45mh9GvK7xoM8z4mazBwLyC1V4JY0Q=)
4: VHskNMe_9EcN5Ps8VV0dA6UjJfM.roa (hash: +hDMAKuEEYDkIBhUAQS0ED3/5LZ3DcqLT6h5fu0q5Vc=)
5: du_h3WrA0m1xhUnyJPLIuGO4kpA.roa (hash: JDpeOD7xV2ekG+eEesG9qUfLmZmSMWruOGhX64DbBEc=)
6: hecINikDAmK8G3Hw6ahvsRHRwW8.roa (hash: o+ggObSSPivM7xABVityZZJaZTXdzbRjqX3nGVmT/3M=)
7: icyI7vtUu_VifuFeglKfEW94_GM.roa (hash: GtavNKaMLIdLn9+Xx38qptYW+E+bTW1Tx9pUb3Adoq0=)
8: slVrsnHd8rCIfEnbwuX_9NfM9i4.roa (hash: /3BENw/pyYjv+JfWEh8xWz895hOHXgoCQXPnKDlVros=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:8d:6f:b7:ba:02:bd:61:c2:7d:24:d6:02:fc:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Validity
Not Before: Feb 16 22:00:02 2025 GMT
Not After : Feb 17 22:00:02 2025 GMT
Subject: CN=8719f6fe02a648da554680e012889abab970713c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:11:97:fb:71:94:b6:98:f3:09:4d:26:5c:ce:
23:b1:5b:a4:65:d1:ee:5e:3b:83:3c:2a:ad:4a:5d:
35:11:b9:38:9c:7a:c2:28:b3:03:37:57:06:6b:9c:
f2:ca:93:2a:d9:8a:91:36:c3:0d:d8:10:2c:03:1a:
7e:f0:db:ed:2c:25:4f:0a:46:dc:2a:3f:67:a6:2c:
4b:4f:dd:af:78:6d:54:bd:ca:4f:64:6e:21:59:30:
b1:0b:1a:42:60:e8:77:f4:21:3d:fa:56:ee:03:5a:
25:98:cf:a0:25:9f:6e:b0:d9:c1:55:6e:b6:71:33:
a3:dd:ff:ed:0c:ff:8b:2b:11:d4:55:c4:4f:70:0f:
13:26:ee:9d:f5:52:e6:df:15:f8:fb:61:1b:5e:5b:
95:de:47:5f:51:ab:4a:0b:fd:e5:3e:fa:7d:62:b4:
3a:62:e6:f2:94:64:eb:67:5c:47:ca:f7:cf:ce:82:
1d:0a:05:e1:23:85:16:fb:50:20:de:d7:18:02:41:
21:dc:94:c2:09:57:dc:eb:60:14:5b:4e:36:ff:3a:
5f:55:58:00:41:4e:74:6c:57:69:f9:51:b6:25:d6:
14:b4:63:81:d1:98:6e:eb:4a:46:5c:d4:18:e0:2d:
eb:d9:a7:9a:d5:4c:0f:18:66:d4:63:9d:8a:78:5f:
73:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:19:F6:FE:02:A6:48:DA:55:46:80:E0:12:88:9A:BA:B9:70:71:3C
X509v3 Authority Key Identifier:
keyid:04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:1c:d8:f1:78:be:fe:b4:b5:10:d3:67:1b:d7:8f:82:a8:6b:
cf:23:89:69:d7:2d:5b:2a:96:db:bd:0d:05:4c:ca:f3:9b:66:
02:5c:4e:53:16:15:cd:fc:a7:69:14:24:f0:01:f1:b0:9a:e2:
15:af:28:8b:70:9b:cf:06:4b:a8:4b:40:8a:74:c7:ef:c4:ad:
f8:db:0e:cc:b9:d2:9d:5d:42:75:7b:d3:a4:32:70:2f:04:ef:
b6:f6:87:5d:05:bd:14:c4:f6:46:d5:47:e5:2f:5e:b1:bc:0b:
42:08:86:95:7a:ea:4b:9a:46:5c:1a:ac:d2:77:c3:13:b6:91:
19:f1:d0:f6:54:a4:ce:e6:15:e2:80:cc:c3:db:8e:de:85:cb:
05:bc:2a:2b:b5:0f:3f:5c:3e:e0:02:0a:63:8f:3f:6d:d1:e0:
a1:52:a7:6c:ef:20:cf:b9:d6:f4:e9:78:9f:11:08:b5:ba:f9:
49:50:cd:44:33:66:3b:51:e6:d4:61:cf:48:c9:d5:26:f8:d4:
1b:b8:d0:d3:56:3f:d7:07:a6:6d:b3:b2:68:8b:e1:f1:4d:ef:
32:ce:8c:3e:2c:77:83:b7:e5:f5:b6:cb:d8:7e:97:53:ff:33:
99:70:2a:32:1f:80:b6:0c:19:fc:eb:bd:bb:10:63:f4:a7:ce:
30:34:59:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQxo1vt7oCvWHCfSTWAvzlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YTJhZTJjZDA5NDMzMzAxOGM0MWRhYWZiNDc0YzZjZmE4
MGQwN2QwHhcNMjUwMjE2MjIwMDAyWhcNMjUwMjE3MjIwMDAyWjAzMTEwLwYDVQQD
Eyg4NzE5ZjZmZTAyYTY0OGRhNTU0NjgwZTAxMjg4OWFiYWI5NzA3MTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRGX+3GUtpjzCU0mXM4jsVukZdHu
XjuDPCqtSl01Ebk4nHrCKLMDN1cGa5zyypMq2YqRNsMN2BAsAxp+8NvtLCVPCkbc
Kj9npixLT92veG1UvcpPZG4hWTCxCxpCYOh39CE9+lbuA1olmM+gJZ9usNnBVW62
cTOj3f/tDP+LKxHUVcRPcA8TJu6d9VLm3xX4+2EbXluV3kdfUatKC/3lPvp9YrQ6
YubylGTrZ1xHyvfPzoIdCgXhI4UW+1Ag3tcYAkEh3JTCCVfc62AUW042/zpfVVgA
QU50bFdp+VG2JdYUtGOB0Zhu60pGXNQY4C3r2aea1UwPGGbUY52KeF9zPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIcZ9v4CpkjaVUaA4BKImrq5cHE8MB8GA1UdIwQY
MBaAFASirizQlDMwGMQdqvtHTGz6gNB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQktLdUxOQ1VNekFZeEIycS0wZE1iUHFBMEgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS82MzRhMTItZTU4Yy00NTVjLTg5MzMt
NmU2ZThkOTMwM2U5LzEvQktLdUxOQ1VNekFZeEIycS0wZE1iUHFBMEgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS82MzRhMTItZTU4Yy00NTVjLTg5MzMtNmU2ZThkOTMwM2U5
LzEvQktLdUxOQ1VNekFZeEIycS0wZE1iUHFBMEgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArBzY8Xi+
/rS1ENNnG9ePgqhrzyOJadctWyqW270NBUzK85tmAlxOUxYVzfynaRQk8AHxsJri
Fa8oi3CbzwZLqEtAinTH78St+NsOzLnSnV1CdXvTpDJwLwTvtvaHXQW9FMT2RtVH
5S9esbwLQgiGlXrqS5pGXBqs0nfDE7aRGfHQ9lSkzuYV4oDMw9uO3oXLBbwqK7UP
P1w+4AIKY48/bdHgoVKnbO8gz7nW9Ol4nxEItbr5SVDNRDNmO1Hm1GHPSMnVJvjU
G7jQ01Y/1wembbOyaIvh8U3vMs6MPix3g7fl9bbL2H6XU/8zmXAqMh+AtgwZ/Ou9
uxBj9KfOMDRZJQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:35 2025 by rpki-client