Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
File: bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft (raw, json)
Hash identifier: W+O7rcMaj0ZnWEJM+mtg1dkVOPuR+FUnVBaugOT55Rw=
Subject key identifier: AB:28:AD:A8:49:57:6F:DD:93:EE:B7:35:2B:A4:AE:6D:F8:ED:68:7A
Authority key identifier: 6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74
Certificate issuer: /CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
Certificate serial: 0196564A87ABD1EF59FE800B4E10051D23B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
Manifest number: 1501
Signing time: Mon 21 Apr 2025 03:00:47 +0000
Manifest this update: Mon 21 Apr 2025 03:00:47 +0000
Manifest next update: Tue 22 Apr 2025 03:00:47 +0000
Files and hashes: 1: 49pxkgi7itIv6ImUGF743Hog5ps.roa (hash: hT65WPD3rxjKAyyXgkyC1Te/5QcBwu6G6s4Re/Tw2UE=)
2: Jyvq7rcCs6Qlew8Ff4iEMvVHpXo.roa (hash: cAmAOJsrcg5h/lolypAUDsWdoBjnFRvupRZVbDEj0XI=)
3: bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl (hash: A7aoQvA3p1WArKKvHMqnGYfbabtFZ3C27jEkyN21wQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:87:ab:d1:ef:59:fe:80:0b:4e:10:05:1d:23:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
Validity
Not Before: Apr 21 03:00:47 2025 GMT
Not After : Apr 22 03:00:47 2025 GMT
Subject: CN=ab28ada849576fdd93eeb7352ba4ae6df8ed687a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b9:bd:15:e9:71:be:35:79:07:f7:5b:72:cb:
4f:59:a5:02:f4:4b:fb:2a:34:46:78:69:82:b2:cc:
d5:26:fd:6d:20:65:1f:0b:66:36:07:be:a4:6f:d4:
76:82:87:9f:af:04:31:20:86:45:ee:01:9b:a0:0a:
b9:72:47:9f:fe:09:54:53:25:d3:14:41:54:72:03:
23:e1:8f:ae:9f:3c:66:f7:e0:0d:55:f0:a3:22:5e:
91:bf:39:79:b6:e7:fc:6f:ed:7c:3d:41:a6:ad:3b:
59:cc:0f:15:c6:2c:1e:64:ad:ad:59:f9:ad:61:9f:
ea:32:34:11:d9:ef:dc:23:a1:0f:89:9f:6a:81:fd:
25:f1:10:7c:e6:ca:50:3e:1f:ad:97:4a:d4:45:c6:
3b:a1:ac:25:34:eb:c1:79:29:28:88:59:ea:0e:da:
ad:b5:4d:51:b6:e7:d3:da:96:25:ea:44:6b:ec:19:
d4:2d:8e:a5:d5:81:eb:d8:cf:83:98:5f:ad:4b:76:
a6:09:df:cd:25:c6:9b:df:22:bf:fe:4d:9d:44:ea:
5c:d3:fb:90:e8:f5:c1:fb:7c:da:26:f9:c0:42:cd:
4e:da:cc:60:2b:73:1d:00:65:63:34:fa:7b:81:2f:
3d:d8:05:09:86:7b:ad:68:16:9a:4d:0a:23:8c:cb:
12:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:28:AD:A8:49:57:6F:DD:93:EE:B7:35:2B:A4:AE:6D:F8:ED:68:7A
X509v3 Authority Key Identifier:
keyid:6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:60:57:4b:da:e0:97:f2:72:ed:11:3d:3c:e7:5b:fb:61:31:
92:40:f6:09:2f:fd:36:0a:23:29:14:76:ad:04:9f:3c:fd:95:
c9:91:29:f1:ff:10:d0:90:6d:3e:4d:65:a7:78:48:78:0d:90:
77:8b:bb:d6:5e:58:95:00:b8:57:ad:ff:f8:b4:8e:cc:c6:7e:
72:50:c6:95:45:cf:20:d5:84:64:0c:9b:63:21:04:a2:7c:5a:
30:95:19:14:7a:bf:13:09:b8:0d:58:ca:54:44:58:d2:48:fd:
7d:25:de:ba:f2:9b:58:71:23:9a:66:bf:cd:0b:5e:42:38:eb:
c6:cd:12:64:75:62:dd:00:b5:25:7a:44:1a:aa:0d:92:6a:a1:
e3:0c:35:94:9a:3b:8f:d1:dd:8d:ca:36:14:a9:4c:c0:f6:e5:
6b:33:9f:e4:4f:66:a9:05:5c:5b:39:11:d2:af:cd:db:e8:42:
54:fe:4e:b9:1e:fa:25:3e:a5:3f:4b:7b:3c:fc:90:60:b9:3e:
6c:a2:8d:4c:35:95:a4:5a:40:dd:31:8a:b5:8e:a0:1d:61:03:
2f:e2:bd:17:49:13:5f:b4:28:d1:aa:19:3a:4b:81:d0:d2:4f:
50:bb:c4:16:4c:cb:1c:5d:b3:72:ea:9d:1e:15:5d:10:3e:51:
44:0e:2d:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWSoer0e9Z/oALThAFHSOyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZDFkYzRkMmViN2JmMmEzZjA4ZDU0NTc1NTQ3NzA1NTE0
M2YxNzQwHhcNMjUwNDIxMDMwMDQ3WhcNMjUwNDIyMDMwMDQ3WjAzMTEwLwYDVQQD
EyhhYjI4YWRhODQ5NTc2ZmRkOTNlZWI3MzUyYmE0YWU2ZGY4ZWQ2ODdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Lm9FelxvjV5B/dbcstPWaUC9Ev7
KjRGeGmCsszVJv1tIGUfC2Y2B76kb9R2goefrwQxIIZF7gGboAq5ckef/glUUyXT
FEFUcgMj4Y+unzxm9+ANVfCjIl6Rvzl5tuf8b+18PUGmrTtZzA8VxiweZK2tWfmt
YZ/qMjQR2e/cI6EPiZ9qgf0l8RB85spQPh+tl0rURcY7oawlNOvBeSkoiFnqDtqt
tU1RtufT2pYl6kRr7BnULY6l1YHr2M+DmF+tS3amCd/NJcab3yK//k2dROpc0/uQ
6PXB+3zaJvnAQs1O2sxgK3MdAGVjNPp7gS892AUJhnutaBaaTQojjMsSKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsorahJV2/dk+63NSukrm347Wh6MB8GA1UdIwQY
MBaAFG3R3E0ut78qPwjVRXVUdwVRQ/F0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmRIY1RTNjN2eW9fQ05WRmRWUjNCVkZEOFhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9iZWU0ODMtZWViMy00YzUzLWE0NTYt
ZmI0YzU0YjY3MzNhLzEvYmRIY1RTNjN2eW9fQ05WRmRWUjNCVkZEOFhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9iZWU0ODMtZWViMy00YzUzLWE0NTYtZmI0YzU0YjY3MzNh
LzEvYmRIY1RTNjN2eW9fQ05WRmRWUjNCVkZEOFhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMmBXS9rg
l/Jy7RE9POdb+2ExkkD2CS/9NgojKRR2rQSfPP2VyZEp8f8Q0JBtPk1lp3hIeA2Q
d4u71l5YlQC4V63/+LSOzMZ+clDGlUXPINWEZAybYyEEonxaMJUZFHq/Ewm4DVjK
VERY0kj9fSXeuvKbWHEjmma/zQteQjjrxs0SZHVi3QC1JXpEGqoNkmqh4ww1lJo7
j9Hdjco2FKlMwPblazOf5E9mqQVcWzkR0q/N2+hCVP5OuR76JT6lP0t7PPyQYLk+
bKKNTDWVpFpA3TGKtY6gHWEDL+K9F0kTX7Qo0aoZOkuB0NJPULvEFkzLHF2zcuqd
HhVdED5RRA4t+w==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:29:23 2025 by rpki-client