Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
File: 14BeHP_BOS59F2j48FVKHH9jRK0.mft (raw, json)
Hash identifier: WzvI+G5V82aoN/kYCFqt+WPaX0PdWLidxHwhOAVqvY0=
Subject key identifier: D9:3E:2E:66:AA:69:57:D8:73:28:F1:9A:B0:36:46:AC:8D:54:A3:F1
Authority key identifier: D7:80:5E:1C:FF:C1:39:2E:7D:17:68:F8:F0:55:4A:1C:7F:63:44:AD
Certificate issuer: /CN=d7805e1cffc1392e7d1768f8f0554a1c7f6344ad
Certificate serial: 019653B7635F67623BF699D24CBFC40D3F35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
Manifest number: 1235
Signing time: Sun 20 Apr 2025 15:00:49 +0000
Manifest this update: Sun 20 Apr 2025 15:00:49 +0000
Manifest next update: Mon 21 Apr 2025 15:00:49 +0000
Files and hashes: 1: 14BeHP_BOS59F2j48FVKHH9jRK0.crl (hash: EC6S9o5OhyOuFRBzXxXMW809NVZYRttSW19OKsVcFnA=)
2: xcIstN59HOzGE1G9ty62N5JYD0o.roa (hash: BZxFBF1fX1zEMIn2hYmGhW7/ZSCk8wjGWMR8N700UvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:63:5f:67:62:3b:f6:99:d2:4c:bf:c4:0d:3f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7805e1cffc1392e7d1768f8f0554a1c7f6344ad
Validity
Not Before: Apr 20 15:00:49 2025 GMT
Not After : Apr 21 15:00:49 2025 GMT
Subject: CN=d93e2e66aa6957d87328f19ab03646ac8d54a3f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:be:bc:c5:a1:ee:3f:8a:df:cb:c8:7e:ed:fa:
7b:35:8e:24:c9:3d:9d:fe:61:5f:8a:bf:5a:02:7d:
21:48:a7:ec:a3:b4:ee:95:49:7b:02:0f:55:d5:68:
cf:e7:8c:1d:46:b1:c0:a2:f4:97:1d:88:c6:76:f2:
a8:3d:1a:1f:ab:85:6c:25:4f:7f:2d:5b:d5:f1:29:
ef:df:d6:8f:a2:67:db:28:d6:a6:47:12:4d:d6:3a:
48:b5:7f:07:06:a3:9d:4e:c2:a0:f0:48:0a:7b:5b:
0c:7d:6f:c4:e7:25:c0:af:3a:d6:21:ae:6a:29:62:
e9:db:b3:3b:64:ab:f1:9b:5b:9b:79:72:fd:23:f5:
2f:2a:db:4c:dd:c1:cc:4b:1c:31:45:5c:c8:35:87:
31:b4:b9:ad:c3:d4:07:56:1b:22:03:6a:b1:c8:99:
76:59:18:a2:73:9c:3e:d9:63:f3:37:89:29:5e:19:
33:0c:38:a6:ae:78:68:6c:f3:0d:97:15:9f:9a:b4:
e8:e4:46:ac:30:f0:50:ab:24:da:26:3d:08:a5:52:
d3:81:5b:32:60:27:2a:d4:cb:93:f1:b1:37:9b:77:
47:f4:26:87:6e:06:32:92:5d:ea:8e:0e:57:4c:2d:
58:16:4f:2d:78:85:64:f3:cb:1e:7e:32:15:8a:62:
5e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3E:2E:66:AA:69:57:D8:73:28:F1:9A:B0:36:46:AC:8D:54:A3:F1
X509v3 Authority Key Identifier:
keyid:D7:80:5E:1C:FF:C1:39:2E:7D:17:68:F8:F0:55:4A:1C:7F:63:44:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:22:90:bf:dc:24:40:c8:7c:db:57:eb:3c:b9:cf:66:6a:51:
b2:73:82:a2:58:ef:d1:10:8d:59:60:aa:da:ed:ea:01:7b:ad:
cf:8d:25:88:c5:ac:0e:5f:15:b8:bd:c9:ce:a3:60:7e:1b:54:
37:ee:ea:b1:7f:4d:28:cd:f1:d7:e5:6d:80:5d:20:3e:d1:31:
c3:f4:27:aa:f0:17:4b:36:bd:ca:76:af:78:8f:1c:ff:a0:5a:
b5:c1:20:7a:ed:b0:29:cc:8a:2e:0f:5d:2f:38:2d:b8:8a:8f:
fc:f3:0c:fb:d7:30:3c:e2:9b:b2:fe:df:b8:b7:7d:af:73:2c:
4f:fc:81:22:b4:fa:39:1e:d2:10:41:20:7d:c3:8f:8a:45:f7:
e8:9a:93:25:28:ad:b4:45:e1:80:00:a7:ec:df:76:3d:8b:cd:
66:33:49:17:5a:21:6b:f6:30:40:76:4e:ce:7d:85:ff:bc:e7:
50:5a:7c:91:d6:0f:3c:8b:9a:4e:31:e2:68:97:39:9e:68:6a:
1a:f2:d1:58:e2:49:d3:9b:97:9a:58:b5:a2:b5:cf:64:3d:ce:
1a:6a:8f:ea:18:b7:de:97:f6:c1:6e:24:1d:42:dc:46:42:f1:
75:f3:ae:6d:cd:63:35:04:1a:29:0d:e8:12:c4:fd:10:50:5a:
5a:8e:12:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTt2NfZ2I79pnSTL/EDT81MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3ODA1ZTFjZmZjMTM5MmU3ZDE3NjhmOGYwNTU0YTFjN2Y2
MzQ0YWQwHhcNMjUwNDIwMTUwMDQ5WhcNMjUwNDIxMTUwMDQ5WjAzMTEwLwYDVQQD
EyhkOTNlMmU2NmFhNjk1N2Q4NzMyOGYxOWFiMDM2NDZhYzhkNTRhM2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5r68xaHuP4rfy8h+7fp7NY4kyT2d
/mFfir9aAn0hSKfso7TulUl7Ag9V1WjP54wdRrHAovSXHYjGdvKoPRofq4VsJU9/
LVvV8Snv39aPomfbKNamRxJN1jpItX8HBqOdTsKg8EgKe1sMfW/E5yXArzrWIa5q
KWLp27M7ZKvxm1ubeXL9I/UvKttM3cHMSxwxRVzINYcxtLmtw9QHVhsiA2qxyJl2
WRiic5w+2WPzN4kpXhkzDDimrnhobPMNlxWfmrTo5EasMPBQqyTaJj0IpVLTgVsy
YCcq1MuT8bE3m3dH9CaHbgYykl3qjg5XTC1YFk8teIVk88sefjIVimJeGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNk+LmaqaVfYcyjxmrA2RqyNVKPxMB8GA1UdIwQY
MBaAFNeAXhz/wTkufRdo+PBVShx/Y0StMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTRCZUhQX0JPUzU5RjJqNDhGVktISDlqUkswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80YTNkOGEtNTI5ZC00ZDkxLTlmMjUt
MjI1NGJjMmNhNmMwLzEvMTRCZUhQX0JPUzU5RjJqNDhGVktISDlqUkswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC80YTNkOGEtNTI5ZC00ZDkxLTlmMjUtMjI1NGJjMmNhNmMw
LzEvMTRCZUhQX0JPUzU5RjJqNDhGVktISDlqUkswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtyKQv9wk
QMh821frPLnPZmpRsnOColjv0RCNWWCq2u3qAXutz40liMWsDl8VuL3JzqNgfhtU
N+7qsX9NKM3x1+VtgF0gPtExw/QnqvAXSza9ynaveI8c/6BatcEgeu2wKcyKLg9d
LzgtuIqP/PMM+9cwPOKbsv7fuLd9r3MsT/yBIrT6OR7SEEEgfcOPikX36JqTJSit
tEXhgACn7N92PYvNZjNJF1oha/YwQHZOzn2F/7znUFp8kdYPPIuaTjHiaJc5nmhq
GvLRWOJJ05uXmli1orXPZD3OGmqP6hi33pf2wW4kHULcRkLxdfOubc1jNQQaKQ3o
EsT9EFBaWo4Smg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 21:39:30 2025 by rpki-client