Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
File: BMXx0XeetwkJA2XbmCkXrf0PgEk.mft (raw, json)
Hash identifier: crecd4Rk7WA3yVC+ctvdgrhwx6+E33n1DplYxoDwofM=
Subject key identifier: 2A:9D:5C:9C:98:73:97:C5:BD:C7:93:F8:DA:A2:80:A6:21:FE:B6:9D
Authority key identifier: 04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
Certificate issuer: /CN=04c5f1d1779eb709090365db982917adfd0f8049
Certificate serial: 0197462FCC08EDBFB8509FC59911964E13AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
Manifest number: 0A3F
Signing time: Fri 06 Jun 2025 17:00:26 +0000
Manifest this update: Fri 06 Jun 2025 17:00:26 +0000
Manifest next update: Sat 07 Jun 2025 17:00:26 +0000
Files and hashes: 1: BMXx0XeetwkJA2XbmCkXrf0PgEk.crl (hash: Lv0Qh9tFBbPlwe+5oQqPM49cJhqjJSbYB+D9YFxS+dE=)
2: UiH643w1GrSMb8MdWOXuMKoflu8.roa (hash: Ox1u3sls+4F8aVo0Ns4HTUNM65vIvg8OdP6tILBOlsE=)
3: rLCMQEvNZKScfiZ6xzabxSP9S3Q.roa (hash: pzK0hpbuvro5D5X8t6Q8snrn8GpjD/ysREOxL+vWCA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:2f:cc:08:ed:bf:b8:50:9f:c5:99:11:96:4e:13:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04c5f1d1779eb709090365db982917adfd0f8049
Validity
Not Before: Jun 6 17:00:26 2025 GMT
Not After : Jun 7 17:00:26 2025 GMT
Subject: CN=2a9d5c9c987397c5bdc793f8daa280a621feb69d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fc:64:17:3b:c1:34:f6:a5:d7:d8:15:b7:38:
98:47:ea:61:aa:a5:14:00:39:7a:9f:44:aa:58:76:
4b:08:7d:68:e8:4a:45:3c:0e:8c:dc:89:8e:16:ec:
bf:37:25:7e:e0:d7:17:7e:a4:91:fd:d4:ec:f0:d8:
58:4b:46:51:d9:ac:0e:e9:a9:f3:30:16:06:25:8b:
45:11:35:4c:70:e9:7a:48:1c:b0:22:b0:81:a8:46:
58:95:32:89:5a:2d:b1:12:e3:f1:62:47:a4:a8:cb:
84:e2:69:26:9b:41:b5:78:a9:30:17:06:76:13:e3:
c3:85:ac:be:0f:a9:d8:3e:9f:04:24:e5:16:33:a3:
d3:8e:6b:91:03:2c:cd:dd:86:e8:cd:90:2a:48:fb:
75:2f:cf:da:65:f5:1f:52:6a:04:02:28:a6:4a:e9:
7a:90:82:0e:37:c9:5c:a7:ea:b1:09:82:d1:0b:b0:
8d:46:82:78:71:93:ca:9d:d8:65:c0:0f:fb:ce:2a:
d1:72:84:f3:54:cd:c1:20:c1:22:bc:ff:06:ee:3d:
71:47:77:47:20:ba:07:9c:65:ce:11:58:c4:77:85:
1e:e4:94:2f:42:22:77:c5:29:63:b0:9e:a3:d6:0b:
41:cf:34:53:48:af:0b:8c:19:87:89:ef:67:87:d2:
2e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9D:5C:9C:98:73:97:C5:BD:C7:93:F8:DA:A2:80:A6:21:FE:B6:9D
X509v3 Authority Key Identifier:
keyid:04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ed:69:a0:eb:67:89:ce:30:a6:12:f1:fc:49:65:ae:29:0e:
e7:cb:88:45:41:d7:b6:58:de:bc:3c:40:8a:83:25:98:ef:6f:
3d:2d:c5:2b:c6:4b:b3:e2:3e:93:1a:df:73:d6:bb:ef:54:68:
a1:f6:ca:11:25:5f:59:2e:22:f4:c4:02:aa:34:94:b4:c0:94:
c4:ab:ba:68:51:35:6d:f8:8b:81:be:5b:6d:20:96:e5:b8:ad:
fa:bd:cb:bc:25:69:0e:66:4d:d8:be:17:4d:76:1c:8e:1f:c5:
0a:97:c7:de:dc:fb:8c:af:f7:a2:10:68:35:d3:5d:f5:ef:20:
2e:1f:37:e0:b0:88:eb:8e:6b:38:84:93:74:29:62:88:f1:f9:
92:a5:3b:79:28:6e:98:72:06:03:de:b2:2c:14:2e:06:32:62:
c4:e4:12:c6:02:99:4f:82:13:3b:2b:9f:c8:ea:b9:bc:a0:52:
f7:d1:45:3e:ba:46:69:90:ce:99:e3:95:3e:69:1b:23:35:94:
8a:f8:cf:4d:7b:01:62:4f:aa:82:0c:5d:81:b0:5a:57:01:b3:
64:b5:f1:8c:e0:d0:16:2d:19:26:90:04:96:9d:c2:2c:fe:dc:
28:20:dd:c9:32:7a:8d:ef:bd:e3:6f:9d:18:95:c2:e9:44:1d:
b9:27:a4:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGL8wI7b+4UJ/FmRGWThOtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YzVmMWQxNzc5ZWI3MDkwOTAzNjVkYjk4MjkxN2FkZmQw
ZjgwNDkwHhcNMjUwNjA2MTcwMDI2WhcNMjUwNjA3MTcwMDI2WjAzMTEwLwYDVQQD
EygyYTlkNWM5Yzk4NzM5N2M1YmRjNzkzZjhkYWEyODBhNjIxZmViNjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvxkFzvBNPal19gVtziYR+phqqUU
ADl6n0SqWHZLCH1o6EpFPA6M3ImOFuy/NyV+4NcXfqSR/dTs8NhYS0ZR2awO6anz
MBYGJYtFETVMcOl6SBywIrCBqEZYlTKJWi2xEuPxYkekqMuE4mkmm0G1eKkwFwZ2
E+PDhay+D6nYPp8EJOUWM6PTjmuRAyzN3YbozZAqSPt1L8/aZfUfUmoEAiimSul6
kIION8lcp+qxCYLRC7CNRoJ4cZPKndhlwA/7zirRcoTzVM3BIMEivP8G7j1xR3dH
ILoHnGXOEVjEd4Ue5JQvQiJ3xSljsJ6j1gtBzzRTSK8LjBmHie9nh9Iu2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqdXJyYc5fFvceT+NqigKYh/radMB8GA1UdIwQY
MBaAFATF8dF3nrcJCQNl25gpF639D4BJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk1YeDBYZWV0d2tKQTJYYm1Da1hyZjBQZ0VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC83MGIzM2ItZDFlYi00YmJiLTk3ZDYt
MDU5MjQ1M2RmN2QyLzEvQk1YeDBYZWV0d2tKQTJYYm1Da1hyZjBQZ0VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC83MGIzM2ItZDFlYi00YmJiLTk3ZDYtMDU5MjQ1M2RmN2Qy
LzEvQk1YeDBYZWV0d2tKQTJYYm1Da1hyZjBQZ0VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANO1poOtn
ic4wphLx/EllrikO58uIRUHXtljevDxAioMlmO9vPS3FK8ZLs+I+kxrfc9a771Ro
ofbKESVfWS4i9MQCqjSUtMCUxKu6aFE1bfiLgb5bbSCW5bit+r3LvCVpDmZN2L4X
TXYcjh/FCpfH3tz7jK/3ohBoNdNd9e8gLh834LCI645rOISTdCliiPH5kqU7eShu
mHIGA96yLBQuBjJixOQSxgKZT4ITOyufyOq5vKBS99FFPrpGaZDOmeOVPmkbIzWU
ivjPTXsBYk+qggxdgbBaVwGzZLXxjODQFi0ZJpAElp3CLP7cKCDdyTJ6je+942+d
GJXC6UQduSek5w==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:05:21 2025 by rpki-client