Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
File: B8YQsqBtsYMYVLZybDMJAzYodBU.mft (raw, json)
Hash identifier: SrHdKx4VJwcujB4oXaHHrRk0FpYhoxgKGLCtFtHVNkc=
Subject key identifier: 6A:40:CD:77:8B:03:08:D8:1E:D8:EC:50:1A:A3:2B:D1:7B:90:80:81
Authority key identifier: 07:C6:10:B2:A0:6D:B1:83:18:54:B6:72:6C:33:09:03:36:28:74:15
Certificate issuer: /CN=07c610b2a06db1831854b6726c33090336287415
Certificate serial: 01964F6D284AE73C2B28B3E91B42926AED1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 19:01:15 +0000
Manifest this update: Sat 19 Apr 2025 19:01:15 +0000
Manifest next update: Sun 20 Apr 2025 19:01:15 +0000
Files and hashes: 1: B8YQsqBtsYMYVLZybDMJAzYodBU.crl (hash: d/uaklw2Sz9+yKK8yknFxDq0K5+RgAl4ES7OOjZgKqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:28:4a:e7:3c:2b:28:b3:e9:1b:42:92:6a:ed:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c610b2a06db1831854b6726c33090336287415
Validity
Not Before: Apr 19 19:01:15 2025 GMT
Not After : Apr 20 19:01:15 2025 GMT
Subject: CN=6a40cd778b0308d81ed8ec501aa32bd17b908081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8c:14:33:ab:09:03:0a:86:90:ff:ac:16:5f:
04:8d:e0:30:2e:47:ea:77:51:ef:cc:4b:c2:7e:41:
6d:79:32:97:2a:df:e9:15:b0:66:04:eb:30:6d:c1:
68:26:3a:33:a1:8b:7c:ea:68:ee:13:99:31:9f:33:
11:1c:77:39:9f:63:fa:ed:4b:ae:ab:24:ee:a8:1d:
96:85:92:c8:9b:5b:57:1e:8d:93:1a:bc:08:ba:1b:
2e:04:10:90:b9:29:74:7e:13:d6:a4:3e:ba:72:23:
78:53:22:0f:63:d8:25:30:67:7a:9c:99:50:da:55:
a6:04:cc:2b:4e:b3:3e:13:30:49:c7:46:73:5d:19:
77:a6:e8:1a:0a:9b:f8:1f:74:95:38:29:c9:b7:b2:
bf:35:c3:f3:97:29:67:34:6e:ca:0c:8d:2c:2e:62:
43:ce:ae:ed:95:13:bc:89:be:a8:40:65:9d:18:d9:
40:99:57:ea:05:74:fe:6b:b1:2f:8c:12:d4:ef:4f:
f5:e6:6b:e5:0d:bb:e0:b8:79:0b:f6:ba:07:99:b0:
51:93:7a:af:61:2e:4f:97:50:79:1d:45:22:90:bc:
2d:0f:75:c5:f4:d1:52:2b:ce:df:c1:1a:d0:8f:53:
0f:11:fd:b7:86:d2:c7:ea:f8:ff:fa:d0:27:10:79:
61:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:40:CD:77:8B:03:08:D8:1E:D8:EC:50:1A:A3:2B:D1:7B:90:80:81
X509v3 Authority Key Identifier:
keyid:07:C6:10:B2:A0:6D:B1:83:18:54:B6:72:6C:33:09:03:36:28:74:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:56:18:8e:b0:bf:80:e0:6e:ab:10:78:57:1f:1c:3f:37:d3:
a2:71:b6:e7:ba:fe:b7:7e:28:be:8f:50:37:71:9c:0e:e1:58:
fa:52:4d:75:60:1f:7f:a9:9f:94:22:2f:c5:3e:90:7d:0f:36:
30:f3:92:67:f3:68:3b:e9:45:d2:8c:2f:27:08:86:20:54:da:
b6:ea:53:20:6f:84:87:3b:99:c1:b3:2e:c1:f4:62:d6:a7:00:
16:87:e5:c8:ac:72:2a:d9:c2:b9:81:8d:cc:3c:35:3a:fc:d4:
71:7a:81:22:71:60:f6:bf:ac:1b:bf:f4:63:64:d3:76:fa:9b:
52:45:a5:53:cf:ab:b9:ee:2c:73:49:8e:fd:89:9e:ab:8b:f0:
04:0e:8a:4f:a0:97:7e:21:c4:d1:46:f4:79:50:f7:29:35:65:
e5:9d:7e:33:6e:4a:1c:13:ca:7f:33:13:21:58:7b:b3:e7:bc:
67:67:d1:4c:47:9b:79:95:e4:b3:94:08:b4:28:50:b3:37:bc:
36:21:a5:27:10:ce:65:2e:e7:2b:71:9a:54:6e:c1:6d:a9:45:
b5:b3:6d:93:77:cf:aa:54:b6:93:45:a2:61:14:29:d4:34:a1:
74:26:7b:07:4b:a2:b6:dd:96:60:cb:61:ad:66:90:a0:cd:3e:
bd:89:92:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZPbShK5zwrKLPpG0KSau0fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YzYxMGIyYTA2ZGIxODMxODU0YjY3MjZjMzMwOTAzMzYy
ODc0MTUwHhcNMjUwNDE5MTkwMTE1WhcNMjUwNDIwMTkwMTE1WjAzMTEwLwYDVQQD
Eyg2YTQwY2Q3NzhiMDMwOGQ4MWVkOGVjNTAxYWEzMmJkMTdiOTA4MDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIwUM6sJAwqGkP+sFl8EjeAwLkfq
d1HvzEvCfkFteTKXKt/pFbBmBOswbcFoJjozoYt86mjuE5kxnzMRHHc5n2P67Uuu
qyTuqB2WhZLIm1tXHo2TGrwIuhsuBBCQuSl0fhPWpD66ciN4UyIPY9glMGd6nJlQ
2lWmBMwrTrM+EzBJx0ZzXRl3pugaCpv4H3SVOCnJt7K/NcPzlylnNG7KDI0sLmJD
zq7tlRO8ib6oQGWdGNlAmVfqBXT+a7EvjBLU70/15mvlDbvguHkL9roHmbBRk3qv
YS5Pl1B5HUUikLwtD3XF9NFSK87fwRrQj1MPEf23htLH6vj/+tAnEHlhrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpAzXeLAwjYHtjsUBqjK9F7kICBMB8GA1UdIwQY
MBaAFAfGELKgbbGDGFS2cmwzCQM2KHQVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjhZUXNxQnRzWU1ZVkxaeWJETUpBellvZEJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi83YzExYjctN2MyYy00ZjA1LTkwMTct
ODZjMDE2ZDdhNzNjLzEvQjhZUXNxQnRzWU1ZVkxaeWJETUpBellvZEJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi83YzExYjctN2MyYy00ZjA1LTkwMTctODZjMDE2ZDdhNzNj
LzEvQjhZUXNxQnRzWU1ZVkxaeWJETUpBellvZEJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjVYYjrC/
gOBuqxB4Vx8cPzfTonG257r+t34ovo9QN3GcDuFY+lJNdWAff6mflCIvxT6QfQ82
MPOSZ/NoO+lF0owvJwiGIFTatupTIG+EhzuZwbMuwfRi1qcAFoflyKxyKtnCuYGN
zDw1OvzUcXqBInFg9r+sG7/0Y2TTdvqbUkWlU8+rue4sc0mO/Ymeq4vwBA6KT6CX
fiHE0Ub0eVD3KTVl5Z1+M25KHBPKfzMTIVh7s+e8Z2fRTEebeZXks5QItChQsze8
NiGlJxDOZS7nK3GaVG7BbalFtbNtk3fPqlS2k0WiYRQp1DShdCZ7B0uitt2WYMth
rWaQoM0+vYmS9Q==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:15:05 2025 by rpki-client