Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
File: bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft (raw, json)
Hash identifier: oJObpRL2nwxN5+VvNC8JlxzjzooPjrNOWl+7Oqza5Ns=
Subject key identifier: FC:D0:1F:AC:31:2F:06:A8:FA:E4:F7:96:4F:83:38:52:65:CC:78:E7
Authority key identifier: 6C:19:5B:9B:D4:70:01:EA:B5:0F:DB:A1:DE:0D:2D:3F:45:27:F6:75
Certificate issuer: /CN=6c195b9bd47001eab50fdba1de0d2d3f4527f675
Certificate serial: 019603406A939EA287120FE90BBC56F3A542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
Manifest number: 66
Signing time: Sat 05 Apr 2025 00:01:15 +0000
Manifest this update: Sat 05 Apr 2025 00:01:15 +0000
Manifest next update: Sun 06 Apr 2025 00:01:15 +0000
Files and hashes: 1: MB79B-8QZwUqYrXc2Ibwogq_qLQ.roa (hash: bNBfBbjDpqRStExCWEma6tP6lj9BYj7p2ZAmcoBXfmY=)
2: bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl (hash: 5dxP2rRmKORHoUigfqBVFeuuWTP1QHry5zl+7p2sSeM=)
3: jf4WdQ24BygRnLqj51WchS5928k.roa (hash: /f6JdSqZIG39wyf+D4unjoQWcyolGzjFS4yjumA6E0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:03:40:6a:93:9e:a2:87:12:0f:e9:0b:bc:56:f3:a5:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c195b9bd47001eab50fdba1de0d2d3f4527f675
Validity
Not Before: Apr 5 00:01:15 2025 GMT
Not After : Apr 6 00:01:15 2025 GMT
Subject: CN=fcd01fac312f06a8fae4f7964f83385265cc78e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6b:36:d3:03:1f:eb:39:34:2c:b5:1a:d2:97:
88:67:86:77:c1:5a:ca:ab:14:ed:fa:35:dd:81:fa:
dc:c1:ce:c6:20:b2:b3:12:f9:86:2d:7c:b8:fa:51:
e8:00:61:66:9c:6c:1f:24:c3:a3:33:51:69:c2:ef:
2b:93:25:80:76:34:5a:c0:dd:2a:a5:dd:a4:05:f3:
81:e2:58:60:95:00:bd:44:85:e0:8b:ee:ce:d0:26:
b0:a1:e2:01:39:43:5d:c6:cf:9f:b4:8e:48:51:16:
08:e2:bc:bf:b8:44:f4:49:3f:bc:74:f2:cf:7a:6f:
2f:d8:bb:e6:d9:dd:d8:60:44:ab:7f:da:82:82:10:
41:4f:b3:2c:cd:0b:1c:0b:70:b3:7f:0f:06:46:2b:
d8:8f:20:17:37:e0:43:87:99:5a:5e:a2:f6:42:c3:
8b:02:bb:ee:dc:25:e6:34:3d:64:85:9e:c9:f5:93:
d4:93:0c:3c:cd:37:94:d7:36:3e:28:b3:19:31:a2:
fe:b2:d1:6d:b2:bb:14:76:38:13:cc:58:bb:89:b7:
60:eb:76:12:82:e0:24:b7:a0:21:d9:61:40:3f:c3:
6e:6c:c7:01:41:a6:86:69:e6:ea:b0:8e:87:42:60:
e6:5f:b2:f6:fd:ba:b3:08:5d:fd:b8:35:f7:2b:e7:
07:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D0:1F:AC:31:2F:06:A8:FA:E4:F7:96:4F:83:38:52:65:CC:78:E7
X509v3 Authority Key Identifier:
keyid:6C:19:5B:9B:D4:70:01:EA:B5:0F:DB:A1:DE:0D:2D:3F:45:27:F6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:83:2f:29:ba:03:ec:89:d7:68:83:4a:bb:4d:60:ff:e4:85:
7d:69:5f:37:cd:43:2c:84:44:9c:ce:a2:48:6e:7c:50:ad:a2:
62:86:ed:71:dc:fc:00:8f:9e:17:e0:53:51:e8:60:0e:2d:cf:
0b:ef:78:00:6a:bd:82:d4:f3:90:47:83:b1:dc:a8:fb:97:7c:
18:c0:5b:88:7c:57:02:97:19:54:c9:d7:0f:08:e9:fa:6c:05:
f9:4e:4b:43:cb:7d:62:eb:c8:4d:c1:db:97:34:55:cd:96:9d:
d8:e4:fc:26:34:92:46:fd:cb:c1:fc:04:85:37:e4:ec:8d:d3:
88:54:90:9d:16:b2:f1:7a:8c:46:04:8f:8e:ab:58:fc:89:41:
32:10:8f:57:cf:17:a2:42:39:24:ea:cc:01:05:a6:49:26:58:
81:ba:5b:bc:96:01:6b:8d:21:aa:9c:3d:36:2f:a7:5d:db:c1:
a9:d3:04:76:af:53:a8:1c:08:e5:93:fd:0e:f0:4f:0b:5d:97:
02:a7:05:f9:98:30:3b:f4:4b:1d:e4:2b:df:dd:15:28:c5:c7:
3b:5c:3e:a8:e3:0e:3d:0e:36:4e:22:fa:81:60:74:ab:da:f5:
05:94:1f:18:dd:01:f0:2f:b0:f0:48:ad:8f:d8:e8:ab:4a:c0:
58:5b:51:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYDQGqTnqKHEg/pC7xW86VCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMTk1YjliZDQ3MDAxZWFiNTBmZGJhMWRlMGQyZDNmNDUy
N2Y2NzUwHhcNMjUwNDA1MDAwMTE1WhcNMjUwNDA2MDAwMTE1WjAzMTEwLwYDVQQD
EyhmY2QwMWZhYzMxMmYwNmE4ZmFlNGY3OTY0ZjgzMzg1MjY1Y2M3OGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ms20wMf6zk0LLUa0peIZ4Z3wVrK
qxTt+jXdgfrcwc7GILKzEvmGLXy4+lHoAGFmnGwfJMOjM1Fpwu8rkyWAdjRawN0q
pd2kBfOB4lhglQC9RIXgi+7O0CawoeIBOUNdxs+ftI5IURYI4ry/uET0ST+8dPLP
em8v2Lvm2d3YYESrf9qCghBBT7MszQscC3Czfw8GRivYjyAXN+BDh5laXqL2QsOL
Arvu3CXmND1khZ7J9ZPUkww8zTeU1zY+KLMZMaL+stFtsrsUdjgTzFi7ibdg63YS
guAkt6Ah2WFAP8NubMcBQaaGaebqsI6HQmDmX7L2/bqzCF39uDX3K+cHnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPzQH6wxLwao+uT3lk+DOFJlzHjnMB8GA1UdIwQY
MBaAFGwZW5vUcAHqtQ/bod4NLT9FJ/Z1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkJsYm05UndBZXExRDl1aDNnMHRQMFVuOW5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8wMTBkM2QtMWJhOC00YTk2LTgyMTIt
OTRhYzhhZjFiZmNmLzEvYkJsYm05UndBZXExRDl1aDNnMHRQMFVuOW5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8wMTBkM2QtMWJhOC00YTk2LTgyMTItOTRhYzhhZjFiZmNm
LzEvYkJsYm05UndBZXExRDl1aDNnMHRQMFVuOW5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC4MvKboD
7InXaINKu01g/+SFfWlfN81DLIREnM6iSG58UK2iYobtcdz8AI+eF+BTUehgDi3P
C+94AGq9gtTzkEeDsdyo+5d8GMBbiHxXApcZVMnXDwjp+mwF+U5LQ8t9YuvITcHb
lzRVzZad2OT8JjSSRv3LwfwEhTfk7I3TiFSQnRay8XqMRgSPjqtY/IlBMhCPV88X
okI5JOrMAQWmSSZYgbpbvJYBa40hqpw9Ni+nXdvBqdMEdq9TqBwI5ZP9DvBPC12X
AqcF+ZgwO/RLHeQr390VKMXHO1w+qOMOPQ42TiL6gWB0q9r1BZQfGN0B8C+w8Eit
j9joq0rAWFtRHg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:56 2025 by rpki-client