Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
File: BwkPumY7Byu1TMfUnoigOAN0y24.mft (raw, json)
Hash identifier: oLQtz4bvHk4Va/0PMaVKt30tdjaGaHxXHH4FQL+4vdE=
Subject key identifier: 53:32:1D:00:04:01:A5:13:EC:21:44:DB:B9:19:FC:05:0C:8F:7F:65
Authority key identifier: 07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
Certificate issuer: /CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Certificate serial: 01974A43B8B9DC781DBA1C5EFFA8F88DD6AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 12:00:41 +0000
Manifest this update: Sat 07 Jun 2025 12:00:41 +0000
Manifest next update: Sun 08 Jun 2025 12:00:41 +0000
Files and hashes: 1: BwkPumY7Byu1TMfUnoigOAN0y24.crl (hash: tZRZr7dJF9PWaEElR3oDryW3icvQW9yVObszzzFuFaQ=)
2: NQNN2zI--5W9phAw1FPsrLGEYwA.roa (hash: vTr80Rx2MWq5UoQZbNWzT5PuHgBwID0hr0ao7hRy9dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:b8:b9:dc:78:1d:ba:1c:5e:ff:a8:f8:8d:d6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Validity
Not Before: Jun 7 12:00:41 2025 GMT
Not After : Jun 8 12:00:41 2025 GMT
Subject: CN=53321d000401a513ec2144dbb919fc050c8f7f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e6:e2:fe:f3:0e:8d:56:55:7a:99:37:9f:d9:
c6:fb:b1:2d:e9:f0:9c:80:c5:bc:5e:8b:91:e0:ba:
4b:62:6f:83:e7:fa:3e:9a:76:ad:b8:1e:94:aa:ba:
d3:16:9f:0b:4c:4d:02:8b:b5:72:d1:6b:a2:e4:55:
18:ec:21:87:16:89:a7:71:1e:a3:ab:34:d8:1a:0b:
bd:b8:2c:16:5c:d4:88:b5:cb:86:c2:7e:16:ac:3d:
48:91:27:27:e6:b4:9b:ad:d9:94:67:fb:ce:f2:48:
24:0d:ad:5d:9b:74:3c:48:7b:26:de:17:ec:d3:fa:
5e:6d:2b:41:c6:6d:cc:7a:65:08:e1:f9:65:c6:1e:
b8:cd:58:05:6a:0e:c8:a7:35:81:4b:de:26:5b:57:
55:95:a4:6b:8f:af:38:30:69:fe:22:66:c2:17:dd:
a8:21:01:fd:d5:f4:59:3e:51:71:7c:97:c0:c6:dd:
f2:5b:27:2a:36:60:1d:ab:2c:1d:71:b9:c3:ca:b7:
45:15:42:b5:d6:82:72:96:2a:e7:a4:d7:04:6f:92:
5c:87:19:11:47:78:37:30:42:b3:07:07:37:5a:91:
b1:e1:4d:08:27:f8:1b:cd:5c:4e:b4:b6:c5:6c:b1:
c9:92:08:a4:82:e7:23:72:ab:9a:ca:e6:93:58:c2:
d2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:32:1D:00:04:01:A5:13:EC:21:44:DB:B9:19:FC:05:0C:8F:7F:65
X509v3 Authority Key Identifier:
keyid:07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:7d:16:74:e8:67:62:1d:94:7e:59:92:67:a5:07:73:46:f0:
60:82:45:ae:aa:b3:fc:91:ab:d3:59:97:62:da:c4:21:d9:75:
a4:e2:1b:9f:96:fc:12:e0:73:67:58:a1:14:98:ec:b9:59:21:
4f:5d:97:80:53:fc:5a:84:15:c1:1a:e3:f8:59:af:76:19:8c:
d0:08:62:ca:4f:1f:d9:55:ba:5d:ca:c8:3d:5f:b1:61:87:ec:
ee:1b:87:5d:ce:35:f4:0f:c4:ec:b9:47:65:8c:b8:5d:fe:98:
6f:3d:11:56:22:9e:29:b6:ec:d4:51:e2:8f:0e:c4:25:cb:ec:
e8:d1:a6:de:95:c7:7d:04:98:fa:2e:93:69:3b:b9:eb:bc:2a:
eb:0c:21:3f:f7:32:d0:d3:52:c2:ab:b3:08:3d:1b:6d:bf:72:
16:6f:86:68:64:63:4a:c7:91:2a:d8:5e:87:a7:54:e4:4d:fc:
48:dd:66:99:2f:d7:ae:f5:c0:78:9a:fa:85:fb:b8:f9:dd:6a:
db:93:a7:42:78:b6:47:d0:79:f1:bb:9f:ca:6a:a1:f3:ad:cf:
ca:41:23:79:d3:21:5f:2b:0d:0f:07:67:f0:c3:a0:ba:2e:e8:
b6:b6:48:92:7e:5c:50:74:26:f3:83:ac:82:b9:ec:a1:26:7f:
5f:0b:04:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKQ7i53Hgduhxe/6j4jdaqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MDkwZmJhNjYzYjA3MmJiNTRjYzdkNDllODhhMDM4MDM3
NGNiNmUwHhcNMjUwNjA3MTIwMDQxWhcNMjUwNjA4MTIwMDQxWjAzMTEwLwYDVQQD
Eyg1MzMyMWQwMDA0MDFhNTEzZWMyMTQ0ZGJiOTE5ZmMwNTBjOGY3ZjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+bi/vMOjVZVepk3n9nG+7Et6fCc
gMW8XouR4LpLYm+D5/o+mnatuB6UqrrTFp8LTE0Ci7Vy0Wui5FUY7CGHFomncR6j
qzTYGgu9uCwWXNSItcuGwn4WrD1IkScn5rSbrdmUZ/vO8kgkDa1dm3Q8SHsm3hfs
0/pebStBxm3MemUI4fllxh64zVgFag7IpzWBS94mW1dVlaRrj684MGn+ImbCF92o
IQH91fRZPlFxfJfAxt3yWycqNmAdqywdcbnDyrdFFUK11oJylirnpNcEb5JchxkR
R3g3MEKzBwc3WpGx4U0IJ/gbzVxOtLbFbLHJkgikgucjcquayuaTWMLSGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFMyHQAEAaUT7CFE27kZ/AUMj39lMB8GA1UdIwQY
MBaAFAcJD7pmOwcrtUzH1J6IoDgDdMtuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQndrUHVtWTdCeXUxVE1mVW5vaWdPQU4weTI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hMDczNDItMTc0Mi00MWExLThiYzct
MDFhMjhhNzZjY2Y0LzEvQndrUHVtWTdCeXUxVE1mVW5vaWdPQU4weTI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hMDczNDItMTc0Mi00MWExLThiYzctMDFhMjhhNzZjY2Y0
LzEvQndrUHVtWTdCeXUxVE1mVW5vaWdPQU4weTI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd30WdOhn
Yh2UflmSZ6UHc0bwYIJFrqqz/JGr01mXYtrEIdl1pOIbn5b8EuBzZ1ihFJjsuVkh
T12XgFP8WoQVwRrj+FmvdhmM0Ahiyk8f2VW6XcrIPV+xYYfs7huHXc419A/E7LlH
ZYy4Xf6Ybz0RViKeKbbs1FHijw7EJcvs6NGm3pXHfQSY+i6TaTu567wq6wwhP/cy
0NNSwquzCD0bbb9yFm+GaGRjSseRKtheh6dU5E38SN1mmS/XrvXAeJr6hfu4+d1q
25OnQni2R9B58bufymqh863PykEjedMhXysNDwdn8MOgui7otrZIkn5cUHQm84Os
grnsoSZ/XwsEKA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 21:50:32 2025 by rpki-client