Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
File: BmNp4nBctDPbBlirZm0ItnsVUdw.mft (raw, json)
Hash identifier: SeINNch9aDzN5hTS5bkFhBzbVyx5DsHJb7ROMYyUXEM=
Subject key identifier: 02:7D:D0:9D:9A:77:43:84:16:78:3A:3D:63:DE:02:39:13:4D:F8:C9
Authority key identifier: 06:63:69:E2:70:5C:B4:33:DB:06:58:AB:66:6D:08:B6:7B:15:51:DC
Certificate issuer: /CN=066369e2705cb433db0658ab666d08b67b1551dc
Certificate serial: 0196778CA1253397DB3AF74504B7C6DFA5F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
Manifest number: 1435
Signing time: Sun 27 Apr 2025 14:00:27 +0000
Manifest this update: Sun 27 Apr 2025 14:00:27 +0000
Manifest next update: Mon 28 Apr 2025 14:00:27 +0000
Files and hashes: 1: BmNp4nBctDPbBlirZm0ItnsVUdw.crl (hash: LDuuxin62DOZxdtIKwpKqY46iwSV+BhMiYyAUbOjju4=)
2: jCf5g0MNk7dChvixSvofxX26UqQ.roa (hash: EtFQAu+QfH/I3yhnfzxyM188HrZPVxzTPSpuxFHhJDw=)
3: osJ9_DR-TYLXPhwmG2ma04NJTWc.roa (hash: J9O9DuXjiOjoHZT0sNnMyGnclsGi579GC3bqlBQWEYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8c:a1:25:33:97:db:3a:f7:45:04:b7:c6:df:a5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=066369e2705cb433db0658ab666d08b67b1551dc
Validity
Not Before: Apr 27 14:00:27 2025 GMT
Not After : Apr 28 14:00:27 2025 GMT
Subject: CN=027dd09d9a77438416783a3d63de0239134df8c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f8:7c:62:c4:28:c5:d7:be:88:50:24:13:be:
ec:10:5d:ec:e9:4f:91:bc:92:4d:20:57:c1:d3:04:
8f:41:2d:25:90:87:e0:19:33:a1:08:66:48:30:2a:
2d:e4:f3:d8:2c:81:6b:82:1d:d5:b1:80:8b:3e:d4:
78:ac:66:5b:31:29:d5:9e:42:ba:1f:1f:ec:42:e4:
67:ee:3f:ce:17:33:c7:54:c1:35:99:d1:f5:05:17:
44:bc:50:33:e4:bd:df:56:9a:b1:56:ac:02:a8:00:
46:ff:b5:fe:74:c6:2a:76:10:eb:fb:df:82:07:f5:
e8:98:9c:48:fd:e6:2c:27:21:45:01:df:b5:b6:8f:
bb:09:da:4b:42:bc:22:ac:05:f7:45:c8:52:b0:60:
99:30:22:41:5f:88:66:df:56:e7:c9:5e:a4:17:5d:
cb:65:72:a4:2e:91:4a:90:d8:13:17:68:e1:ef:e2:
a7:94:1f:4c:00:95:c4:fa:a3:02:a2:ef:65:82:84:
b2:8d:3a:db:f3:60:61:e1:7a:cb:d3:92:ff:a9:88:
78:b2:0e:4c:c0:97:d3:43:82:7d:55:86:31:3e:2a:
8d:e9:9c:f3:0d:8b:9e:0f:0f:8f:4b:94:56:ed:d7:
f7:64:76:8c:6c:28:a0:d2:c2:a3:2e:c7:a2:cb:1f:
cb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:7D:D0:9D:9A:77:43:84:16:78:3A:3D:63:DE:02:39:13:4D:F8:C9
X509v3 Authority Key Identifier:
keyid:06:63:69:E2:70:5C:B4:33:DB:06:58:AB:66:6D:08:B6:7B:15:51:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:6e:13:15:ba:1e:90:c2:61:23:f5:b8:7d:00:86:3a:ca:aa:
d3:6e:09:7b:8e:c9:34:c1:a2:e7:ec:e2:56:c8:96:9c:b3:0f:
dd:6c:39:b8:fc:61:a3:ca:b8:91:7a:b7:1d:e0:70:bf:07:f1:
9e:6c:30:b9:02:29:e8:2f:7d:2d:79:ae:ca:c4:7e:85:02:bf:
0c:ae:81:58:1a:6b:da:bc:aa:01:ec:a3:fc:92:de:84:81:79:
f9:b1:8f:ba:5c:82:b7:b4:6a:e2:3f:21:8f:1d:a1:92:ef:12:
79:87:cb:68:a6:98:ff:7b:e2:c6:53:b2:41:e6:20:0e:17:3f:
a7:04:2c:02:ff:d4:f6:2f:1f:99:92:71:31:a8:24:2b:b9:8b:
8b:40:d8:bd:e1:78:10:45:56:ec:2a:5b:94:b4:f3:67:56:4d:
92:21:a4:73:75:f3:8a:4a:28:a1:04:1a:e4:56:5c:f6:c6:7a:
9a:27:27:a3:0e:17:47:6c:ab:d1:5c:67:58:c1:a5:54:a7:7a:
51:0b:ac:63:76:27:60:4b:87:33:63:af:54:d1:47:f6:5d:66:
48:9b:92:7c:45:eb:2f:b1:11:3c:c0:15:b3:ce:bb:df:ea:c8:
a0:a9:a4:75:b7:c4:53:f4:d8:3b:63:30:45:e8:4f:f9:5c:cd:
bf:03:d9:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3jKElM5fbOvdFBLfG36XxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NjM2OWUyNzA1Y2I0MzNkYjA2NThhYjY2NmQwOGI2N2Ix
NTUxZGMwHhcNMjUwNDI3MTQwMDI3WhcNMjUwNDI4MTQwMDI3WjAzMTEwLwYDVQQD
EygwMjdkZDA5ZDlhNzc0Mzg0MTY3ODNhM2Q2M2RlMDIzOTEzNGRmOGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPh8YsQoxde+iFAkE77sEF3s6U+R
vJJNIFfB0wSPQS0lkIfgGTOhCGZIMCot5PPYLIFrgh3VsYCLPtR4rGZbMSnVnkK6
Hx/sQuRn7j/OFzPHVME1mdH1BRdEvFAz5L3fVpqxVqwCqABG/7X+dMYqdhDr+9+C
B/XomJxI/eYsJyFFAd+1to+7CdpLQrwirAX3RchSsGCZMCJBX4hm31bnyV6kF13L
ZXKkLpFKkNgTF2jh7+KnlB9MAJXE+qMCou9lgoSyjTrb82Bh4XrL05L/qYh4sg5M
wJfTQ4J9VYYxPiqN6ZzzDYueDw+PS5RW7df3ZHaMbCig0sKjLseiyx/LZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJ90J2ad0OEFng6PWPeAjkTTfjJMB8GA1UdIwQY
MBaAFAZjaeJwXLQz2wZYq2ZtCLZ7FVHcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm1OcDRuQmN0RFBiQmxpclptMEl0bnNWVWR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC82NGU0OWEtNWZlMS00NWMyLTgzMTAt
MzRhOWU5OGE1Zjg2LzEvQm1OcDRuQmN0RFBiQmxpclptMEl0bnNWVWR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC82NGU0OWEtNWZlMS00NWMyLTgzMTAtMzRhOWU5OGE1Zjg2
LzEvQm1OcDRuQmN0RFBiQmxpclptMEl0bnNWVWR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU24TFboe
kMJhI/W4fQCGOsqq024Je47JNMGi5+ziVsiWnLMP3Ww5uPxho8q4kXq3HeBwvwfx
nmwwuQIp6C99LXmuysR+hQK/DK6BWBpr2ryqAeyj/JLehIF5+bGPulyCt7Rq4j8h
jx2hku8SeYfLaKaY/3vixlOyQeYgDhc/pwQsAv/U9i8fmZJxMagkK7mLi0DYveF4
EEVW7CpblLTzZ1ZNkiGkc3XzikoooQQa5FZc9sZ6micnow4XR2yr0VxnWMGlVKd6
UQusY3YnYEuHM2OvVNFH9l1mSJuSfEXrL7ERPMAVs8673+rIoKmkdbfEU/TYO2Mw
RehP+VzNvwPZ6A==
-----END CERTIFICATE-----
Generated at Sun Apr 27 19:06:22 2025 by rpki-client