Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
File: B1_bDeQFE0eiHpYorEFzZzTLTys.mft (raw, json)
Hash identifier: yiYJfOW72I+sG6yFw5kleTqaAgyNTvWpKqNx8o99/Pw=
Subject key identifier: C9:2A:60:01:A4:33:37:79:B9:A7:12:65:0E:F3:4A:08:D7:11:25:79
Authority key identifier: 07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B
Certificate issuer: /CN=075fdb0de4051347a21e9628ac41736734cb4f2b
Certificate serial: 0196741E7A5238644756164E6F36D25FAB6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
Manifest number: 0852
Signing time: Sat 26 Apr 2025 22:01:16 +0000
Manifest this update: Sat 26 Apr 2025 22:01:16 +0000
Manifest next update: Sun 27 Apr 2025 22:01:16 +0000
Files and hashes: 1: B1_bDeQFE0eiHpYorEFzZzTLTys.crl (hash: qSbLPwmZon9tT+FNauTp688ZEdEjr80/A269uT4JFDM=)
2: s5r9yap3tom_HtotpIwIYRM_tQI.roa (hash: nsesgmnToPnc+rmcM0u9Mw7MgCf2v2fzdAWiv7iq1Wc=)
3: y-daVj-enHGwMoAEp3dFw-2QKEo.roa (hash: 0URxQ+7I2C4N/tzneV2QeiIUIu31rOBP14ZL34RLUMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:7a:52:38:64:47:56:16:4e:6f:36:d2:5f:ab:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=075fdb0de4051347a21e9628ac41736734cb4f2b
Validity
Not Before: Apr 26 22:01:16 2025 GMT
Not After : Apr 27 22:01:16 2025 GMT
Subject: CN=c92a6001a4333779b9a712650ef34a08d7112579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9b:c5:e6:64:d3:f0:a9:90:73:63:d3:89:fb:
fe:85:32:c0:3b:4d:57:c3:66:de:94:b2:b8:b0:5d:
61:1f:0c:87:62:fa:62:7f:c8:64:27:d8:d6:e6:1f:
d3:1a:7d:31:4b:49:95:e8:bb:5e:e8:82:31:3c:7c:
e2:5f:97:de:4d:39:72:45:4b:11:08:22:ed:1e:04:
b9:95:4f:44:e2:4a:c6:84:78:a0:e5:1a:cf:98:a6:
d0:99:e4:f7:3c:0d:61:4b:8a:2b:9d:54:06:7c:90:
ca:d7:7d:1b:30:27:5d:ea:81:f0:37:d2:18:ab:bd:
93:53:d5:12:44:8a:55:35:81:84:1d:ad:2b:0c:80:
63:b4:d5:1b:07:21:be:5c:54:34:61:3c:6c:fd:ac:
a4:40:f6:23:85:94:d8:cb:d2:8c:ea:f1:a9:57:69:
1e:03:d7:83:07:49:11:03:b6:1a:dd:24:76:d9:b3:
e2:da:56:bb:38:6a:8e:a0:e6:4b:bf:05:17:16:6a:
1a:40:bd:6a:49:12:43:3c:0a:b0:71:d9:03:7d:b6:
20:e1:1e:45:2d:e3:86:d8:ed:57:f6:1a:b3:99:ee:
d5:3e:bb:b0:8e:ad:d2:03:26:7a:1f:af:32:5a:cb:
a7:0a:3d:22:c3:5b:47:f1:ff:9b:1c:ab:ed:a6:c0:
50:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2A:60:01:A4:33:37:79:B9:A7:12:65:0E:F3:4A:08:D7:11:25:79
X509v3 Authority Key Identifier:
keyid:07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:63:67:e5:81:11:69:af:97:56:10:6d:d8:6d:0d:24:3b:89:
0c:de:5f:0f:d6:4e:c8:37:ad:e9:95:cb:21:d4:6e:8d:9c:e3:
3c:25:74:f3:3c:f8:22:3a:33:e6:5f:ba:51:76:7b:fc:a5:c7:
a4:70:02:c9:07:0b:fb:21:e9:bc:3c:bc:cc:f1:82:bd:e4:1f:
31:93:f2:38:6e:d7:4a:2f:12:a5:86:02:e8:ea:a8:56:fa:2f:
ff:66:55:29:3e:1d:5b:8b:59:3e:5b:b3:4c:a0:f8:96:b0:c9:
cb:2a:ca:aa:80:0f:95:5c:0f:a1:3c:42:02:2a:0e:a6:f8:b6:
5e:6b:d0:9a:c9:75:59:3b:bc:55:aa:1f:a5:39:eb:21:c9:cb:
cb:2a:37:cd:5b:be:7d:a4:4a:66:6a:db:d8:bb:8d:ce:56:d3:
45:b6:4d:77:07:2c:93:d2:ab:37:f9:6b:a4:f0:f4:76:5d:7a:
e6:dc:8b:2d:83:17:c4:bc:28:38:ea:a3:aa:27:f5:d3:24:78:
d5:1d:c9:b7:0d:92:3d:db:52:ff:48:dc:92:5f:1a:64:b6:aa:
64:b2:9d:2b:38:ce:fb:18:42:35:4f:8f:a0:72:9f:94:1f:3e:
4f:b6:07:29:4b:e4:70:c9:04:63:7c:dc:1b:1a:e3:a7:05:17:
49:c6:36:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0HnpSOGRHVhZObzbSX6ttMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NWZkYjBkZTQwNTEzNDdhMjFlOTYyOGFjNDE3MzY3MzRj
YjRmMmIwHhcNMjUwNDI2MjIwMTE2WhcNMjUwNDI3MjIwMTE2WjAzMTEwLwYDVQQD
EyhjOTJhNjAwMWE0MzMzNzc5YjlhNzEyNjUwZWYzNGEwOGQ3MTEyNTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5vF5mTT8KmQc2PTifv+hTLAO01X
w2belLK4sF1hHwyHYvpif8hkJ9jW5h/TGn0xS0mV6Lte6IIxPHziX5feTTlyRUsR
CCLtHgS5lU9E4krGhHig5RrPmKbQmeT3PA1hS4ornVQGfJDK130bMCdd6oHwN9IY
q72TU9USRIpVNYGEHa0rDIBjtNUbByG+XFQ0YTxs/aykQPYjhZTYy9KM6vGpV2ke
A9eDB0kRA7Ya3SR22bPi2la7OGqOoOZLvwUXFmoaQL1qSRJDPAqwcdkDfbYg4R5F
LeOG2O1X9hqzme7VPruwjq3SAyZ6H68yWsunCj0iw1tH8f+bHKvtpsBQbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMkqYAGkMzd5uacSZQ7zSgjXESV5MB8GA1UdIwQY
MBaAFAdf2w3kBRNHoh6WKKxBc2c0y08rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjFfYkRlUUZFMGVpSHBZb3JFRnpaelRMVHlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yZWYwZjEtNTA4Mi00OGRmLTk0ZmUt
Zjc1MzFhMmI2MjQ3LzEvQjFfYkRlUUZFMGVpSHBZb3JFRnpaelRMVHlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8yZWYwZjEtNTA4Mi00OGRmLTk0ZmUtZjc1MzFhMmI2MjQ3
LzEvQjFfYkRlUUZFMGVpSHBZb3JFRnpaelRMVHlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATWNn5YER
aa+XVhBt2G0NJDuJDN5fD9ZOyDet6ZXLIdRujZzjPCV08zz4Ijoz5l+6UXZ7/KXH
pHACyQcL+yHpvDy8zPGCveQfMZPyOG7XSi8SpYYC6OqoVvov/2ZVKT4dW4tZPluz
TKD4lrDJyyrKqoAPlVwPoTxCAioOpvi2XmvQmsl1WTu8VaofpTnrIcnLyyo3zVu+
faRKZmrb2LuNzlbTRbZNdwcsk9KrN/lrpPD0dl165tyLLYMXxLwoOOqjqif10yR4
1R3Jtw2SPdtS/0jckl8aZLaqZLKdKzjO+xhCNU+PoHKflB8+T7YHKUvkcMkEY3zc
GxrjpwUXScY2dw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:48:10 2025 by rpki-client