Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft
File: bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft (raw, json)
Hash identifier: XzRMCHn0BLEIsXHeFiMp7A62ehj95OH1oHuWltq0M7w=
Subject key identifier: DC:23:C4:18:3B:5A:85:99:55:45:98:70:F5:37:E0:7F:73:1B:48:57
Authority key identifier: 6C:95:FD:CA:36:7B:CE:19:E2:F2:53:B7:8F:36:08:FF:34:14:28:C9
Certificate issuer: /CN=6c95fdca367bce19e2f253b78f3608ff341428c9
Certificate serial: 0196A91E025A22D4B3A7196D33534BB4F5A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJX9yjZ7zhni8lO3jzYI_zQUKMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft
Manifest number: F4
Signing time: Wed 07 May 2025 05:00:38 +0000
Manifest this update: Wed 07 May 2025 05:00:38 +0000
Manifest next update: Thu 08 May 2025 05:00:38 +0000
Files and hashes: 1: Lf1xzTXAc6SiNDJtIVl8iWMf5b4.roa (hash: Mlu5t33KkThbOioHblpilqA5fDGAJvYvW4onNzjvD5s=)
2: bJX9yjZ7zhni8lO3jzYI_zQUKMk.crl (hash: 8LPj0ZJuTkpVK+7D9JLDhSGNEGxCbP5e9tZEoEhVFps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bJX9yjZ7zhni8lO3jzYI_zQUKMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:1e:02:5a:22:d4:b3:a7:19:6d:33:53:4b:b4:f5:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c95fdca367bce19e2f253b78f3608ff341428c9
Validity
Not Before: May 7 05:00:38 2025 GMT
Not After : May 8 05:00:38 2025 GMT
Subject: CN=dc23c4183b5a859955459870f537e07f731b4857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:36:f5:23:1f:a3:16:db:ad:dd:93:c3:e3:20:
36:f5:23:9a:cf:1e:05:b9:8d:5b:ee:85:cf:2d:fd:
84:33:c7:cd:7a:3e:90:46:da:77:25:56:a8:91:95:
ab:40:27:f9:c2:8e:63:0e:f3:77:b4:dc:08:61:1a:
fc:7c:86:e5:f0:92:7d:6c:6f:33:16:5b:76:83:97:
a3:a4:89:90:0d:a4:e5:4e:9b:58:34:d9:39:31:63:
a6:84:1b:5b:66:9d:4b:77:13:4c:a4:f9:d5:c4:c8:
0f:ac:e7:ae:65:8c:9b:ef:b5:5c:7d:3c:bb:a4:90:
a6:ee:ee:76:b5:9a:70:8f:9c:16:92:33:41:bb:e4:
d6:85:68:5a:5e:e7:09:6f:8b:74:85:b8:db:05:74:
f6:98:82:96:3f:05:e1:d8:d3:3d:83:82:a0:d0:bf:
8d:c1:90:39:c2:ec:f3:6d:ef:b6:7a:6d:a1:f3:af:
7b:a1:8c:04:0b:07:96:77:62:38:e2:27:8b:d0:5e:
a9:18:fc:11:0d:7e:4d:99:23:ee:e1:fa:73:b7:d2:
b1:d4:7b:78:01:9c:6d:fb:e2:72:4c:d3:b5:6f:6e:
43:d3:d8:f3:57:3d:b4:5b:9b:38:fe:4e:61:bd:ae:
92:62:7b:fe:b0:29:f0:6e:d9:7b:0f:06:fa:77:78:
a4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:23:C4:18:3B:5A:85:99:55:45:98:70:F5:37:E0:7F:73:1B:48:57
X509v3 Authority Key Identifier:
keyid:6C:95:FD:CA:36:7B:CE:19:E2:F2:53:B7:8F:36:08:FF:34:14:28:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJX9yjZ7zhni8lO3jzYI_zQUKMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:bb:92:a2:d1:1b:5e:49:b2:2c:99:2a:5e:82:ee:83:c9:7a:
9b:56:bf:4f:e3:73:da:05:d4:89:70:aa:d9:c8:42:0b:ec:61:
47:ca:60:27:85:49:8e:d6:f3:d8:58:6a:c7:f8:b0:dd:28:ea:
dc:a3:f0:6b:01:a8:8c:9e:8e:2d:f4:31:4f:12:13:6f:4e:ce:
0d:c7:d1:71:75:e4:59:26:ce:a9:0c:df:cf:e0:fc:a4:3d:ba:
1c:42:8f:e6:e3:3f:6e:a7:a3:dd:c8:e8:11:b4:e4:3e:0c:6c:
87:46:ef:e6:58:fc:3d:96:63:77:8c:04:2d:1e:f4:28:27:ca:
de:2a:77:9c:23:ee:0e:69:46:41:02:ce:0f:d6:3c:fb:75:a1:
8c:75:ca:32:cf:fb:5b:75:ab:be:f2:d6:9f:42:ab:1b:d3:16:
31:5e:48:26:1c:ef:3b:5d:b8:9d:91:4e:dc:8a:3d:72:ab:5a:
4c:6f:49:90:24:d4:e5:46:3e:fe:88:57:67:c1:be:88:a6:96:
c7:64:f5:31:7d:c9:fe:16:12:8a:45:50:61:d4:b6:6e:5b:3d:
76:4d:9c:2d:80:9d:e1:42:d4:3f:a7:20:df:e4:51:4a:f8:80:
07:e2:1a:9b:27:94:c6:32:ed:b4:84:bb:44:4f:21:06:88:67:
0d:9c:fc:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZapHgJaItSzpxltM1NLtPWkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOTVmZGNhMzY3YmNlMTllMmYyNTNiNzhmMzYwOGZmMzQx
NDI4YzkwHhcNMjUwNTA3MDUwMDM4WhcNMjUwNTA4MDUwMDM4WjAzMTEwLwYDVQQD
EyhkYzIzYzQxODNiNWE4NTk5NTU0NTk4NzBmNTM3ZTA3ZjczMWI0ODU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jb1Ix+jFtut3ZPD4yA29SOazx4F
uY1b7oXPLf2EM8fNej6QRtp3JVaokZWrQCf5wo5jDvN3tNwIYRr8fIbl8JJ9bG8z
Flt2g5ejpImQDaTlTptYNNk5MWOmhBtbZp1LdxNMpPnVxMgPrOeuZYyb77VcfTy7
pJCm7u52tZpwj5wWkjNBu+TWhWhaXucJb4t0hbjbBXT2mIKWPwXh2NM9g4Kg0L+N
wZA5wuzzbe+2em2h8697oYwECweWd2I44ieL0F6pGPwRDX5NmSPu4fpzt9Kx1Ht4
AZxt++JyTNO1b25D09jzVz20W5s4/k5hva6SYnv+sCnwbtl7Dwb6d3ikYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNwjxBg7WoWZVUWYcPU34H9zG0hXMB8GA1UdIwQY
MBaAFGyV/co2e84Z4vJTt482CP80FCjJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkpYOXlqWjd6aG5pOGxPM2p6WUlfelFVS01rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9mMDFhMDItNWE5ZS00NDQxLTliM2Qt
ZDVjMTg4NjJkMDI2LzEvYkpYOXlqWjd6aG5pOGxPM2p6WUlfelFVS01rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9mMDFhMDItNWE5ZS00NDQxLTliM2QtZDVjMTg4NjJkMDI2
LzEvYkpYOXlqWjd6aG5pOGxPM2p6WUlfelFVS01rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjLuSotEb
XkmyLJkqXoLug8l6m1a/T+Nz2gXUiXCq2chCC+xhR8pgJ4VJjtbz2Fhqx/iw3Sjq
3KPwawGojJ6OLfQxTxITb07ODcfRcXXkWSbOqQzfz+D8pD26HEKP5uM/bqej3cjo
EbTkPgxsh0bv5lj8PZZjd4wELR70KCfK3ip3nCPuDmlGQQLOD9Y8+3WhjHXKMs/7
W3WrvvLWn0KrG9MWMV5IJhzvO124nZFO3Io9cqtaTG9JkCTU5UY+/ohXZ8G+iKaW
x2T1MX3J/hYSikVQYdS2bls9dk2cLYCd4ULUP6cg3+RRSviAB+IamyeUxjLttIS7
RE8hBohnDZz8BA==
-----END CERTIFICATE-----
Generated at Wed May 7 07:59:04 2025 by rpki-client