Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.mft
File: bF4zDPom_UTUKU_Nvd-9iVEMakg.mft (raw, json)
Hash identifier: B9wUHl/Wizj9nXCAvRkJBQgTqI+frlXWjldYo0bdWSw=
Subject key identifier: BD:9F:F7:E2:DE:33:BA:FD:E4:8A:54:6A:BE:FE:A5:81:60:AA:62:B5
Authority key identifier: 6C:5E:33:0C:FA:26:FD:44:D4:29:4F:CD:BD:DF:BD:89:51:0C:6A:48
Certificate issuer: /CN=6c5e330cfa26fd44d4294fcdbddfbd89510c6a48
Certificate serial: 0196760CA754E4C8D5EB53919439FB0519BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF4zDPom_UTUKU_Nvd-9iVEMakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.mft
Manifest number: 0BA8
Signing time: Sun 27 Apr 2025 07:01:02 +0000
Manifest this update: Sun 27 Apr 2025 07:01:02 +0000
Manifest next update: Mon 28 Apr 2025 07:01:02 +0000
Files and hashes: 1: OWnzalrEaHNzu4AsD29DhoKa8Xs.roa (hash: w7GvV8HbETtyhTF6uR9vlKySlaF/SU8e2H/ocdNt7lY=)
2: bF4zDPom_UTUKU_Nvd-9iVEMakg.crl (hash: VCGJZAJx96dW2dn5yIPSnZ5yG0GfQ/qU4I/ZKr3vC0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bF4zDPom_UTUKU_Nvd-9iVEMakg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:a7:54:e4:c8:d5:eb:53:91:94:39:fb:05:19:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5e330cfa26fd44d4294fcdbddfbd89510c6a48
Validity
Not Before: Apr 27 07:01:02 2025 GMT
Not After : Apr 28 07:01:02 2025 GMT
Subject: CN=bd9ff7e2de33bafde48a546abefea58160aa62b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c6:7c:cf:38:23:5b:7f:f5:06:42:0c:3c:10:
7a:8f:6c:bb:98:c0:b6:0e:99:da:a1:4b:88:44:49:
83:cb:3a:c9:e0:20:4c:5f:eb:39:c7:f2:63:e9:0a:
f5:7d:33:d7:c6:a7:94:a1:16:0a:33:75:06:7f:4d:
2f:67:96:83:51:27:f3:a3:7d:21:07:79:17:bc:5d:
1b:6a:01:6c:15:ad:5f:18:1f:26:1e:3e:34:cd:13:
74:b4:f8:6a:52:d3:3d:fd:52:6f:eb:9b:fa:f2:a4:
89:a3:59:eb:f1:5e:f2:64:b2:6e:cc:76:9e:ef:0c:
9a:43:40:d7:5f:bf:fa:46:ef:39:08:26:ce:cc:4c:
34:84:08:2c:91:a5:46:15:17:d5:a5:80:3c:ad:bc:
72:90:cd:9b:da:97:13:cf:74:41:d2:cb:34:af:f5:
c7:2f:0c:0b:db:93:95:08:77:5d:65:58:2c:87:6e:
b5:9b:e5:70:9d:74:ca:28:81:99:e1:25:05:55:f9:
5e:a1:29:3c:3c:ec:89:a8:2c:df:80:a5:7e:e8:11:
5d:f5:6e:5a:0f:e9:59:c1:7d:4e:fc:36:1c:e0:b0:
8c:04:33:40:84:41:e5:bd:5a:3f:ea:55:e8:d0:d1:
1c:c7:fc:8f:ef:78:36:d9:a8:6f:12:ae:8e:95:28:
60:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9F:F7:E2:DE:33:BA:FD:E4:8A:54:6A:BE:FE:A5:81:60:AA:62:B5
X509v3 Authority Key Identifier:
keyid:6C:5E:33:0C:FA:26:FD:44:D4:29:4F:CD:BD:DF:BD:89:51:0C:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF4zDPom_UTUKU_Nvd-9iVEMakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ef:02:a1:f0:31:02:9c:bf:78:74:7d:97:de:87:a6:dd:1d:
89:d1:62:07:0d:e6:c7:b8:98:52:5a:ba:00:72:6c:f6:66:91:
ca:a0:74:34:7a:7a:c6:e7:45:68:42:75:2f:7e:06:d0:d8:02:
dc:77:cc:b3:4e:42:b4:cc:66:35:99:a7:73:c3:ef:49:14:6e:
7d:67:fc:90:7c:85:34:7d:bb:1e:61:67:4a:b7:a8:34:31:63:
87:01:e8:b0:3f:c5:d0:64:65:33:47:8d:1a:e3:4e:67:9e:0a:
cb:a1:68:7c:cc:33:c4:b9:09:e4:71:99:a9:59:ac:a4:cd:ab:
1d:a5:57:ff:60:ca:5b:c2:af:ed:a9:d4:26:84:1e:ef:24:2d:
67:7b:30:b6:27:49:f7:ec:4b:19:b7:75:e1:bc:95:bd:71:bf:
54:7c:3c:fb:19:8d:d2:91:67:41:62:50:be:1d:96:87:e4:61:
55:ae:b7:4c:ed:a7:5a:89:d2:6d:a1:fb:d9:83:46:82:f1:47:
e3:65:71:b9:18:e9:37:4e:5b:b6:08:e1:ad:dc:04:60:01:1a:
40:64:98:af:0d:94:eb:05:17:5e:5d:f6:84:f7:00:54:f9:f8:
92:4b:eb:71:8e:5c:ed:fc:d1:4f:48:b8:63:44:95:ad:6f:84:
5c:7f:62:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2DKdU5MjV61ORlDn7BRm7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNWUzMzBjZmEyNmZkNDRkNDI5NGZjZGJkZGZiZDg5NTEw
YzZhNDgwHhcNMjUwNDI3MDcwMTAyWhcNMjUwNDI4MDcwMTAyWjAzMTEwLwYDVQQD
EyhiZDlmZjdlMmRlMzNiYWZkZTQ4YTU0NmFiZWZlYTU4MTYwYWE2MmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcZ8zzgjW3/1BkIMPBB6j2y7mMC2
DpnaoUuIREmDyzrJ4CBMX+s5x/Jj6Qr1fTPXxqeUoRYKM3UGf00vZ5aDUSfzo30h
B3kXvF0bagFsFa1fGB8mHj40zRN0tPhqUtM9/VJv65v68qSJo1nr8V7yZLJuzHae
7wyaQ0DXX7/6Ru85CCbOzEw0hAgskaVGFRfVpYA8rbxykM2b2pcTz3RB0ss0r/XH
LwwL25OVCHddZVgsh261m+VwnXTKKIGZ4SUFVfleoSk8POyJqCzfgKV+6BFd9W5a
D+lZwX1O/DYc4LCMBDNAhEHlvVo/6lXo0NEcx/yP73g22ahvEq6OlShg5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL2f9+LeM7r95IpUar7+pYFgqmK1MB8GA1UdIwQY
MBaAFGxeMwz6Jv1E1ClPzb3fvYlRDGpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkY0ekRQb21fVVRVS1VfTnZkLTlpVkVNYWtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi84ZWFiY2QtZTZlOS00ZjQzLWJhNmMt
ZGEyMzEyYjY1YTUwLzEvYkY0ekRQb21fVVRVS1VfTnZkLTlpVkVNYWtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi84ZWFiY2QtZTZlOS00ZjQzLWJhNmMtZGEyMzEyYjY1YTUw
LzEvYkY0ekRQb21fVVRVS1VfTnZkLTlpVkVNYWtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS+8CofAx
Apy/eHR9l96Hpt0didFiBw3mx7iYUlq6AHJs9maRyqB0NHp6xudFaEJ1L34G0NgC
3HfMs05CtMxmNZmnc8PvSRRufWf8kHyFNH27HmFnSreoNDFjhwHosD/F0GRlM0eN
GuNOZ54Ky6FofMwzxLkJ5HGZqVmspM2rHaVX/2DKW8Kv7anUJoQe7yQtZ3swtidJ
9+xLGbd14byVvXG/VHw8+xmN0pFnQWJQvh2Wh+RhVa63TO2nWonSbaH72YNGgvFH
42VxuRjpN05btgjhrdwEYAEaQGSYrw2U6wUXXl32hPcAVPn4kkvrcY5c7fzRT0i4
Y0SVrW+EXH9ihQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:11:25 2025 by rpki-client