Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
File: Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft (raw, json)
Hash identifier: wU2B7lfiydd4p6rV3n+e7332oSi0lFTwGjOQk0O+4uw=
Subject key identifier: A4:10:F4:CB:DD:3C:54:A7:9B:F6:54:86:85:AF:E5:21:FD:AF:1C:BC
Authority key identifier: 05:DF:1C:A3:B6:65:F2:4C:BE:10:1C:FC:2F:38:34:4D:A8:B1:76:8D
Certificate issuer: /CN=05df1ca3b665f24cbe101cfc2f38344da8b1768d
Certificate serial: 01967ED87365576B9740A0B89D3FA429B492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
Manifest number: 1513
Signing time: Tue 29 Apr 2025 00:00:36 +0000
Manifest this update: Tue 29 Apr 2025 00:00:36 +0000
Manifest next update: Wed 30 Apr 2025 00:00:36 +0000
Files and hashes: 1: Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl (hash: Uw8G2JMO5wdvt8eAywKZj23qdpCHTVNB+zeSpgqbx2k=)
2: FNPjMOoGw_qr5syHiMbZO5lzjMQ.roa (hash: 5qw3tWosyd4KlYSn8mbGOq7ldklrf0oZDzLLsc6wFlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:73:65:57:6b:97:40:a0:b8:9d:3f:a4:29:b4:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05df1ca3b665f24cbe101cfc2f38344da8b1768d
Validity
Not Before: Apr 29 00:00:36 2025 GMT
Not After : Apr 30 00:00:36 2025 GMT
Subject: CN=a410f4cbdd3c54a79bf6548685afe521fdaf1cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ce:50:9e:c0:56:fa:01:59:4a:c0:4a:aa:5d:
fc:04:e7:32:8f:37:6d:1a:b5:1f:4f:b9:3c:ff:bd:
e4:0a:f4:3e:bd:34:a0:90:81:62:36:16:c7:f2:6f:
c5:cf:3b:53:a1:80:97:73:6b:d2:51:e3:18:5c:32:
13:cd:b5:d5:7e:e4:f1:7c:97:5b:52:65:c8:a8:7a:
23:59:c8:86:73:43:ce:b4:ee:50:05:6c:f8:bd:74:
4e:52:c2:7b:95:9e:af:72:c5:cf:b3:8a:8a:22:c9:
cd:3a:67:53:a4:1a:5d:a6:87:ee:98:08:0b:42:10:
d6:f6:3d:c5:dd:49:e3:2f:17:d6:2c:51:6d:87:b8:
2e:7b:e2:45:80:9b:a6:f5:85:b2:12:ff:79:28:ad:
fe:70:ee:f0:02:2b:64:b5:98:5f:51:4d:b3:bb:a3:
a6:09:a2:9a:cb:c3:61:2d:94:d9:d2:ed:7a:df:15:
ac:05:39:bc:3b:ac:1f:ec:ee:c9:63:5e:4f:54:0b:
db:14:54:a1:37:b0:e8:0a:80:08:b9:43:82:e3:72:
a5:71:bc:09:40:39:5e:df:bc:92:a5:3a:b8:24:03:
c6:7d:28:1c:20:0c:04:e8:5d:85:d0:a8:19:cc:1e:
c4:d9:74:c7:75:a7:49:8f:23:51:90:34:d6:41:6d:
6b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:10:F4:CB:DD:3C:54:A7:9B:F6:54:86:85:AF:E5:21:FD:AF:1C:BC
X509v3 Authority Key Identifier:
keyid:05:DF:1C:A3:B6:65:F2:4C:BE:10:1C:FC:2F:38:34:4D:A8:B1:76:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:25:fa:7a:38:ff:49:a9:07:47:8d:f3:ee:a6:4c:66:66:eb:
5e:0c:85:45:33:fd:9a:aa:16:83:ec:12:d1:4e:75:a2:c7:5f:
22:ea:09:4f:57:c8:79:cf:d3:6a:29:7f:25:c1:86:3c:ff:21:
22:e7:09:99:cb:e1:17:37:33:c2:a7:cb:d9:d5:9a:ff:c4:76:
59:99:f8:81:23:d1:a9:b2:94:4c:f3:7b:d5:65:ed:54:6b:80:
07:37:10:ae:78:85:8d:b0:82:9e:01:86:6f:3e:d2:b1:7f:88:
a1:6e:0a:cf:41:35:d1:b1:45:3e:88:28:d6:d9:eb:f4:44:03:
2a:fa:af:40:43:fd:8c:59:18:a5:1b:3c:b0:87:63:25:0b:35:
e9:dc:2e:5a:b5:8f:79:f9:af:2b:57:fc:f2:2c:e2:6c:b8:b1:
f4:2d:c6:f1:5e:c2:5c:19:6c:ff:44:60:ed:54:de:02:cb:6f:
dc:c5:a8:d7:fb:9d:16:9b:b7:aa:7a:0a:70:ba:cc:b5:aa:dc:
c3:63:81:cb:c2:78:99:55:7d:de:16:90:2a:99:3b:0a:67:ef:
28:01:0e:ca:fa:95:a1:f2:d2:0f:6b:e3:bb:de:c3:f7:84:cd:
9c:83:e3:38:fe:fd:97:6c:73:6a:92:37:ec:89:67:6d:c8:11:
68:ec:08:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ+2HNlV2uXQKC4nT+kKbSSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZGYxY2EzYjY2NWYyNGNiZTEwMWNmYzJmMzgzNDRkYThi
MTc2OGQwHhcNMjUwNDI5MDAwMDM2WhcNMjUwNDMwMDAwMDM2WjAzMTEwLwYDVQQD
EyhhNDEwZjRjYmRkM2M1NGE3OWJmNjU0ODY4NWFmZTUyMWZkYWYxY2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc5QnsBW+gFZSsBKql38BOcyjzdt
GrUfT7k8/73kCvQ+vTSgkIFiNhbH8m/FzztToYCXc2vSUeMYXDITzbXVfuTxfJdb
UmXIqHojWciGc0POtO5QBWz4vXROUsJ7lZ6vcsXPs4qKIsnNOmdTpBpdpofumAgL
QhDW9j3F3UnjLxfWLFFth7gue+JFgJum9YWyEv95KK3+cO7wAitktZhfUU2zu6Om
CaKay8NhLZTZ0u163xWsBTm8O6wf7O7JY15PVAvbFFShN7DoCoAIuUOC43KlcbwJ
QDle37ySpTq4JAPGfSgcIAwE6F2F0KgZzB7E2XTHdadJjyNRkDTWQW1rCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQQ9MvdPFSnm/ZUhoWv5SH9rxy8MB8GA1UdIwQY
MBaAFAXfHKO2ZfJMvhAc/C84NE2osXaNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmQ4Y283Wmw4a3ktRUJ6OEx6ZzBUYWl4ZG8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84OGQzYjMtODI1Ny00N2FhLWEyMjct
ZDAyYWFmYjgzMmM0LzEvQmQ4Y283Wmw4a3ktRUJ6OEx6ZzBUYWl4ZG8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi84OGQzYjMtODI1Ny00N2FhLWEyMjctZDAyYWFmYjgzMmM0
LzEvQmQ4Y283Wmw4a3ktRUJ6OEx6ZzBUYWl4ZG8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACyX6ejj/
SakHR43z7qZMZmbrXgyFRTP9mqoWg+wS0U51osdfIuoJT1fIec/Tail/JcGGPP8h
IucJmcvhFzczwqfL2dWa/8R2WZn4gSPRqbKUTPN71WXtVGuABzcQrniFjbCCngGG
bz7SsX+IoW4Kz0E10bFFPogo1tnr9EQDKvqvQEP9jFkYpRs8sIdjJQs16dwuWrWP
efmvK1f88izibLix9C3G8V7CXBls/0Rg7VTeAstv3MWo1/udFpu3qnoKcLrMtarc
w2OBy8J4mVV93haQKpk7CmfvKAEOyvqVofLSD2vju97D94TNnIPjOP79l2xzapI3
7IlnbcgRaOwIkA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:36:33 2025 by rpki-client