Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
File: BkhNH1fbDMIyb6pT06eq0mjbwmY.mft (raw, json)
Hash identifier: D0Z4A/I9XR15I8IehVURa41nyZU7QnMOWeSvwKLBJos=
Subject key identifier: BD:64:EC:73:C5:2C:F0:9F:15:49:52:AA:B4:CB:5B:22:47:12:B8:0A
Authority key identifier: 06:48:4D:1F:57:DB:0C:C2:32:6F:AA:53:D3:A7:AA:D2:68:DB:C2:66
Certificate issuer: /CN=06484d1f57db0cc2326faa53d3a7aad268dbc266
Certificate serial: 01967FEB27A0DBDCBB73C9F486001A722B97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
Manifest number: 1513
Signing time: Tue 29 Apr 2025 05:00:39 +0000
Manifest this update: Tue 29 Apr 2025 05:00:39 +0000
Manifest next update: Wed 30 Apr 2025 05:00:39 +0000
Files and hashes: 1: BkhNH1fbDMIyb6pT06eq0mjbwmY.crl (hash: r3iJ7ZbWAitZ1iHhbmqbYwqXIO4Z0LrsTZ1ObgNV008=)
2: wjXBOQcWQ-FZfNOvsXQ1F4lPlGw.roa (hash: E+xrzCXzCwEyErrE4D/BReffI2+8855YllSEHagiBtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:eb:27:a0:db:dc:bb:73:c9:f4:86:00:1a:72:2b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06484d1f57db0cc2326faa53d3a7aad268dbc266
Validity
Not Before: Apr 29 05:00:39 2025 GMT
Not After : Apr 30 05:00:39 2025 GMT
Subject: CN=bd64ec73c52cf09f154952aab4cb5b224712b80a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:80:ec:8d:77:a3:04:f0:48:35:80:e3:34:db:
5d:75:c3:db:17:73:ac:2d:4d:28:7b:ad:71:bd:4d:
9a:16:83:86:df:68:15:f5:ab:8b:c5:14:76:db:bd:
8d:4a:a9:8b:77:8f:7f:ca:8f:33:6f:16:30:61:5e:
47:7d:34:5e:0f:3b:b0:90:e5:15:73:ec:12:cf:ad:
94:35:b9:89:7e:40:95:5f:df:a4:16:10:8f:00:9a:
2c:b1:29:69:e9:1f:90:0f:6e:f1:94:2b:c5:b8:40:
d3:8b:db:1b:83:62:6d:6f:87:99:3e:c5:31:ce:40:
22:3b:54:14:01:4c:05:c6:47:44:92:3c:c4:98:6c:
e6:2b:9c:ce:24:ab:27:35:03:b5:b6:47:43:6f:15:
6b:19:67:b5:fe:d8:e8:c1:74:a2:92:3d:2f:44:22:
80:2a:53:da:c8:d5:9a:64:27:79:e3:87:f1:8a:e8:
e9:dc:0f:08:73:d9:ba:32:68:d1:a2:61:14:dc:6d:
48:db:cd:a2:14:e7:81:2e:4d:09:1b:3f:f0:66:6e:
4a:7e:3e:6c:88:60:11:08:12:b8:c6:bb:c7:fe:af:
7f:88:6a:e6:6a:6e:50:67:9a:63:c2:9d:41:43:5d:
ee:1f:2c:cc:6f:0a:ca:ce:2d:5f:cd:82:7a:1b:0f:
b4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:64:EC:73:C5:2C:F0:9F:15:49:52:AA:B4:CB:5B:22:47:12:B8:0A
X509v3 Authority Key Identifier:
keyid:06:48:4D:1F:57:DB:0C:C2:32:6F:AA:53:D3:A7:AA:D2:68:DB:C2:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:37:27:15:8e:77:27:fa:82:77:34:1e:d3:b5:df:0d:c9:30:
86:98:ac:bd:b4:98:da:40:46:43:14:ed:c1:6d:05:cf:31:bc:
f4:85:df:ce:a1:cb:a2:bd:d8:b5:d2:f9:a0:b1:68:7f:dc:ec:
2c:b8:bf:68:55:0a:87:70:29:2d:cb:8f:9e:c2:e7:37:a4:e9:
34:eb:56:f1:32:b6:6e:45:51:82:da:cc:eb:86:87:aa:98:59:
40:2a:80:03:ca:a8:00:79:74:a8:a1:54:82:12:20:89:99:f5:
c7:8b:f6:12:51:ad:1d:6c:4a:4e:a3:6e:bb:e1:ce:31:2a:dc:
e0:d7:58:b8:70:f2:e3:5b:de:9e:b6:f8:af:3b:58:fd:85:11:
1c:d2:c3:59:2d:70:02:6f:48:1a:a8:7c:b2:f5:d9:3d:38:7a:
8a:19:70:d8:80:53:5f:57:30:a0:58:9c:b2:94:b2:7e:5f:e5:
77:68:8b:d5:bc:40:18:eb:b3:b2:2d:d9:70:35:0d:a5:a1:2f:
75:9c:ef:e2:ec:fe:d5:62:ba:81:f2:af:9d:a2:2e:7f:c5:44:
c8:5a:b5:8f:dc:fc:cc:16:b0:d4:be:0f:89:e7:65:82:68:28:
1c:b6:10:9d:1e:da:7e:6d:e0:67:d3:25:d9:2b:61:ef:3c:d3:
fd:a1:1a:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/6yeg29y7c8n0hgAaciuXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NDg0ZDFmNTdkYjBjYzIzMjZmYWE1M2QzYTdhYWQyNjhk
YmMyNjYwHhcNMjUwNDI5MDUwMDM5WhcNMjUwNDMwMDUwMDM5WjAzMTEwLwYDVQQD
EyhiZDY0ZWM3M2M1MmNmMDlmMTU0OTUyYWFiNGNiNWIyMjQ3MTJiODBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4DsjXejBPBINYDjNNtddcPbF3Os
LU0oe61xvU2aFoOG32gV9auLxRR2272NSqmLd49/yo8zbxYwYV5HfTReDzuwkOUV
c+wSz62UNbmJfkCVX9+kFhCPAJossSlp6R+QD27xlCvFuEDTi9sbg2Jtb4eZPsUx
zkAiO1QUAUwFxkdEkjzEmGzmK5zOJKsnNQO1tkdDbxVrGWe1/tjowXSikj0vRCKA
KlPayNWaZCd544fxiujp3A8Ic9m6MmjRomEU3G1I282iFOeBLk0JGz/wZm5Kfj5s
iGARCBK4xrvH/q9/iGrmam5QZ5pjwp1BQ13uHyzMbwrKzi1fzYJ6Gw+0JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1k7HPFLPCfFUlSqrTLWyJHErgKMB8GA1UdIwQY
MBaAFAZITR9X2wzCMm+qU9OnqtJo28JmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmtoTkgxZmJETUl5YjZwVDA2ZXEwbWpid21ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS83MDI4MjktMGQ4ZS00OWRiLTg0YWUt
MDQ5MjUxOTRjNWU2LzEvQmtoTkgxZmJETUl5YjZwVDA2ZXEwbWpid21ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS83MDI4MjktMGQ4ZS00OWRiLTg0YWUtMDQ5MjUxOTRjNWU2
LzEvQmtoTkgxZmJETUl5YjZwVDA2ZXEwbWpid21ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmzcnFY53
J/qCdzQe07XfDckwhpisvbSY2kBGQxTtwW0FzzG89IXfzqHLor3YtdL5oLFof9zs
LLi/aFUKh3ApLcuPnsLnN6TpNOtW8TK2bkVRgtrM64aHqphZQCqAA8qoAHl0qKFU
ghIgiZn1x4v2ElGtHWxKTqNuu+HOMSrc4NdYuHDy41venrb4rztY/YURHNLDWS1w
Am9IGqh8svXZPTh6ihlw2IBTX1cwoFicspSyfl/ld2iL1bxAGOuzsi3ZcDUNpaEv
dZzv4uz+1WK6gfKvnaIuf8VEyFq1j9z8zBaw1L4PiedlgmgoHLYQnR7afm3gZ9Ml
2Sth7zzT/aEarg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 15:23:50 2025 by rpki-client