Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
File: bz2JqB_CmfOcCS5PbQFzqanPvGU.mft (raw, json)
Hash identifier: lKdlEfNY+pyCOPhZGyLutNt0AOF0i2z2KB8mvK+96qc=
Subject key identifier: CE:13:8E:8C:2B:E6:F9:17:FD:96:33:19:9F:74:B1:53:99:FE:B4:94
Authority key identifier: 6F:3D:89:A8:1F:C2:99:F3:9C:09:2E:4F:6D:01:73:A9:A9:CF:BC:65
Certificate issuer: /CN=6f3d89a81fc299f39c092e4f6d0173a9a9cfbc65
Certificate serial: 0196816BAB2A89F0C1523F48F0B5C88A9B96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
Manifest number: 151B
Signing time: Tue 29 Apr 2025 12:00:39 +0000
Manifest this update: Tue 29 Apr 2025 12:00:39 +0000
Manifest next update: Wed 30 Apr 2025 12:00:39 +0000
Files and hashes: 1: _OBCt42Qgl4wI2H058mG4uDYUOw.roa (hash: jWbxYRFs270K2f9wkh6LdpAj2cDPsQg7s0mhGOvBxRQ=)
2: bz2JqB_CmfOcCS5PbQFzqanPvGU.crl (hash: PtGuA2xcrVGuzxkOaqPsHrW8UYTQ9uOp6XRRwcT1RQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:6b:ab:2a:89:f0:c1:52:3f:48:f0:b5:c8:8a:9b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3d89a81fc299f39c092e4f6d0173a9a9cfbc65
Validity
Not Before: Apr 29 12:00:39 2025 GMT
Not After : Apr 30 12:00:39 2025 GMT
Subject: CN=ce138e8c2be6f917fd9633199f74b15399feb494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d1:27:3e:21:cd:25:35:f0:04:27:fa:3a:9a:
d6:f2:08:d8:88:b1:de:46:e5:a2:bf:cf:2a:e6:03:
09:fc:e9:62:70:f0:d6:d5:d0:cb:9e:73:f5:a9:64:
2e:71:19:9d:ea:20:b3:3f:bf:19:85:bb:81:67:db:
bc:60:39:3f:02:8d:c0:ec:31:63:40:30:7d:18:ec:
f6:d5:1f:a5:94:8a:f5:8b:6e:b7:ec:1a:19:00:4e:
d7:65:7a:5f:bf:0a:0d:14:9a:4c:d6:70:d4:2b:5e:
30:03:da:cc:13:a8:dd:7c:90:4d:77:29:cc:12:81:
eb:e8:04:51:64:a7:b3:28:ec:0d:da:d2:c5:26:72:
e8:0f:27:37:39:36:75:97:ce:cc:f0:12:1c:50:64:
b3:ae:5a:23:0e:07:9f:f5:0b:e2:ba:e7:69:1f:6a:
93:59:4c:75:15:1d:31:c1:62:74:d0:e2:85:af:d9:
4c:b1:05:e2:81:77:ab:39:eb:3a:94:7f:83:4d:96:
83:a8:08:dc:50:b7:b6:6a:e4:aa:e6:e0:59:1e:d1:
ea:77:cf:f7:15:51:c4:be:2d:34:d5:09:cc:4e:c5:
b8:9a:55:7c:02:b1:55:2b:16:4e:51:ea:4f:43:97:
17:df:bd:53:04:cd:16:40:ae:72:aa:9b:03:3f:b8:
48:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:13:8E:8C:2B:E6:F9:17:FD:96:33:19:9F:74:B1:53:99:FE:B4:94
X509v3 Authority Key Identifier:
keyid:6F:3D:89:A8:1F:C2:99:F3:9C:09:2E:4F:6D:01:73:A9:A9:CF:BC:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d3:3e:e0:c5:85:1b:5d:1c:7e:77:5b:0e:95:ed:e1:cf:6d:
3f:c4:33:eb:96:bd:61:0c:1c:33:cb:fd:9f:fe:18:c5:f5:ed:
58:3b:da:c6:5a:d3:66:33:bc:e3:4c:46:22:72:e9:65:fb:6a:
a1:18:0f:33:3b:6d:fc:28:1b:b5:af:bb:6a:58:e5:48:25:a1:
8f:59:b2:ca:fe:90:32:61:b5:d0:0d:85:de:f9:9c:59:ff:69:
a4:b8:9a:63:74:b0:44:1a:31:80:e9:7d:72:76:fb:69:e2:b2:
b2:30:39:63:05:3c:d5:c9:52:5e:a1:7d:c8:f4:6a:54:b6:c4:
44:15:67:0a:12:e7:84:be:c3:69:6f:cf:ef:0a:54:9c:10:bd:
b9:f1:1d:ff:86:ec:24:10:73:5f:05:aa:5b:b1:1a:13:28:8c:
0d:b3:33:55:9e:56:63:7f:24:38:2c:fe:86:97:f3:a2:30:88:
63:54:30:67:39:e4:ad:38:b9:87:33:b4:99:20:e9:f1:94:c7:
b1:d3:2e:22:ef:a1:0d:c0:02:79:8c:c7:9b:de:27:ee:30:72:
eb:23:e9:64:28:b7:23:44:eb:c4:59:c6:7a:40:f8:3b:0f:2e:
a8:af:e5:85:c5:28:ab:d1:e1:20:0c:9c:eb:96:f6:b5:3a:b3:
25:ae:51:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaBa6sqifDBUj9I8LXIipuWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmM2Q4OWE4MWZjMjk5ZjM5YzA5MmU0ZjZkMDE3M2E5YTlj
ZmJjNjUwHhcNMjUwNDI5MTIwMDM5WhcNMjUwNDMwMTIwMDM5WjAzMTEwLwYDVQQD
EyhjZTEzOGU4YzJiZTZmOTE3ZmQ5NjMzMTk5Zjc0YjE1Mzk5ZmViNDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9EnPiHNJTXwBCf6OprW8gjYiLHe
RuWiv88q5gMJ/OlicPDW1dDLnnP1qWQucRmd6iCzP78ZhbuBZ9u8YDk/Ao3A7DFj
QDB9GOz21R+llIr1i2637BoZAE7XZXpfvwoNFJpM1nDUK14wA9rME6jdfJBNdynM
EoHr6ARRZKezKOwN2tLFJnLoDyc3OTZ1l87M8BIcUGSzrlojDgef9QviuudpH2qT
WUx1FR0xwWJ00OKFr9lMsQXigXerOes6lH+DTZaDqAjcULe2auSq5uBZHtHqd8/3
FVHEvi001QnMTsW4mlV8ArFVKxZOUepPQ5cX371TBM0WQK5yqpsDP7hI0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM4Tjowr5vkX/ZYzGZ90sVOZ/rSUMB8GA1UdIwQY
MBaAFG89iagfwpnznAkuT20Bc6mpz7xlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnoySnFCX0NtZk9jQ1M1UGJRRnpxYW5QdkdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8wNWUwZWUtYWUwMy00MTI0LWI2NzAt
MzA5YjdiOTYwZDE0LzEvYnoySnFCX0NtZk9jQ1M1UGJRRnpxYW5QdkdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8wNWUwZWUtYWUwMy00MTI0LWI2NzAtMzA5YjdiOTYwZDE0
LzEvYnoySnFCX0NtZk9jQ1M1UGJRRnpxYW5QdkdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgdM+4MWF
G10cfndbDpXt4c9tP8Qz65a9YQwcM8v9n/4YxfXtWDvaxlrTZjO840xGInLpZftq
oRgPMztt/Cgbta+7aljlSCWhj1myyv6QMmG10A2F3vmcWf9ppLiaY3SwRBoxgOl9
cnb7aeKysjA5YwU81clSXqF9yPRqVLbERBVnChLnhL7DaW/P7wpUnBC9ufEd/4bs
JBBzXwWqW7EaEyiMDbMzVZ5WY38kOCz+hpfzojCIY1QwZznkrTi5hzO0mSDp8ZTH
sdMuIu+hDcACeYzHm94n7jBy6yPpZCi3I0TrxFnGekD4Ow8uqK/lhcUoq9HhIAyc
65b2tTqzJa5RoA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 21:55:33 2025 by rpki-client