Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.mft
File: DS-BuMF_Vdzd3sVMjM6t1pXSjwc.mft (raw, json)
Hash identifier: 6MRKwbKZUBOz1XJYgdFaZ3Vr75kAQJnFIwDQRghW0LA=
Subject key identifier: 28:05:E7:E4:AA:1B:EE:FE:28:0B:E7:02:80:A5:B3:41:A8:EE:63:85
Authority key identifier: 0D:2F:81:B8:C1:7F:55:DC:DD:DE:C5:4C:8C:CE:AD:D6:95:D2:8F:07
Certificate issuer: /CN=0d2f81b8c17f55dcdddec54c8cceadd695d28f07
Certificate serial: 019686FFBC2185BE8249D4B81DC2C83CC4B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.mft
Manifest number: 0472
Signing time: Wed 30 Apr 2025 14:00:28 +0000
Manifest this update: Wed 30 Apr 2025 14:00:28 +0000
Manifest next update: Thu 01 May 2025 14:00:28 +0000
Files and hashes: 1: DS-BuMF_Vdzd3sVMjM6t1pXSjwc.crl (hash: 6Ojg1ZOUJ7gCND+cQhotS0WOfDfdRe75MTk36zuerCY=)
2: lPK8fmOBXjRw9-w6K-x4RRsdXag.roa (hash: xkt3YoVHRxkDkdpPayFqDFqLd1JlrYwaOS9KFpJXY3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:ff:bc:21:85:be:82:49:d4:b8:1d:c2:c8:3c:c4:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2f81b8c17f55dcdddec54c8cceadd695d28f07
Validity
Not Before: Apr 30 14:00:28 2025 GMT
Not After : May 1 14:00:28 2025 GMT
Subject: CN=2805e7e4aa1beefe280be70280a5b341a8ee6385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:18:92:18:8d:46:7b:f4:aa:96:9d:5b:ce:62:
87:46:00:a7:cb:a0:b9:0c:ec:cd:2e:dd:27:8d:84:
fa:9e:7a:10:88:6a:37:4b:44:56:d4:e6:17:e7:8b:
93:af:01:07:94:df:dc:fd:b9:8e:9f:af:8f:ee:29:
b3:f0:6f:c8:28:68:74:bc:76:b4:13:b4:59:b1:0d:
c7:ff:77:2f:a2:cc:8d:eb:9c:fe:d7:5c:b6:2f:ea:
b0:09:37:c7:fe:dd:47:05:9c:b7:79:70:a3:55:0a:
a0:f5:a8:00:fc:d0:33:41:4c:5b:79:f0:c8:d9:12:
dc:78:7f:26:5c:53:e2:20:ae:d4:36:61:e8:ff:ea:
04:86:23:94:f7:1d:9f:bd:99:66:c2:c9:df:b8:e5:
f3:d1:39:14:a1:91:b5:6c:24:fb:b4:d6:52:db:2d:
13:01:ec:51:f1:7c:69:ec:e6:d0:60:c1:30:48:e7:
31:68:85:d6:14:4e:fe:9d:72:3d:36:32:c3:af:84:
47:aa:4d:cb:dc:73:3b:58:d3:11:84:5d:87:a4:d7:
a9:9f:5b:51:3c:15:4d:e3:24:de:e1:2e:6e:f7:c8:
06:e6:7b:87:95:96:e7:2e:83:50:24:ed:24:38:9d:
22:b1:92:2f:d4:d1:78:f9:e2:18:d1:20:7e:cd:7b:
36:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:05:E7:E4:AA:1B:EE:FE:28:0B:E7:02:80:A5:B3:41:A8:EE:63:85
X509v3 Authority Key Identifier:
keyid:0D:2F:81:B8:C1:7F:55:DC:DD:DE:C5:4C:8C:CE:AD:D6:95:D2:8F:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c1:33:a5:c2:c7:02:ba:95:e5:1c:cb:84:2b:79:e8:4f:33:
60:77:9a:cc:6f:32:09:a0:0c:38:c1:0c:64:12:a3:1f:76:54:
69:a4:1e:20:9b:47:a8:a7:30:df:49:15:fd:f6:ec:82:c1:03:
a3:fd:41:67:f8:38:9c:1d:d0:87:e8:f7:f8:74:56:e1:a2:cf:
83:a3:96:13:3c:6b:0d:dc:80:9f:3e:df:a8:0a:09:4b:3d:c4:
90:79:87:c3:fa:08:47:c7:9b:c1:41:45:ee:21:0e:89:d9:c0:
dd:a3:be:6c:f6:c0:03:41:c2:78:69:0a:61:fe:61:e9:82:d3:
13:39:44:fa:45:c4:4d:d9:27:04:84:f5:dd:d8:ae:3a:ab:2d:
bf:68:f2:75:cc:d5:1c:03:b9:04:c9:40:a6:c8:e1:fd:e1:d0:
54:1f:6e:60:97:1a:c2:1d:33:6b:da:ae:d1:04:ab:65:2d:82:
26:7e:c0:4b:e4:9d:2b:19:b2:cd:44:72:98:88:e6:57:89:f0:
e4:1b:13:49:d6:e7:1f:0b:a5:f8:94:0c:20:ce:f6:b7:3e:fb:
9a:ad:1f:89:6c:35:4a:fd:55:7e:c2:98:5d:21:d3:b4:30:d6:
dc:f3:81:3a:3f:ba:7f:0c:61:bf:3e:64:22:69:66:d7:02:8c:
70:15:37:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaG/7whhb6CSdS4HcLIPMS2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMmY4MWI4YzE3ZjU1ZGNkZGRlYzU0YzhjY2VhZGQ2OTVk
MjhmMDcwHhcNMjUwNDMwMTQwMDI4WhcNMjUwNTAxMTQwMDI4WjAzMTEwLwYDVQQD
EygyODA1ZTdlNGFhMWJlZWZlMjgwYmU3MDI4MGE1YjM0MWE4ZWU2Mzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RiSGI1Ge/Sqlp1bzmKHRgCny6C5
DOzNLt0njYT6nnoQiGo3S0RW1OYX54uTrwEHlN/c/bmOn6+P7imz8G/IKGh0vHa0
E7RZsQ3H/3cvosyN65z+11y2L+qwCTfH/t1HBZy3eXCjVQqg9agA/NAzQUxbefDI
2RLceH8mXFPiIK7UNmHo/+oEhiOU9x2fvZlmwsnfuOXz0TkUoZG1bCT7tNZS2y0T
AexR8Xxp7ObQYMEwSOcxaIXWFE7+nXI9NjLDr4RHqk3L3HM7WNMRhF2HpNepn1tR
PBVN4yTe4S5u98gG5nuHlZbnLoNQJO0kOJ0isZIv1NF4+eIY0SB+zXs2gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCgF5+SqG+7+KAvnAoCls0Go7mOFMB8GA1UdIwQY
MBaAFA0vgbjBf1Xc3d7FTIzOrdaV0o8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFMtQnVNRl9WZHpkM3NWTWpNNnQxcFhTandjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9hZjE5YTAtN2NiZi00MDc4LWE5ODct
NjhmMmZhMDAxZmE3LzEvRFMtQnVNRl9WZHpkM3NWTWpNNnQxcFhTandjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9hZjE5YTAtN2NiZi00MDc4LWE5ODctNjhmMmZhMDAxZmE3
LzEvRFMtQnVNRl9WZHpkM3NWTWpNNnQxcFhTandjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfMEzpcLH
ArqV5RzLhCt56E8zYHeazG8yCaAMOMEMZBKjH3ZUaaQeIJtHqKcw30kV/fbsgsED
o/1BZ/g4nB3Qh+j3+HRW4aLPg6OWEzxrDdyAnz7fqAoJSz3EkHmHw/oIR8ebwUFF
7iEOidnA3aO+bPbAA0HCeGkKYf5h6YLTEzlE+kXETdknBIT13diuOqstv2jydczV
HAO5BMlApsjh/eHQVB9uYJcawh0za9qu0QSrZS2CJn7AS+SdKxmyzURymIjmV4nw
5BsTSdbnHwul+JQMIM72tz77mq0fiWw1Sv1VfsKYXSHTtDDW3POBOj+6fwxhvz5k
Imlm1wKMcBU3DQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:43:51 2025 by rpki-client