Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft
File: B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft (raw, json)
Hash identifier: 4QzTg1R7puPmmPzfw4jI5uuObLPvTTEM0vZ3FxlZbtI=
Subject key identifier: D8:F4:19:B0:0B:B1:CB:87:36:8F:06:E7:CA:2C:28:4B:06:71:EA:FA
Authority key identifier: 07:6B:01:85:CA:BB:66:84:3D:67:F8:86:01:BC:0A:79:A2:EE:BC:AD
Certificate issuer: /CN=076b0185cabb66843d67f88601bc0a79a2eebcad
Certificate serial: 0196827E2B81252BFACFD14344A543C2427F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft
Manifest number: 0C37
Signing time: Tue 29 Apr 2025 17:00:28 +0000
Manifest this update: Tue 29 Apr 2025 17:00:28 +0000
Manifest next update: Wed 30 Apr 2025 17:00:28 +0000
Files and hashes: 1: B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.crl (hash: S7XrHaICdh0cU0tT0XVQLFlEDGQ7KlmAOdKja8pzMvc=)
2: bKjmtKZ3Q_dbBV89_TPqXOrr9l8.roa (hash: fkweW281SglBT4coSKgBxiwmush3g6XftqB0c+xmAws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7e:2b:81:25:2b:fa:cf:d1:43:44:a5:43:c2:42:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=076b0185cabb66843d67f88601bc0a79a2eebcad
Validity
Not Before: Apr 29 17:00:28 2025 GMT
Not After : Apr 30 17:00:28 2025 GMT
Subject: CN=d8f419b00bb1cb87368f06e7ca2c284b0671eafa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d1:3d:b6:36:9b:d5:97:1d:15:78:5f:4c:04:
a2:d3:40:9e:8d:1d:ea:2f:b1:79:95:42:69:88:c8:
d1:53:ad:bd:78:71:0e:00:d4:87:6e:29:bc:1d:43:
f1:f9:1b:ea:24:db:64:99:49:55:72:02:ac:77:43:
06:d1:b9:db:c9:be:20:5c:ff:98:49:eb:95:62:5b:
53:aa:3f:a9:f9:3c:df:a9:b0:ee:4f:19:aa:f4:e0:
16:c4:68:bb:a8:3c:d0:de:a1:e2:7f:f9:de:80:16:
00:bc:5b:0b:d8:0c:ab:d0:c4:6d:8f:c3:3c:d1:4d:
85:7c:1e:2e:a4:34:4d:6d:fb:79:16:17:11:09:a0:
7f:13:36:b4:5d:b8:c9:94:f4:b5:e7:1b:02:62:7a:
8d:a2:a8:3c:b6:90:67:c9:f6:60:af:a4:ed:ae:41:
1e:1a:f0:4e:b0:33:2e:bb:e9:ec:9b:8a:2f:49:55:
e3:83:76:07:5d:a9:ec:10:dc:0f:71:70:86:84:28:
34:32:6f:4a:19:fd:ca:4c:ab:b1:5a:db:7c:aa:1c:
b1:0d:ad:e4:04:46:a3:d5:b1:70:82:2f:40:8c:15:
16:4c:cf:c8:b8:56:ab:a6:62:a9:a6:cb:ed:0e:b1:
1c:b6:c3:9b:7e:0c:c1:c9:5d:01:03:55:4d:09:d7:
35:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F4:19:B0:0B:B1:CB:87:36:8F:06:E7:CA:2C:28:4B:06:71:EA:FA
X509v3 Authority Key Identifier:
keyid:07:6B:01:85:CA:BB:66:84:3D:67:F8:86:01:BC:0A:79:A2:EE:BC:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:a8:8e:d3:02:4f:3f:f6:54:69:a2:9f:0d:8a:30:13:b3:a7:
98:68:42:6f:df:99:e2:a2:2f:49:fe:d7:18:9a:e5:fd:37:eb:
19:2b:25:39:2a:83:7b:2d:be:79:ae:3f:69:a6:72:96:42:3f:
0f:ff:1e:52:0d:62:33:1d:26:f3:29:c3:22:e1:91:23:a2:37:
ac:c8:79:60:a1:ba:74:ba:c1:2c:a4:dc:30:3f:4f:af:1f:14:
fa:da:b4:d5:c7:48:16:8e:4a:53:81:db:16:b2:71:94:cb:24:
b2:a2:1f:6f:52:5c:44:e5:d1:8b:b2:3a:a4:d1:91:fc:17:00:
7c:ac:02:b2:21:8b:32:ac:4b:8e:96:56:e1:97:0a:29:b3:1f:
e4:53:ba:8f:07:75:a7:90:c1:01:51:ce:47:ea:ad:3f:20:3d:
b8:a6:9f:69:6e:16:a0:e4:65:d3:1c:b5:cb:b2:56:96:10:e6:
38:9a:e7:19:ae:12:e3:cf:61:1b:89:32:79:22:26:0a:dc:da:
26:90:4e:80:1e:af:4a:21:69:74:60:d9:fd:0e:2d:4b:66:25:
f8:9c:7e:5f:c5:67:19:1e:6b:df:0f:d3:77:84:7c:7f:65:cc:
2d:a8:f1:e5:20:b3:ff:4d:3e:cd:f0:2c:5d:6f:21:e6:9c:2e:
d5:fd:fc:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaCfiuBJSv6z9FDRKVDwkJ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NmIwMTg1Y2FiYjY2ODQzZDY3Zjg4NjAxYmMwYTc5YTJl
ZWJjYWQwHhcNMjUwNDI5MTcwMDI4WhcNMjUwNDMwMTcwMDI4WjAzMTEwLwYDVQQD
EyhkOGY0MTliMDBiYjFjYjg3MzY4ZjA2ZTdjYTJjMjg0YjA2NzFlYWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptE9tjab1ZcdFXhfTASi00CejR3q
L7F5lUJpiMjRU629eHEOANSHbim8HUPx+RvqJNtkmUlVcgKsd0MG0bnbyb4gXP+Y
SeuVYltTqj+p+TzfqbDuTxmq9OAWxGi7qDzQ3qHif/negBYAvFsL2Ayr0MRtj8M8
0U2FfB4upDRNbft5FhcRCaB/Eza0XbjJlPS15xsCYnqNoqg8tpBnyfZgr6TtrkEe
GvBOsDMuu+nsm4ovSVXjg3YHXansENwPcXCGhCg0Mm9KGf3KTKuxWtt8qhyxDa3k
BEaj1bFwgi9AjBUWTM/IuFarpmKppsvtDrEctsObfgzByV0BA1VNCdc1eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNj0GbALscuHNo8G58osKEsGcer6MB8GA1UdIwQY
MBaAFAdrAYXKu2aEPWf4hgG8Cnmi7rytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjJzQmhjcTdab1E5Wl9pR0Fid0tlYUx1dkswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9mMTRiYzMtMWY5Ni00ZGE4LWExNmYt
N2I0NWJlMDQ2NWFhLzEvQjJzQmhjcTdab1E5Wl9pR0Fid0tlYUx1dkswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9mMTRiYzMtMWY5Ni00ZGE4LWExNmYtN2I0NWJlMDQ2NWFh
LzEvQjJzQmhjcTdab1E5Wl9pR0Fid0tlYUx1dkswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc6iO0wJP
P/ZUaaKfDYowE7OnmGhCb9+Z4qIvSf7XGJrl/TfrGSslOSqDey2+ea4/aaZylkI/
D/8eUg1iMx0m8ynDIuGRI6I3rMh5YKG6dLrBLKTcMD9Prx8U+tq01cdIFo5KU4Hb
FrJxlMsksqIfb1JcROXRi7I6pNGR/BcAfKwCsiGLMqxLjpZW4ZcKKbMf5FO6jwd1
p5DBAVHOR+qtPyA9uKafaW4WoORl0xy1y7JWlhDmOJrnGa4S489hG4kyeSImCtza
JpBOgB6vSiFpdGDZ/Q4tS2Yl+Jx+X8VnGR5r3w/Td4R8f2XMLajx5SCz/00+zfAs
XW8h5pwu1f38Kw==
-----END CERTIFICATE-----
Generated at Wed Apr 30 00:05:39 2025 by rpki-client