Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
File: BYc3rBvKjBQos5aVRvGXTwaU5AA.mft (raw, json)
Hash identifier: EBKeHmCS25dctqTNGgUIhFK+BXLoe9nsyKyEkopkfdc=
Subject key identifier: C6:4F:36:39:35:9D:33:D3:BF:3C:51:68:57:5A:A5:1F:3E:33:25:5A
Authority key identifier: 05:87:37:AC:1B:CA:8C:14:28:B3:96:95:46:F1:97:4F:06:94:E4:00
Certificate issuer: /CN=058737ac1bca8c1428b3969546f1974f0694e400
Certificate serial: 01968DA6B3988BA22DF56CAA7F7C2F009D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
Manifest number: 0FBE
Signing time: Thu 01 May 2025 21:00:34 +0000
Manifest this update: Thu 01 May 2025 21:00:34 +0000
Manifest next update: Fri 02 May 2025 21:00:34 +0000
Files and hashes: 1: BYc3rBvKjBQos5aVRvGXTwaU5AA.crl (hash: HbHrTwvKQfTIc9xgbm0nCXoG3oo4aUjUvfkq3xDFUTI=)
2: S34eKn41CbeHBs9JztR1Ea-qnWM.roa (hash: ivl9YTuqSiUvueW/pRMX9Z40ugXy2JCZOHJUmHTZ+5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 19:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:a6:b3:98:8b:a2:2d:f5:6c:aa:7f:7c:2f:00:9d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=058737ac1bca8c1428b3969546f1974f0694e400
Validity
Not Before: May 1 21:00:34 2025 GMT
Not After : May 2 21:00:34 2025 GMT
Subject: CN=c64f3639359d33d3bf3c5168575aa51f3e33255a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:0a:30:34:2e:7a:36:c7:44:3c:b1:75:ac:ae:
52:ea:2d:17:4b:6f:12:b3:18:c9:d9:3a:1f:b8:5e:
d4:e9:ef:9a:e6:cd:78:29:76:23:51:43:0e:f4:fd:
5e:a4:3c:da:e8:13:1f:77:fe:34:e1:85:90:d1:97:
c1:73:4e:55:03:7e:96:cf:7d:ef:fa:42:e2:e5:95:
a5:5a:82:9f:ab:5b:a6:69:70:ff:c1:7e:04:09:8e:
a4:a2:ed:42:f3:80:b1:69:4e:ca:a8:af:be:fc:2a:
94:fe:d8:ce:f7:45:07:9b:fe:89:1a:74:ee:2f:17:
48:48:58:69:e4:f2:75:f7:0c:72:d7:ef:33:ba:c6:
b9:69:32:f5:2e:ff:2e:c6:9c:37:5a:cc:63:e5:1a:
9b:54:57:88:51:22:26:a8:fe:64:3d:b8:21:a0:02:
ca:03:3b:a5:4f:f5:66:62:27:73:8d:0b:aa:18:0f:
ee:eb:d4:1a:1d:31:f5:82:1b:02:c2:ca:0c:e9:0b:
83:15:47:50:13:99:66:fd:53:10:70:b9:b0:db:ba:
09:bb:b7:3a:04:c3:92:f3:39:4e:83:af:a5:48:7a:
f1:5e:0c:d0:69:54:9d:7b:c1:8a:8e:de:f2:f6:15:
0a:93:dd:0d:c3:1b:c6:d9:b3:f0:3d:8b:1b:37:24:
82:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4F:36:39:35:9D:33:D3:BF:3C:51:68:57:5A:A5:1F:3E:33:25:5A
X509v3 Authority Key Identifier:
keyid:05:87:37:AC:1B:CA:8C:14:28:B3:96:95:46:F1:97:4F:06:94:E4:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:7b:6e:ba:e9:7b:1e:5f:6c:81:bf:32:62:9c:d1:12:c2:d3:
13:0a:11:b7:60:40:48:3f:ec:e4:f2:9e:ed:7a:b4:a8:03:6e:
20:85:3e:57:27:74:86:62:cf:99:57:6c:97:ba:a8:22:3c:15:
18:01:b3:4b:cf:3f:07:91:88:b9:e8:6f:9a:8a:16:f7:9c:58:
f7:81:eb:f8:62:b6:73:66:8c:ae:ef:a5:7d:66:b9:c1:2b:63:
53:a2:45:f5:a9:dd:a8:4a:ac:c9:ac:4a:8a:9f:04:7b:37:39:
31:3b:88:65:d1:8b:72:aa:b7:3f:1b:b3:00:20:3a:0a:85:47:
fa:cf:bf:22:5d:18:76:bf:a1:12:8d:ad:91:91:19:b5:d1:37:
c5:2d:ae:f4:66:db:06:25:77:df:2c:41:4b:fd:dc:c9:9b:28:
4a:9d:72:0b:3f:aa:f2:60:3a:49:9d:e8:f1:81:2c:c5:97:5c:
67:2d:f3:f2:f8:65:0c:92:be:5a:d8:eb:dd:b5:c3:96:89:ec:
b5:f9:1f:f1:f0:b4:df:37:8b:bf:03:0d:e8:ea:5b:df:59:81:
c0:df:e7:46:79:99:7a:4e:11:44:bc:94:b8:ce:35:fc:90:93:
72:09:00:fa:58:20:0f:f7:2d:a2:dc:4d:3b:22:ca:f8:1a:85:
d0:86:8f:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaNprOYi6It9Wyqf3wvAJ0RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ODczN2FjMWJjYThjMTQyOGIzOTY5NTQ2ZjE5NzRmMDY5
NGU0MDAwHhcNMjUwNTAxMjEwMDM0WhcNMjUwNTAyMjEwMDM0WjAzMTEwLwYDVQQD
EyhjNjRmMzYzOTM1OWQzM2QzYmYzYzUxNjg1NzVhYTUxZjNlMzMyNTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8AowNC56NsdEPLF1rK5S6i0XS28S
sxjJ2TofuF7U6e+a5s14KXYjUUMO9P1epDza6BMfd/404YWQ0ZfBc05VA36Wz33v
+kLi5ZWlWoKfq1umaXD/wX4ECY6kou1C84CxaU7KqK++/CqU/tjO90UHm/6JGnTu
LxdISFhp5PJ19wxy1+8zusa5aTL1Lv8uxpw3Wsxj5RqbVFeIUSImqP5kPbghoALK
AzulT/VmYidzjQuqGA/u69QaHTH1ghsCwsoM6QuDFUdQE5lm/VMQcLmw27oJu7c6
BMOS8zlOg6+lSHrxXgzQaVSde8GKjt7y9hUKk90NwxvG2bPwPYsbNySCvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZPNjk1nTPTvzxRaFdapR8+MyVaMB8GA1UdIwQY
MBaAFAWHN6wbyowUKLOWlUbxl08GlOQAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlljM3JCdktqQlFvczVhVlJ2R1hUd2FVNUFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS82OTMyN2EtNjhkZS00NTg1LWFjZmIt
NTAxMjU3NTkwZGU3LzEvQlljM3JCdktqQlFvczVhVlJ2R1hUd2FVNUFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS82OTMyN2EtNjhkZS00NTg1LWFjZmItNTAxMjU3NTkwZGU3
LzEvQlljM3JCdktqQlFvczVhVlJ2R1hUd2FVNUFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV3tuuul7
Hl9sgb8yYpzREsLTEwoRt2BASD/s5PKe7Xq0qANuIIU+Vyd0hmLPmVdsl7qoIjwV
GAGzS88/B5GIuehvmooW95xY94Hr+GK2c2aMru+lfWa5wStjU6JF9andqEqsyaxK
ip8Eezc5MTuIZdGLcqq3PxuzACA6CoVH+s+/Il0Ydr+hEo2tkZEZtdE3xS2u9Gbb
BiV33yxBS/3cyZsoSp1yCz+q8mA6SZ3o8YEsxZdcZy3z8vhlDJK+Wtjr3bXDlons
tfkf8fC03zeLvwMN6Opb31mBwN/nRnmZek4RRLyUuM41/JCTcgkA+lggD/ctotxN
OyLK+BqF0IaPTQ==
-----END CERTIFICATE-----
Generated at Fri May 2 05:01:22 2025 by rpki-client