Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
File: bLyEAvCSNDucA9OGBpco-Jg-YAg.mft (raw, json)
Hash identifier: /BA6Ub86aRlo4MozQ+0NlxMk4nHmiA4K7argYoBeYsY=
Subject key identifier: E9:36:F5:27:F6:C6:45:8E:A1:E9:66:74:63:8D:D6:01:A2:5F:74:96
Authority key identifier: 6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08
Certificate issuer: /CN=6cbc8402f092343b9c03d386069728f8983e6008
Certificate serial: 0196767A40BE01B23A0279AD14B5E664C495
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
Manifest number: 0D78
Signing time: Sun 27 Apr 2025 09:00:45 +0000
Manifest this update: Sun 27 Apr 2025 09:00:45 +0000
Manifest next update: Mon 28 Apr 2025 09:00:45 +0000
Files and hashes: 1: bLyEAvCSNDucA9OGBpco-Jg-YAg.crl (hash: GCAnCOKlVVkR4Hqm0v3JG1T/8npj7M+YHqts+OuO/pU=)
2: cdM459bUqR9CDHxK6hkgW3z_lyI.roa (hash: yGuDalXNxH1KMB1e5SARV7XMjke+R1A0tgbxBSQwq0g=)
3: gDWc6H7uj9ibkrZP4t2rHY2dAjc.roa (hash: kA5V7O8+i9I2snnuaBTFlKTpJopDxBn7UIT61zUY590=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:40:be:01:b2:3a:02:79:ad:14:b5:e6:64:c4:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cbc8402f092343b9c03d386069728f8983e6008
Validity
Not Before: Apr 27 09:00:45 2025 GMT
Not After : Apr 28 09:00:45 2025 GMT
Subject: CN=e936f527f6c6458ea1e96674638dd601a25f7496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:82:f3:b3:f2:ad:9b:28:d5:27:5e:16:f9:91:
5c:54:2c:3b:64:39:4a:b4:80:42:8e:7a:00:97:7f:
6e:c3:78:ff:98:ef:48:1e:0a:ff:27:ad:f6:51:26:
db:86:77:ce:cd:0f:51:32:d8:c8:40:c1:ff:6d:dd:
31:0f:5e:7d:3e:7c:86:30:9c:43:54:5d:12:f1:cb:
d3:5e:8b:7f:a7:35:cc:94:87:50:1e:32:a9:3a:78:
f0:71:35:31:08:34:55:d2:f1:cc:16:63:9e:43:ee:
3d:2f:a0:47:da:42:72:15:4b:f5:29:0f:ab:af:b8:
85:96:66:47:bb:d5:97:ae:d5:d5:85:22:62:41:56:
6b:c4:f7:17:08:9e:89:c7:4a:e5:77:6f:30:b7:88:
6d:c0:33:9f:2f:c1:45:5a:09:12:f0:73:50:c5:8d:
d0:e7:22:ff:39:9d:4d:2b:fe:35:4d:90:69:31:b1:
a8:24:8d:98:0d:df:e6:f7:60:6b:a4:9b:e0:5a:68:
1a:f6:fd:ff:82:ca:11:ec:af:a5:7f:8a:87:1d:d1:
6c:8e:46:15:0c:3c:4d:c0:02:d9:f4:a3:68:fd:53:
e2:28:e7:77:a1:7a:ee:41:57:4d:03:ac:9f:8c:9b:
61:0b:a3:18:57:48:9a:c5:60:d2:b9:95:9d:24:33:
03:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:36:F5:27:F6:C6:45:8E:A1:E9:66:74:63:8D:D6:01:A2:5F:74:96
X509v3 Authority Key Identifier:
keyid:6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:0a:aa:a7:f2:69:75:25:48:7f:ee:07:27:24:0b:15:76:64:
29:31:62:45:50:74:66:b6:84:e9:8f:8f:53:c4:c0:f7:51:2e:
a0:b8:1b:81:8e:3c:2b:2d:73:75:14:fe:5f:ce:b3:55:3d:b8:
57:12:98:9f:cf:60:36:43:05:71:fc:83:94:25:01:88:ec:6e:
f9:a4:ac:01:32:97:50:e7:62:d3:42:60:c2:74:14:a2:0c:39:
35:db:7f:3f:58:12:b8:d9:b9:28:76:c7:13:8c:00:76:a3:bf:
e4:63:6d:4b:62:ab:5c:27:71:25:6d:d1:7a:94:bb:2c:80:ea:
a5:29:bb:3c:aa:09:8f:51:ce:e9:c5:3c:0e:35:cf:15:4a:77:
70:28:05:34:ac:f7:20:78:b1:31:61:c2:f5:d7:3c:ec:2f:fa:
5f:0b:a3:77:bc:20:c2:f1:7b:af:45:c9:03:f4:78:0f:39:69:
2e:b3:c9:13:0c:2c:3a:22:e4:63:8f:a7:6f:06:34:8a:5d:b3:
f0:ad:13:77:14:f5:86:7d:69:e8:49:64:78:f1:6b:bc:f9:94:
57:1c:20:8a:2f:59:01:d3:04:ac:27:72:73:b3:24:0f:49:d3:
c9:66:24:a3:34:54:e1:b6:ea:ba:62:48:21:49:76:97:08:ef:
69:35:3d:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2ekC+AbI6AnmtFLXmZMSVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYmM4NDAyZjA5MjM0M2I5YzAzZDM4NjA2OTcyOGY4OTgz
ZTYwMDgwHhcNMjUwNDI3MDkwMDQ1WhcNMjUwNDI4MDkwMDQ1WjAzMTEwLwYDVQQD
EyhlOTM2ZjUyN2Y2YzY0NThlYTFlOTY2NzQ2MzhkZDYwMWEyNWY3NDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYLzs/KtmyjVJ14W+ZFcVCw7ZDlK
tIBCjnoAl39uw3j/mO9IHgr/J632USbbhnfOzQ9RMtjIQMH/bd0xD159PnyGMJxD
VF0S8cvTXot/pzXMlIdQHjKpOnjwcTUxCDRV0vHMFmOeQ+49L6BH2kJyFUv1KQ+r
r7iFlmZHu9WXrtXVhSJiQVZrxPcXCJ6Jx0rld28wt4htwDOfL8FFWgkS8HNQxY3Q
5yL/OZ1NK/41TZBpMbGoJI2YDd/m92BrpJvgWmga9v3/gsoR7K+lf4qHHdFsjkYV
DDxNwALZ9KNo/VPiKOd3oXruQVdNA6yfjJthC6MYV0iaxWDSuZWdJDMDVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOk29Sf2xkWOoelmdGON1gGiX3SWMB8GA1UdIwQY
MBaAFGy8hALwkjQ7nAPThgaXKPiYPmAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkx5RUF2Q1NORHVjQTlPR0JwY28tSmctWUFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC85ZGI4N2YtYTMxYS00YjRkLTg2MjQt
MjgwZjVhNGI1ZTAzLzEvYkx5RUF2Q1NORHVjQTlPR0JwY28tSmctWUFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC85ZGI4N2YtYTMxYS00YjRkLTg2MjQtMjgwZjVhNGI1ZTAz
LzEvYkx5RUF2Q1NORHVjQTlPR0JwY28tSmctWUFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiwqqp/Jp
dSVIf+4HJyQLFXZkKTFiRVB0ZraE6Y+PU8TA91EuoLgbgY48Ky1zdRT+X86zVT24
VxKYn89gNkMFcfyDlCUBiOxu+aSsATKXUOdi00JgwnQUogw5Ndt/P1gSuNm5KHbH
E4wAdqO/5GNtS2KrXCdxJW3RepS7LIDqpSm7PKoJj1HO6cU8DjXPFUp3cCgFNKz3
IHixMWHC9dc87C/6Xwujd7wgwvF7r0XJA/R4DzlpLrPJEwwsOiLkY4+nbwY0il2z
8K0TdxT1hn1p6ElkePFrvPmUVxwgii9ZAdMErCdyc7MkD0nTyWYkozRU4bbqumJI
IUl2lwjvaTU9sA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:24:19 2025 by rpki-client