Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft
File: Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft (raw, json)
Hash identifier: V3ZJWXG96hGZtgFhK0b/SIAqK0KkDkXR1yTeFtGyxxc=
Subject key identifier: 8C:D9:36:AC:A6:84:93:8B:B6:97:A7:A8:DB:DF:9E:79:EF:96:C4:B9
Authority key identifier: 07:07:79:69:A8:B6:A5:5C:46:1A:DD:E1:06:C0:06:48:6A:26:35:9F
Certificate issuer: /CN=07077969a8b6a55c461adde106c006486a26359f
Certificate serial: 019688490D42591A14BD749A29FD38D75CFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bwd5aai2pVxGGt3hBsAGSGomNZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft
Manifest number: 04CE
Signing time: Wed 30 Apr 2025 20:00:10 +0000
Manifest this update: Wed 30 Apr 2025 20:00:10 +0000
Manifest next update: Thu 01 May 2025 20:00:10 +0000
Files and hashes: 1: Bwd5aai2pVxGGt3hBsAGSGomNZ8.crl (hash: vP/Sa92gkTDIylKUW2wPMFcKelNTeZmlfpXW7nNsL+Y=)
2: ke0E2oaIbTDJICMOrlx-QJLWUjo.roa (hash: b/M26I51nwp3aYDvgtC8WCvNRIgae2epSiIIkTtKKdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bwd5aai2pVxGGt3hBsAGSGomNZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:49:0d:42:59:1a:14:bd:74:9a:29:fd:38:d7:5c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07077969a8b6a55c461adde106c006486a26359f
Validity
Not Before: Apr 30 20:00:10 2025 GMT
Not After : May 1 20:00:10 2025 GMT
Subject: CN=8cd936aca684938bb697a7a8dbdf9e79ef96c4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ec:27:4d:5a:f5:5e:5b:4c:89:68:0e:b1:94:
c0:a3:7b:56:84:83:9a:29:47:64:ea:9a:79:fb:f1:
75:e2:92:96:c7:d4:4c:64:91:42:a8:b1:97:51:f7:
cf:50:e2:5d:cf:c6:46:60:fd:e1:b8:dc:7e:30:48:
f0:76:9c:04:d1:88:3b:ed:5c:73:6f:9a:78:e9:a7:
42:9c:cd:07:ae:b9:f7:ad:78:3e:f3:89:58:1d:30:
a4:7c:3c:e0:72:ce:67:a5:3a:ac:b8:9e:69:f8:36:
0d:96:89:92:f7:d4:9f:3e:93:f2:5b:29:c1:b4:ce:
01:a4:86:51:97:d0:af:c7:8b:9a:3d:75:0e:60:93:
cf:16:e5:5d:70:7f:13:ba:fa:5f:57:4a:fd:80:33:
91:61:61:66:bf:82:b3:b7:fc:b8:57:d3:c7:3e:a1:
5b:fb:95:c2:ca:85:eb:0b:7c:a2:fc:4b:06:f7:d0:
b7:8a:32:a4:d5:d8:11:5f:3f:7d:49:80:7d:e2:8f:
4f:b8:4e:a8:df:5c:f0:c0:fa:f9:2e:8c:85:dc:17:
39:c0:43:5f:92:2b:32:af:b9:33:37:16:c9:27:03:
9a:a0:78:81:40:fb:30:92:f4:87:7d:3a:7e:0c:dc:
77:7e:f6:18:fc:7a:f5:42:76:96:1c:7d:b0:7e:76:
4b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D9:36:AC:A6:84:93:8B:B6:97:A7:A8:DB:DF:9E:79:EF:96:C4:B9
X509v3 Authority Key Identifier:
keyid:07:07:79:69:A8:B6:A5:5C:46:1A:DD:E1:06:C0:06:48:6A:26:35:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bwd5aai2pVxGGt3hBsAGSGomNZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:17:95:36:b7:ea:14:06:e8:8c:98:d4:5a:cf:34:22:19:13:
21:e3:fb:81:1e:01:92:42:5c:54:91:87:f7:65:f8:ba:2b:9e:
35:17:7f:5a:4b:59:2f:68:34:90:60:ee:04:29:8d:1c:02:a9:
ce:39:41:0f:11:80:78:50:35:a0:91:72:63:d6:f5:2e:90:d7:
90:23:ee:df:cb:5b:4c:1e:63:49:f2:a1:dc:be:62:af:24:b7:
dc:56:5f:63:4b:00:b6:a0:ab:cf:11:2e:11:eb:0f:29:20:f3:
25:1b:31:b9:2f:a4:68:fd:97:e8:62:12:2d:7b:b2:2a:9c:99:
7d:7c:fb:fe:3f:4b:5b:a1:ff:a5:83:5d:e5:04:a4:9c:94:18:
a4:5b:4e:ef:15:b6:88:d2:60:b6:fb:44:13:58:65:40:2e:17:
3a:ce:77:c6:bf:ab:3f:89:e5:bc:a1:86:53:f4:a9:0d:ff:ee:
00:a2:d6:ed:3f:5c:75:26:23:bf:75:ea:70:21:43:fc:c5:e2:
17:a7:e3:a4:77:88:eb:dc:b7:a0:17:83:74:c6:8d:2a:8b:ae:
c1:19:32:28:2e:16:cf:b8:53:7e:a6:b1:aa:7e:71:7b:1d:a8:
f9:dc:94:45:e5:c6:7b:4e:22:22:bf:94:ff:e6:e0:93:86:f6:
e7:86:89:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaISQ1CWRoUvXSaKf0411z+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MDc3OTY5YThiNmE1NWM0NjFhZGRlMTA2YzAwNjQ4NmEy
NjM1OWYwHhcNMjUwNDMwMjAwMDEwWhcNMjUwNTAxMjAwMDEwWjAzMTEwLwYDVQQD
Eyg4Y2Q5MzZhY2E2ODQ5MzhiYjY5N2E3YThkYmRmOWU3OWVmOTZjNGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OwnTVr1XltMiWgOsZTAo3tWhIOa
KUdk6pp5+/F14pKWx9RMZJFCqLGXUffPUOJdz8ZGYP3huNx+MEjwdpwE0Yg77Vxz
b5p46adCnM0Hrrn3rXg+84lYHTCkfDzgcs5npTqsuJ5p+DYNlomS99SfPpPyWynB
tM4BpIZRl9Cvx4uaPXUOYJPPFuVdcH8TuvpfV0r9gDORYWFmv4Kzt/y4V9PHPqFb
+5XCyoXrC3yi/EsG99C3ijKk1dgRXz99SYB94o9PuE6o31zwwPr5LoyF3Bc5wENf
kisyr7kzNxbJJwOaoHiBQPswkvSHfTp+DNx3fvYY/Hr1QnaWHH2wfnZLTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIzZNqymhJOLtpenqNvfnnnvlsS5MB8GA1UdIwQY
MBaAFAcHeWmotqVcRhrd4QbABkhqJjWfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQndkNWFhaTJwVnhHR3QzaEJzQUdTR29tTlo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8yMzIwNDctYjJlOC00ZmJhLWJkZDUt
YzNmZWM0NWVkMDU2LzEvQndkNWFhaTJwVnhHR3QzaEJzQUdTR29tTlo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8yMzIwNDctYjJlOC00ZmJhLWJkZDUtYzNmZWM0NWVkMDU2
LzEvQndkNWFhaTJwVnhHR3QzaEJzQUdTR29tTlo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaheVNrfq
FAbojJjUWs80IhkTIeP7gR4BkkJcVJGH92X4uiueNRd/WktZL2g0kGDuBCmNHAKp
zjlBDxGAeFA1oJFyY9b1LpDXkCPu38tbTB5jSfKh3L5iryS33FZfY0sAtqCrzxEu
EesPKSDzJRsxuS+kaP2X6GISLXuyKpyZfXz7/j9LW6H/pYNd5QSknJQYpFtO7xW2
iNJgtvtEE1hlQC4XOs53xr+rP4nlvKGGU/SpDf/uAKLW7T9cdSYjv3XqcCFD/MXi
F6fjpHeI69y3oBeDdMaNKouuwRkyKC4Wz7hTfqaxqn5xex2o+dyUReXGe04iIr+U
/+bgk4b254aJQQ==
-----END CERTIFICATE-----
Generated at Thu May 1 05:53:39 2025 by rpki-client