Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/bfKTIS0l1IY-OGucSA3cm-c4Ek8.mft
File: bfKTIS0l1IY-OGucSA3cm-c4Ek8.mft (raw, json)
Hash identifier: EQmUdyf5g4F8UzQWaambCnytLwoTPNRuAou0ttuAw6I=
Subject key identifier: FC:00:D0:5A:54:AD:2C:6C:A1:0C:2D:55:35:A5:B7:67:46:EC:BD:6D
Authority key identifier: 6D:F2:93:21:2D:25:D4:86:3E:38:6B:9C:48:0D:DC:9B:E7:38:12:4F
Certificate issuer: /CN=6df293212d25d4863e386b9c480ddc9be738124f
Certificate serial: 01968A0108011162D50EFD29C326BB3FDEB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfKTIS0l1IY-OGucSA3cm-c4Ek8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/bfKTIS0l1IY-OGucSA3cm-c4Ek8.mft
Manifest number: 14AC
Signing time: Thu 01 May 2025 04:00:45 +0000
Manifest this update: Thu 01 May 2025 04:00:45 +0000
Manifest next update: Fri 02 May 2025 04:00:45 +0000
Files and hashes: 1: HoMgEifDpVQ65AHqBFCCx_7uMoE.roa (hash: MZgT/uxhPiKd1q/F+OrFW0KnU1po9n7PWWPZxZXmYvg=)
2: bfKTIS0l1IY-OGucSA3cm-c4Ek8.crl (hash: +Hy8nqQhlZsmGjwpyK/wyLEO/bhy2PPigaganlblC68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/bfKTIS0l1IY-OGucSA3cm-c4Ek8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/bfKTIS0l1IY-OGucSA3cm-c4Ek8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfKTIS0l1IY-OGucSA3cm-c4Ek8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:01:08:01:11:62:d5:0e:fd:29:c3:26:bb:3f:de:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6df293212d25d4863e386b9c480ddc9be738124f
Validity
Not Before: May 1 04:00:45 2025 GMT
Not After : May 2 04:00:45 2025 GMT
Subject: CN=fc00d05a54ad2c6ca10c2d5535a5b76746ecbd6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:62:dc:05:06:5e:27:b8:f3:47:08:16:c4:9d:
b6:5d:36:a6:2d:e2:24:9f:b1:61:ee:fb:fc:e8:a6:
a6:dc:99:92:f0:58:bf:74:7d:80:32:b3:11:df:4a:
8c:08:53:03:de:cc:95:68:61:f7:32:fd:77:7f:7e:
ea:6e:a8:36:3e:13:21:58:31:49:d3:89:ad:b7:f9:
5b:80:36:c8:c0:5e:f7:90:a3:70:f6:db:1c:35:eb:
f2:55:01:79:dc:9e:77:cc:d9:56:56:e6:c4:42:fc:
e7:04:2e:2c:79:4c:1a:10:7a:a1:4d:57:56:53:e4:
9f:22:da:d6:36:55:41:3a:67:70:4f:39:dc:af:5d:
a0:21:84:95:78:ee:98:a5:89:c0:e4:46:e9:89:9f:
e8:1d:01:53:6f:24:81:09:a3:d6:6a:c4:72:cb:59:
c4:2d:82:a4:2e:ca:e9:88:99:2f:61:08:b3:2e:1e:
0f:1c:58:68:87:f1:0b:3b:35:34:30:e3:c0:2f:4f:
88:8e:a1:9f:a1:8e:d7:dd:9b:98:87:ad:8b:34:1b:
f2:a1:cf:d1:6e:f3:dd:cd:17:5a:d3:ed:d4:2a:84:
2e:c3:61:c5:ed:5b:67:54:5b:28:ed:09:1d:6e:1e:
45:b3:b1:52:21:b4:d0:00:89:c9:ce:6d:e1:c6:98:
5d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:00:D0:5A:54:AD:2C:6C:A1:0C:2D:55:35:A5:B7:67:46:EC:BD:6D
X509v3 Authority Key Identifier:
keyid:6D:F2:93:21:2D:25:D4:86:3E:38:6B:9C:48:0D:DC:9B:E7:38:12:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfKTIS0l1IY-OGucSA3cm-c4Ek8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/bfKTIS0l1IY-OGucSA3cm-c4Ek8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/bfKTIS0l1IY-OGucSA3cm-c4Ek8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:7e:e6:cb:fb:38:d1:85:f1:2e:dd:6b:a6:cc:dd:f3:2b:3f:
c7:88:a7:dc:b6:d7:54:80:fe:9f:03:9f:6b:7a:10:8e:55:d8:
b1:c0:0e:ad:55:06:0c:34:ba:0a:6f:b4:0d:2f:39:4e:06:f9:
cc:3b:f5:92:c2:6d:9a:5b:87:e4:3c:9e:8f:51:89:6e:a8:6e:
65:57:2a:18:8d:0e:ee:80:52:8d:a4:dd:cb:36:0f:ef:00:8d:
df:6b:34:be:8c:86:73:cc:91:49:bf:3a:28:35:a3:2f:e4:fa:
16:a5:10:cf:f6:56:d0:d1:23:81:75:8c:66:35:13:c7:53:c2:
01:42:6d:50:de:16:01:7e:96:17:e7:80:00:39:a3:52:8b:bb:
b9:93:67:72:d2:bc:24:99:70:dd:72:d0:40:05:19:5d:1a:45:
06:f2:6f:8b:14:4a:d6:9b:a2:8e:49:5e:f9:7e:25:8f:63:b0:
92:40:a0:5a:8e:91:28:30:2b:02:47:e8:e8:a1:c4:93:62:56:
06:5b:87:3f:35:64:6d:9b:09:dd:84:20:df:33:5b:cc:6e:7d:
4f:6d:12:58:bd:f0:7b:1e:e9:e4:9c:e3:64:ad:56:03:85:31:
98:be:58:4a:86:3e:8d:64:f4:e3:d3:48:52:96:80:fd:63:7f:
16:91:e8:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaKAQgBEWLVDv0pwya7P962MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZjI5MzIxMmQyNWQ0ODYzZTM4NmI5YzQ4MGRkYzliZTcz
ODEyNGYwHhcNMjUwNTAxMDQwMDQ1WhcNMjUwNTAyMDQwMDQ1WjAzMTEwLwYDVQQD
EyhmYzAwZDA1YTU0YWQyYzZjYTEwYzJkNTUzNWE1Yjc2NzQ2ZWNiZDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGLcBQZeJ7jzRwgWxJ22XTamLeIk
n7Fh7vv86Kam3JmS8Fi/dH2AMrMR30qMCFMD3syVaGH3Mv13f37qbqg2PhMhWDFJ
04mtt/lbgDbIwF73kKNw9tscNevyVQF53J53zNlWVubEQvznBC4seUwaEHqhTVdW
U+SfItrWNlVBOmdwTzncr12gIYSVeO6YpYnA5EbpiZ/oHQFTbySBCaPWasRyy1nE
LYKkLsrpiJkvYQizLh4PHFhoh/ELOzU0MOPAL0+IjqGfoY7X3ZuYh62LNBvyoc/R
bvPdzRda0+3UKoQuw2HF7VtnVFso7Qkdbh5Fs7FSIbTQAInJzm3hxphdCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwA0FpUrSxsoQwtVTWlt2dG7L1tMB8GA1UdIwQY
MBaAFG3ykyEtJdSGPjhrnEgN3JvnOBJPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmZLVElTMGwxSVktT0d1Y1NBM2NtLWM0RWs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hZWNiOGEtZDc2My00NjQyLTgwMzYt
ZjQwMDQwMmI1MzZjLzEvYmZLVElTMGwxSVktT0d1Y1NBM2NtLWM0RWs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9hZWNiOGEtZDc2My00NjQyLTgwMzYtZjQwMDQwMmI1MzZj
LzEvYmZLVElTMGwxSVktT0d1Y1NBM2NtLWM0RWs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK37my/s4
0YXxLt1rpszd8ys/x4in3LbXVID+nwOfa3oQjlXYscAOrVUGDDS6Cm+0DS85Tgb5
zDv1ksJtmluH5Dyej1GJbqhuZVcqGI0O7oBSjaTdyzYP7wCN32s0voyGc8yRSb86
KDWjL+T6FqUQz/ZW0NEjgXWMZjUTx1PCAUJtUN4WAX6WF+eAADmjUou7uZNnctK8
JJlw3XLQQAUZXRpFBvJvixRK1puijkle+X4lj2OwkkCgWo6RKDArAkfo6KHEk2JW
BluHPzVkbZsJ3YQg3zNbzG59T20SWL3wex7p5JzjZK1WA4UxmL5YSoY+jWT049NI
UpaA/WN/FpHo6A==
-----END CERTIFICATE-----
Generated at Thu May 1 06:13:55 2025 by rpki-client