Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
File: bPmyTywIR9BBweZqEvAeq6R4tPw.mft (raw, json)
Hash identifier: mhJ54MmKfT0MVt51O7lrGtqevOUoXcTIQYIOcNdbXaw=
Subject key identifier: 41:AB:76:6F:92:8A:76:92:9D:07:D2:D1:F3:4D:88:60:0F:AB:A4:3D
Authority key identifier: 6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC
Certificate issuer: /CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
Certificate serial: 0196808F892DED29639270A43BD61A4F313C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
Manifest number: 1260
Signing time: Tue 29 Apr 2025 08:00:12 +0000
Manifest this update: Tue 29 Apr 2025 08:00:12 +0000
Manifest next update: Wed 30 Apr 2025 08:00:12 +0000
Files and hashes: 1: 1-Dc1j-sDoajA4rj7PpUTOnwnU-0.roa (hash: NijhNjLNNvEG1LM/N8d14Oe4TjDIViDnHYlMTh5ifKg=)
2: bPmyTywIR9BBweZqEvAeq6R4tPw.crl (hash: 5MgXYi7H/6klV01ccd6Uu7pK69WOWn8xUPAzP2aQmwo=)
3: bmSsChQ_uSfpackXOAYafu-z5Fo.roa (hash: uprpuovuYrWDW4OaKvbEYi0c7oMEH3+iYWDHio/5TEA=)
4: rnAMBNvdJk6nX3AxwpicmUlIk4I.roa (hash: 3CR6ieS5zbe1a7wxc2adFdSClMAuXiJukh48kNXSBX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:8f:89:2d:ed:29:63:92:70:a4:3b:d6:1a:4f:31:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
Validity
Not Before: Apr 29 08:00:12 2025 GMT
Not After : Apr 30 08:00:12 2025 GMT
Subject: CN=41ab766f928a76929d07d2d1f34d88600faba43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0a:a3:99:b7:25:d9:87:b6:fc:34:15:c9:59:
06:7f:e8:9b:b5:90:ab:b0:5c:c8:8c:37:13:9a:ec:
bd:f9:2c:5d:92:c2:02:71:46:03:ff:18:bc:b3:e7:
d8:94:c8:61:e3:e0:25:fd:4b:13:7e:d3:39:ea:18:
c0:b3:05:c8:ca:84:5d:5a:5f:04:8c:1b:44:e3:44:
40:0e:6c:14:c2:87:03:8d:be:01:90:44:56:86:e3:
a9:ea:5a:80:3a:e9:56:7d:b2:c6:28:7e:3c:42:a5:
c9:11:af:be:e6:cb:a2:03:1f:f3:21:ab:0c:d8:7e:
2b:0b:ac:8e:ef:d6:21:98:80:64:c8:0d:d4:70:41:
18:48:db:e1:2e:6d:98:89:5b:a1:3b:7b:5d:df:c1:
77:c5:2d:fe:27:8e:a2:94:4c:00:0f:18:34:f2:7b:
da:02:cb:10:17:e9:86:22:34:55:bf:0c:24:2f:3d:
2f:4a:06:7a:95:78:0c:94:35:b8:38:e1:96:87:6d:
fe:5f:7e:98:37:37:0b:2f:60:9c:38:c4:d3:5b:83:
74:ae:c8:35:2c:26:9a:de:e9:6e:35:a1:f2:11:fc:
bc:69:4a:a6:9f:7a:9d:19:13:f9:69:ac:d8:28:14:
03:4f:dd:0e:9b:d6:89:da:b7:95:59:a3:49:59:ae:
92:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AB:76:6F:92:8A:76:92:9D:07:D2:D1:F3:4D:88:60:0F:AB:A4:3D
X509v3 Authority Key Identifier:
keyid:6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:fe:7a:c4:e1:e6:c9:72:9e:8a:30:42:76:d6:79:0d:ca:91:
47:9b:d6:41:21:90:03:64:b2:d4:1e:73:3c:4d:29:65:15:12:
4d:cd:37:a5:96:f9:31:b3:63:9b:2a:d9:7e:99:80:f2:c7:8c:
f1:02:d2:b3:b0:1a:df:19:90:04:89:47:46:08:6a:24:df:02:
39:87:01:99:c5:03:6e:fc:9a:b0:91:43:56:12:69:a9:fe:02:
2e:33:d4:d1:11:e2:75:19:cc:e6:97:af:af:ba:de:c8:9b:eb:
85:72:a3:b5:dc:4b:e1:52:1a:c4:9c:8e:a3:e9:c2:28:f9:f2:
c1:42:00:ae:28:6e:b4:0f:3d:22:26:cf:25:1d:da:62:b5:a4:
14:d3:7f:eb:4a:10:17:cc:5e:2e:e8:f2:8a:cc:48:b3:b7:01:
54:53:57:10:66:89:43:a7:b2:ff:bb:6f:37:45:4f:00:96:86:
40:53:fe:7b:a5:20:8f:8b:4d:ce:c1:10:e0:d3:dd:67:f4:1e:
53:04:ab:02:44:42:b4:eb:73:cc:19:49:13:b7:16:59:69:d6:
31:0e:ff:e1:06:a0:20:fc:ef:71:63:1b:98:d3:13:a2:67:7b:
fd:02:1c:5b:11:01:29:25:bd:ee:b7:06:de:aa:ab:31:68:c8:
25:e6:0c:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaAj4kt7SljknCkO9YaTzE8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZjliMjRmMmMwODQ3ZDA0MWMxZTY2YTEyZjAxZWFiYTQ3
OGI0ZmMwHhcNMjUwNDI5MDgwMDEyWhcNMjUwNDMwMDgwMDEyWjAzMTEwLwYDVQQD
Eyg0MWFiNzY2ZjkyOGE3NjkyOWQwN2QyZDFmMzRkODg2MDBmYWJhNDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygqjmbcl2Ye2/DQVyVkGf+ibtZCr
sFzIjDcTmuy9+SxdksICcUYD/xi8s+fYlMhh4+Al/UsTftM56hjAswXIyoRdWl8E
jBtE40RADmwUwocDjb4BkERWhuOp6lqAOulWfbLGKH48QqXJEa++5suiAx/zIasM
2H4rC6yO79YhmIBkyA3UcEEYSNvhLm2YiVuhO3td38F3xS3+J46ilEwADxg08nva
AssQF+mGIjRVvwwkLz0vSgZ6lXgMlDW4OOGWh23+X36YNzcLL2CcOMTTW4N0rsg1
LCaa3uluNaHyEfy8aUqmn3qdGRP5aazYKBQDT90Om9aJ2reVWaNJWa6SjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGrdm+SinaSnQfS0fNNiGAPq6Q9MB8GA1UdIwQY
MBaAFGz5sk8sCEfQQcHmahLwHqukeLT8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlBteVR5d0lSOUJCd2VacUV2QWVxNlI0dFB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9iNDU3NjUtMmMzMy00YTQ5LTkxZWIt
OTQ2ODkyZjg4YmViLzEvYlBteVR5d0lSOUJCd2VacUV2QWVxNlI0dFB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9iNDU3NjUtMmMzMy00YTQ5LTkxZWItOTQ2ODkyZjg4YmVi
LzEvYlBteVR5d0lSOUJCd2VacUV2QWVxNlI0dFB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaf56xOHm
yXKeijBCdtZ5DcqRR5vWQSGQA2Sy1B5zPE0pZRUSTc03pZb5MbNjmyrZfpmA8seM
8QLSs7Aa3xmQBIlHRghqJN8COYcBmcUDbvyasJFDVhJpqf4CLjPU0RHidRnM5pev
r7reyJvrhXKjtdxL4VIaxJyOo+nCKPnywUIArihutA89IibPJR3aYrWkFNN/60oQ
F8xeLujyisxIs7cBVFNXEGaJQ6ey/7tvN0VPAJaGQFP+e6Ugj4tNzsEQ4NPdZ/Qe
UwSrAkRCtOtzzBlJE7cWWWnWMQ7/4QagIPzvcWMbmNMTomd7/QIcWxEBKSW97rcG
3qqrMWjIJeYMqQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:06:46 2025 by rpki-client