Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
File: BHMrmF-PY_-K6OrHxwgyswzugK0.mft (raw, json)
Hash identifier: gWQTcoE3XvoYHkX8zmSxxKPCjMsAFziehVdP9xaoECs=
Subject key identifier: FF:7B:E4:B3:11:DE:5E:B7:DD:28:A6:32:9F:D0:6E:3D:F3:D5:BA:38
Authority key identifier: 04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
Certificate issuer: /CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Certificate serial: 019674C2E63B8728956EF5C5E57B737907C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 01:00:52 +0000
Manifest this update: Sun 27 Apr 2025 01:00:52 +0000
Manifest next update: Mon 28 Apr 2025 01:00:52 +0000
Files and hashes: 1: 2GrFuxyxyHkqumdayYRyftHOCCA.roa (hash: 58WfiupeF7jv1/JuV3+ZtSw5ZmglbAvhKCWRK1cfUPw=)
2: BHMrmF-PY_-K6OrHxwgyswzugK0.crl (hash: An5S4FgAPPjjJXfYSWj3jJS1xHfmkcrN3TlYZyf79SI=)
3: EFrmvdYAVAISDnJyY9LHHEwKIkE.roa (hash: VVoG4KmLy8MCQlXZBg6STGy/fzjISq/IYVzwvcg57xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:e6:3b:87:28:95:6e:f5:c5:e5:7b:73:79:07:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Validity
Not Before: Apr 27 01:00:52 2025 GMT
Not After : Apr 28 01:00:52 2025 GMT
Subject: CN=ff7be4b311de5eb7dd28a6329fd06e3df3d5ba38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8b:39:5d:ff:ea:f3:48:b9:4f:c8:b1:a7:20:
9c:80:46:a2:1c:dc:5b:1b:ac:fe:5e:ef:d3:e1:4d:
54:82:f1:59:67:bd:04:4b:2d:aa:95:9c:42:bd:24:
77:27:c7:f0:97:48:38:6a:78:86:22:ba:b3:66:05:
a1:1f:24:6b:67:f1:b6:c2:52:74:0f:77:cc:98:0b:
e4:73:1b:d6:af:6b:a0:49:fe:6f:80:8c:4c:bc:14:
4a:28:fe:c5:16:08:ad:a6:5a:ae:fa:26:5c:a8:1c:
4f:99:78:25:ed:35:c9:f2:02:4b:6a:ae:f3:0f:30:
e1:9e:66:c3:3b:4a:ec:eb:70:b6:36:80:ff:22:a8:
a1:6e:31:a9:dd:d7:06:ab:d8:2c:a9:22:cc:6b:81:
68:2d:f2:3f:13:d3:ac:71:db:bb:6b:fe:b7:d2:11:
07:ca:5a:b3:1c:ae:be:fb:c4:3a:c5:e5:f0:12:95:
34:1e:8e:ba:ea:e7:1a:e5:15:94:17:fc:5a:c9:85:
7e:27:2b:22:1d:f1:b5:4c:29:17:6b:c5:44:06:ea:
56:8b:b3:c1:d8:8e:b6:74:7d:e3:24:fe:cf:3d:6e:
32:db:1a:81:39:75:b0:d6:73:22:c7:7f:36:01:74:
3f:da:20:47:7e:44:d1:33:c4:7a:32:02:0f:4c:7b:
e2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7B:E4:B3:11:DE:5E:B7:DD:28:A6:32:9F:D0:6E:3D:F3:D5:BA:38
X509v3 Authority Key Identifier:
keyid:04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:f5:d7:c9:ec:a2:45:9a:2e:05:7a:77:85:4a:58:05:c9:ab:
47:6e:f2:50:7e:00:c2:08:73:ff:a4:6d:15:75:c4:7c:2a:31:
64:b7:af:67:dd:c7:7b:48:8b:b1:f7:10:26:40:12:49:d1:96:
6f:de:a1:1e:c7:cf:16:9d:ca:45:dc:d8:30:2d:31:87:84:98:
68:0b:20:06:2f:4d:d4:ba:ae:83:39:05:20:a1:c6:1b:74:e5:
0c:b0:78:16:04:35:5c:ab:e6:ac:ea:17:19:c5:8b:17:8e:3a:
35:1f:1f:f3:76:76:34:4a:6c:2f:aa:42:5e:04:2a:fe:be:0b:
e0:59:5b:ec:2e:49:9d:72:ae:4f:01:0f:36:a3:78:f2:10:86:
3c:1d:aa:c2:83:95:5d:cc:c2:05:96:de:a9:20:49:ae:70:8e:
c5:c1:aa:63:f7:b2:f7:c5:c5:1e:05:05:4e:a6:f2:88:00:3a:
e0:ba:26:85:b8:3d:45:f2:cd:41:de:78:5e:0f:aa:a8:9c:13:
b9:3a:69:72:24:ef:66:07:fb:6d:d3:92:42:40:29:ba:33:75:
36:46:5f:3e:12:3c:1e:b2:b1:14:1b:30:c8:7b:6d:c6:67:be:
d3:ec:a8:e5:86:89:77:bd:91:d1:e1:49:ec:d0:36:07:93:9b:
41:a0:6a:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0wuY7hyiVbvXF5XtzeQfCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NzMyYjk4NWY4ZjYzZmY4YWU4ZWFjN2M3MDgzMmIzMGNl
ZTgwYWQwHhcNMjUwNDI3MDEwMDUyWhcNMjUwNDI4MDEwMDUyWjAzMTEwLwYDVQQD
EyhmZjdiZTRiMzExZGU1ZWI3ZGQyOGE2MzI5ZmQwNmUzZGYzZDViYTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYs5Xf/q80i5T8ixpyCcgEaiHNxb
G6z+Xu/T4U1UgvFZZ70ESy2qlZxCvSR3J8fwl0g4aniGIrqzZgWhHyRrZ/G2wlJ0
D3fMmAvkcxvWr2ugSf5vgIxMvBRKKP7FFgitplqu+iZcqBxPmXgl7TXJ8gJLaq7z
DzDhnmbDO0rs63C2NoD/IqihbjGp3dcGq9gsqSLMa4FoLfI/E9Oscdu7a/630hEH
ylqzHK6++8Q6xeXwEpU0Ho666uca5RWUF/xayYV+JysiHfG1TCkXa8VEBupWi7PB
2I62dH3jJP7PPW4y2xqBOXWw1nMix382AXQ/2iBHfkTRM8R6MgIPTHviLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP975LMR3l633SimMp/Qbj3z1bo4MB8GA1UdIwQY
MBaAFARzK5hfj2P/iujqx8cIMrMM7oCtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkhNcm1GLVBZXy1LNk9ySHh3Z3lzd3p1Z0swLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82ZGEwYWEtMTMyNy00ZmE2LWE5NDct
YWRhMjcwODI1MjE4LzEvQkhNcm1GLVBZXy1LNk9ySHh3Z3lzd3p1Z0swLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82ZGEwYWEtMTMyNy00ZmE2LWE5NDctYWRhMjcwODI1MjE4
LzEvQkhNcm1GLVBZXy1LNk9ySHh3Z3lzd3p1Z0swLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApPXXyeyi
RZouBXp3hUpYBcmrR27yUH4Awghz/6RtFXXEfCoxZLevZ93He0iLsfcQJkASSdGW
b96hHsfPFp3KRdzYMC0xh4SYaAsgBi9N1LqugzkFIKHGG3TlDLB4FgQ1XKvmrOoX
GcWLF446NR8f83Z2NEpsL6pCXgQq/r4L4Flb7C5JnXKuTwEPNqN48hCGPB2qwoOV
XczCBZbeqSBJrnCOxcGqY/ey98XFHgUFTqbyiAA64Lomhbg9RfLNQd54Xg+qqJwT
uTppciTvZgf7bdOSQkApujN1NkZfPhI8HrKxFBswyHttxme+0+yo5YaJd72R0eFJ
7NA2B5ObQaBqVA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:40:59 2025 by rpki-client