Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
File: BgOecctxUgSoPMJTgi3CmmLHmeY.mft (raw, json)
Hash identifier: hDNpmEvJc0pjlh1646QGzWf4ANbrCT2Q3mbKBGzWVM8=
Subject key identifier: 93:5A:99:31:F4:5C:E5:54:48:A1:7C:9C:1B:69:F3:80:36:8F:6E:60
Authority key identifier: 06:03:9E:71:CB:71:52:04:A8:3C:C2:53:82:2D:C2:9A:62:C7:99:E6
Certificate issuer: /CN=06039e71cb715204a83cc253822dc29a62c799e6
Certificate serial: 019675D536EBFA4F70E7DFB9C5ECF138B5F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
Manifest number: 0620
Signing time: Sun 27 Apr 2025 06:00:29 +0000
Manifest this update: Sun 27 Apr 2025 06:00:29 +0000
Manifest next update: Mon 28 Apr 2025 06:00:29 +0000
Files and hashes: 1: AzSimOOUCBaH0nGWbesdL3p-c-Y.roa (hash: tmnAHG5c86gcxksbrSaGyYNVU434mmJFa3fZgdZ+AZw=)
2: BgOecctxUgSoPMJTgi3CmmLHmeY.crl (hash: vgYC4ONFNNJVgbj+WCB5KDNeeHQM92Tcc/QaL5LzIZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:36:eb:fa:4f:70:e7:df:b9:c5:ec:f1:38:b5:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06039e71cb715204a83cc253822dc29a62c799e6
Validity
Not Before: Apr 27 06:00:29 2025 GMT
Not After : Apr 28 06:00:29 2025 GMT
Subject: CN=935a9931f45ce55448a17c9c1b69f380368f6e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:64:3d:38:f7:46:13:bf:3e:da:44:9e:f8:44:
fe:75:60:08:82:cd:16:1c:27:f0:20:b8:8b:0b:fd:
ed:dd:4b:d2:52:ed:d6:2e:af:f1:c1:8d:d8:2b:be:
b4:bf:11:a0:d8:3c:32:e8:e8:a1:ac:ae:3c:57:7d:
7c:b6:9d:1a:4b:38:22:64:ca:4f:82:30:de:6d:ce:
91:4f:aa:95:31:29:43:23:b7:2d:22:f7:44:e6:d8:
f5:9f:d5:96:b6:b6:e5:c3:46:f2:71:2b:4e:90:bd:
2d:a4:04:45:23:cf:4f:29:c5:17:31:ac:ad:08:e0:
a2:e1:21:55:bb:6e:8f:ff:2a:47:68:d8:18:c9:43:
7a:a6:d6:5a:82:2f:4c:13:04:a8:fa:8a:a3:d0:c5:
09:fa:0a:63:2d:c9:e3:a6:db:b8:84:d9:34:79:3a:
4d:84:94:fd:b4:77:d3:6e:f1:89:96:ef:72:b4:4f:
e5:ed:22:52:dc:74:2f:c6:cd:b8:2a:a8:9a:5c:5b:
d3:5c:6c:6d:56:af:ea:95:b4:88:ec:88:0d:27:35:
56:17:65:e4:d5:cf:6a:95:74:91:e3:91:55:06:79:
f0:cb:21:03:57:ab:36:6d:33:7e:05:17:67:72:79:
4e:ee:c1:f8:bb:fb:5c:ae:97:50:fc:63:8e:46:d2:
17:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5A:99:31:F4:5C:E5:54:48:A1:7C:9C:1B:69:F3:80:36:8F:6E:60
X509v3 Authority Key Identifier:
keyid:06:03:9E:71:CB:71:52:04:A8:3C:C2:53:82:2D:C2:9A:62:C7:99:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f9:6c:11:da:70:5b:e8:e1:63:17:4e:9a:f6:3e:dd:d5:8a:
c4:55:5f:62:85:be:a7:f5:55:7f:dd:85:52:30:05:04:e4:48:
d8:1d:e8:5f:7f:2d:22:c4:46:8d:5b:85:d2:9c:8c:e9:d7:ae:
48:9f:d7:10:b0:cb:c9:d3:28:01:9d:87:4d:71:2b:15:f9:bb:
b0:e4:a9:a2:6c:30:44:6a:49:ac:7a:ce:d4:e3:ed:d6:ee:60:
ec:35:bc:1e:c1:4a:db:99:8d:c9:81:29:ed:3d:ae:17:45:7c:
90:e2:9b:11:bd:7b:0f:81:8a:e8:93:22:21:0b:57:26:99:bb:
f4:71:6c:8a:22:40:01:f8:0e:47:a3:dd:23:ab:1a:9d:4a:b6:
0e:07:58:06:35:2c:48:b6:32:91:db:db:4d:e2:53:5c:6d:97:
90:86:c1:e6:14:cd:b1:ec:b8:88:9e:16:08:35:48:67:4d:5a:
25:2f:5c:65:c4:86:3b:6e:c4:48:de:7c:81:b0:c8:7e:e4:74:
70:aa:78:b7:27:b9:4b:f8:f6:34:cb:48:26:03:24:8c:d5:cd:
06:c4:6f:80:d4:3b:40:23:9a:a6:f3:81:b9:fa:f9:87:04:da:
8e:f0:1c:4c:cd:8b:b6:d1:8a:91:ff:32:6d:87:20:be:36:9d:
ea:e5:9c:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ11Tbr+k9w59+5xezxOLX5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MDM5ZTcxY2I3MTUyMDRhODNjYzI1MzgyMmRjMjlhNjJj
Nzk5ZTYwHhcNMjUwNDI3MDYwMDI5WhcNMjUwNDI4MDYwMDI5WjAzMTEwLwYDVQQD
Eyg5MzVhOTkzMWY0NWNlNTU0NDhhMTdjOWMxYjY5ZjM4MDM2OGY2ZTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mQ9OPdGE78+2kSe+ET+dWAIgs0W
HCfwILiLC/3t3UvSUu3WLq/xwY3YK760vxGg2Dwy6OihrK48V318tp0aSzgiZMpP
gjDebc6RT6qVMSlDI7ctIvdE5tj1n9WWtrblw0bycStOkL0tpARFI89PKcUXMayt
COCi4SFVu26P/ypHaNgYyUN6ptZagi9MEwSo+oqj0MUJ+gpjLcnjptu4hNk0eTpN
hJT9tHfTbvGJlu9ytE/l7SJS3HQvxs24KqiaXFvTXGxtVq/qlbSI7IgNJzVWF2Xk
1c9qlXSR45FVBnnwyyEDV6s2bTN+BRdncnlO7sH4u/tcrpdQ/GOORtIXFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJNamTH0XOVUSKF8nBtp84A2j25gMB8GA1UdIwQY
MBaAFAYDnnHLcVIEqDzCU4Itwppix5nmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmdPZWNjdHhVZ1NvUE1KVGdpM0NtbUxIbWVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9lNjI4NzktMmM2OS00MGMzLWIxMTYt
MGU0Njg3NWQ0NWZkLzEvQmdPZWNjdHhVZ1NvUE1KVGdpM0NtbUxIbWVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9lNjI4NzktMmM2OS00MGMzLWIxMTYtMGU0Njg3NWQ0NWZk
LzEvQmdPZWNjdHhVZ1NvUE1KVGdpM0NtbUxIbWVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAePlsEdpw
W+jhYxdOmvY+3dWKxFVfYoW+p/VVf92FUjAFBORI2B3oX38tIsRGjVuF0pyM6deu
SJ/XELDLydMoAZ2HTXErFfm7sOSpomwwRGpJrHrO1OPt1u5g7DW8HsFK25mNyYEp
7T2uF0V8kOKbEb17D4GK6JMiIQtXJpm79HFsiiJAAfgOR6PdI6sanUq2DgdYBjUs
SLYykdvbTeJTXG2XkIbB5hTNsey4iJ4WCDVIZ01aJS9cZcSGO27ESN58gbDIfuR0
cKp4tye5S/j2NMtIJgMkjNXNBsRvgNQ7QCOapvOBufr5hwTajvAcTM2LttGKkf8y
bYcgvjad6uWcbg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 10:23:37 2025 by rpki-client