
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft
File: bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft (raw, json)
Hash identifier: 7vttL/vDhaDkwLmbb4XlNSePZhRvfnc8cA4V1jWETDw=
Subject key identifier: CD:00:55:B5:2E:DA:6D:04:7E:FC:F5:36:EE:E1:2D:DE:FD:ED:10:36
Authority key identifier: 6E:68:C1:B9:0E:45:F9:1B:AB:8D:60:78:8E:ED:25:CB:4A:01:0F:E8
Certificate issuer: /CN=6e68c1b90e45f91bab8d60788eed25cb4a010fe8
Certificate serial: 0196AE4445C99744D86F7BB11D8989364B1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmjBuQ5F-RurjWB4ju0ly0oBD-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft
Manifest number: 0478
Signing time: Thu 08 May 2025 05:00:31 +0000
Manifest this update: Thu 08 May 2025 05:00:31 +0000
Manifest next update: Fri 09 May 2025 05:00:31 +0000
Files and hashes: 1: bmjBuQ5F-RurjWB4ju0ly0oBD-g.crl (hash: LM444oXygwBzLbHT4m7pWurgSQV0p9rtk0behHVTugM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmjBuQ5F-RurjWB4ju0ly0oBD-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:44:45:c9:97:44:d8:6f:7b:b1:1d:89:89:36:4b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e68c1b90e45f91bab8d60788eed25cb4a010fe8
Validity
Not Before: May 8 05:00:31 2025 GMT
Not After : May 9 05:00:31 2025 GMT
Subject: CN=cd0055b52eda6d047efcf536eee12ddefded1036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2c:a5:22:8f:f9:cd:45:a6:61:bd:96:1c:b3:
7a:a1:b2:68:3f:cb:8b:19:7b:f3:e4:44:c1:b0:ef:
68:a3:eb:5f:59:25:33:09:30:ea:37:df:4b:88:70:
c8:ba:e5:83:8e:ff:f4:47:44:1b:db:9a:62:95:1f:
3b:89:ac:fa:6b:a6:c9:01:f9:58:9f:2a:65:d4:ca:
33:e0:c1:5e:c9:94:b0:6a:2f:c0:a1:c7:3c:9f:96:
7e:33:91:65:e5:08:cb:69:a2:bf:5b:9a:35:69:8a:
6e:0e:bc:3f:23:a2:7d:dd:ce:3e:d6:d0:ca:41:4b:
fe:21:d9:28:96:43:07:d1:d1:72:d2:e6:c6:14:77:
4a:e9:a3:bd:5c:a9:0e:03:07:93:2d:b6:4f:40:24:
d3:f2:62:36:0c:c6:16:6b:ae:fa:5c:42:13:6c:10:
d7:98:7e:4b:f9:c1:7c:e6:5c:dd:cc:b4:95:81:85:
de:02:12:9b:c5:50:1c:2c:8c:c7:54:20:6b:9a:5c:
91:f9:12:42:f4:2a:a2:1e:1b:f6:de:9c:5c:12:62:
f4:2d:5a:56:e9:7d:05:e0:81:fc:3f:51:a1:f2:c2:
4c:d4:f9:d8:d4:10:f4:ad:f1:9b:3f:db:cc:93:60:
5a:ee:df:74:05:c4:70:94:da:0e:4a:94:f5:1a:49:
05:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:00:55:B5:2E:DA:6D:04:7E:FC:F5:36:EE:E1:2D:DE:FD:ED:10:36
X509v3 Authority Key Identifier:
keyid:6E:68:C1:B9:0E:45:F9:1B:AB:8D:60:78:8E:ED:25:CB:4A:01:0F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmjBuQ5F-RurjWB4ju0ly0oBD-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:14:1c:a2:a8:d7:e9:77:38:6b:f6:9a:90:9a:b1:3f:86:d8:
e3:ff:1c:f7:b5:bf:cb:04:16:91:a8:4b:fa:db:c0:c8:bc:a1:
f5:ab:66:a7:89:75:32:61:2e:68:b1:c6:9c:ce:61:f5:2d:02:
2f:e1:04:9c:9c:ef:32:92:af:0b:7e:9d:82:20:9a:b5:66:86:
1c:71:f7:87:ef:0a:5c:2d:13:65:e2:16:c3:98:cd:b7:2a:23:
84:5c:ea:46:7b:34:0b:56:f2:4f:ad:82:75:45:e6:c1:3f:a0:
43:c0:dc:1b:a5:58:c7:e9:cf:4d:20:5e:8e:94:73:95:9b:63:
92:be:05:c1:9e:48:e4:7d:9e:79:ac:ec:da:36:e2:99:61:ad:
26:e1:59:82:f9:59:69:d1:fa:02:23:da:2a:67:c5:ff:6b:f5:
bc:05:5d:fd:bb:3c:23:d4:5d:15:8f:b7:9a:a2:28:e5:22:dd:
30:00:b8:aa:0e:5b:31:4f:55:46:0f:77:d7:d1:dd:2e:f4:97:
97:90:a1:e9:83:4e:7a:2f:dd:4e:7d:93:52:23:2a:e7:03:6b:
45:f7:55:d7:9e:9a:3d:f8:f6:7d:77:a8:a5:80:54:22:a9:2d:
6c:29:b2:f1:df:1c:88:47:19:0b:42:9e:9c:47:79:de:36:df:
97:d0:94:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZauREXJl0TYb3uxHYmJNksdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNjhjMWI5MGU0NWY5MWJhYjhkNjA3ODhlZWQyNWNiNGEw
MTBmZTgwHhcNMjUwNTA4MDUwMDMxWhcNMjUwNTA5MDUwMDMxWjAzMTEwLwYDVQQD
EyhjZDAwNTViNTJlZGE2ZDA0N2VmY2Y1MzZlZWUxMmRkZWZkZWQxMDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyylIo/5zUWmYb2WHLN6obJoP8uL
GXvz5ETBsO9oo+tfWSUzCTDqN99LiHDIuuWDjv/0R0Qb25pilR87iaz6a6bJAflY
nypl1Moz4MFeyZSwai/Aocc8n5Z+M5Fl5QjLaaK/W5o1aYpuDrw/I6J93c4+1tDK
QUv+IdkolkMH0dFy0ubGFHdK6aO9XKkOAweTLbZPQCTT8mI2DMYWa676XEITbBDX
mH5L+cF85lzdzLSVgYXeAhKbxVAcLIzHVCBrmlyR+RJC9CqiHhv23pxcEmL0LVpW
6X0F4IH8P1Gh8sJM1PnY1BD0rfGbP9vMk2Ba7t90BcRwlNoOSpT1GkkFlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0AVbUu2m0Efvz1Nu7hLd797RA2MB8GA1UdIwQY
MBaAFG5owbkORfkbq41geI7tJctKAQ/oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm1qQnVRNUYtUnVyaldCNGp1MGx5MG9CRC1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmFjYTEtZjU1Ny00MTA0LWI1ZmEt
MTc0MDYzMGZjYzQ1LzEvYm1qQnVRNUYtUnVyaldCNGp1MGx5MG9CRC1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9iYmFjYTEtZjU1Ny00MTA0LWI1ZmEtMTc0MDYzMGZjYzQ1
LzEvYm1qQnVRNUYtUnVyaldCNGp1MGx5MG9CRC1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnBQcoqjX
6Xc4a/aakJqxP4bY4/8c97W/ywQWkahL+tvAyLyh9atmp4l1MmEuaLHGnM5h9S0C
L+EEnJzvMpKvC36dgiCatWaGHHH3h+8KXC0TZeIWw5jNtyojhFzqRns0C1byT62C
dUXmwT+gQ8DcG6VYx+nPTSBejpRzlZtjkr4FwZ5I5H2eeazs2jbimWGtJuFZgvlZ
adH6AiPaKmfF/2v1vAVd/bs8I9RdFY+3mqIo5SLdMAC4qg5bMU9VRg9319HdLvSX
l5Ch6YNOei/dTn2TUiMq5wNrRfdV156aPfj2fXeopYBUIqktbCmy8d8ciEcZC0Ke
nEd53jbfl9CUjg==
-----END CERTIFICATE-----
Generated at Thu May 8 08:37:57 2025 by rpki-client