Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
File: BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft (raw, json)
Hash identifier: 5KyylW8DqPw/YN2jhnp/KIj+8VhTxoPj0TtoMaCSFCw=
Subject key identifier: EB:3F:AE:CE:BD:65:B8:53:7B:65:08:72:03:8B:79:D1:FF:0B:3B:39
Authority key identifier: 05:6A:D2:F4:FF:C5:87:2E:35:A4:29:E5:3E:F1:79:92:5F:F4:21:5E
Certificate issuer: /CN=056ad2f4ffc5872e35a429e53ef179925ff4215e
Certificate serial: 019676435302F733F2404D3ADA1142427D36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
Manifest number: 1519
Signing time: Sun 27 Apr 2025 08:00:45 +0000
Manifest this update: Sun 27 Apr 2025 08:00:45 +0000
Manifest next update: Mon 28 Apr 2025 08:00:45 +0000
Files and hashes: 1: 74ie5YhiWCpEdYw1osP6lOLENo8.roa (hash: AISylC4LJSWYY19JWF/C07coR9FQEVOV3zwowa8Jq8A=)
2: BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl (hash: 0sZpyqxaZTQYkFgOnAHgwrfuuSgfDb334JgpPudbU8Y=)
3: CFOEQzJpDfyIX_oaNWeu5lzrryg.roa (hash: IIn5PGhc9iJknynMgMeEVyICP0S0I656B95iMkmFmVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:53:02:f7:33:f2:40:4d:3a:da:11:42:42:7d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056ad2f4ffc5872e35a429e53ef179925ff4215e
Validity
Not Before: Apr 27 08:00:45 2025 GMT
Not After : Apr 28 08:00:45 2025 GMT
Subject: CN=eb3faecebd65b8537b650872038b79d1ff0b3b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0a:f9:12:d4:83:e5:b3:07:4f:b7:ad:e7:d5:
fc:43:f5:cd:11:78:13:91:90:34:5a:91:5c:27:73:
fe:36:42:b2:08:ea:e7:a3:64:38:6e:3e:c7:6f:4b:
0c:19:a8:e2:9c:b1:d3:dc:1e:dc:77:da:53:04:fb:
4e:bf:ba:e6:78:72:e3:ac:39:4b:29:5c:e6:89:18:
aa:d2:b1:1a:e4:00:8e:d3:b2:fe:a8:2b:3e:40:24:
7d:24:54:f3:1b:60:9a:d4:81:54:6e:24:f2:0c:be:
70:a0:10:fb:51:b6:31:94:79:d4:b9:89:9e:82:a1:
b6:43:0e:0b:6b:78:b6:ad:46:eb:2f:79:7a:c0:77:
73:ab:41:6c:04:a3:87:23:c9:72:61:09:6c:80:d0:
76:e7:23:ac:db:f7:87:a3:14:bd:33:c4:7a:c7:6d:
28:4a:ca:bf:79:2f:29:5a:41:de:37:57:33:23:cb:
ed:f5:fa:7a:fe:bd:31:86:b4:7b:73:b0:2b:f4:89:
28:0d:ed:7b:1f:87:1c:00:60:2d:25:3f:d8:5a:c1:
12:d0:73:91:5c:0a:4e:48:1d:8a:6d:c4:6a:bf:f1:
5b:4f:65:d6:9e:5e:cd:b5:b1:e8:c0:d5:a3:25:32:
ec:09:2e:d9:09:a5:05:af:81:33:35:57:6f:04:af:
31:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3F:AE:CE:BD:65:B8:53:7B:65:08:72:03:8B:79:D1:FF:0B:3B:39
X509v3 Authority Key Identifier:
keyid:05:6A:D2:F4:FF:C5:87:2E:35:A4:29:E5:3E:F1:79:92:5F:F4:21:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8c:f6:ed:e4:84:de:54:9f:1f:97:f2:b0:d8:ac:a0:d1:03:
b8:42:dc:c7:60:09:8b:20:b5:cb:06:7d:c8:e1:bb:46:d6:1a:
6c:2c:37:3e:1d:0e:32:a2:8b:db:e8:fa:aa:ae:1f:f0:6d:76:
9d:2e:c8:17:aa:6c:54:1f:6a:0b:95:9e:19:6c:3e:25:f7:80:
92:cb:ba:f3:05:b3:7b:fe:53:99:6a:82:c3:d0:e9:09:48:9b:
bb:20:01:54:e7:32:39:84:f4:b9:37:26:3b:28:a9:7c:2a:39:
5e:71:88:eb:c8:66:96:ae:e9:0b:96:b1:e9:d3:87:3e:cd:69:
10:c3:83:3e:cb:d5:0f:3a:72:f5:be:c5:6f:1a:06:33:61:65:
1d:ce:ac:3b:3d:a1:cd:bc:9d:7d:40:5f:bc:03:15:ca:b9:3f:
81:5d:1e:9f:d1:5a:b6:6c:07:28:dc:c2:f3:e6:cc:84:da:0b:
ef:53:e9:7c:52:d2:b0:c0:0c:93:62:a9:cf:88:93:2e:aa:4d:
65:21:21:92:d8:36:ed:86:69:13:fe:1d:fb:0e:62:78:01:ed:
e7:74:0d:88:ee:7f:5a:fc:d7:f0:a4:e6:2b:53:16:a5:05:a1:
16:5f:7c:b6:48:3a:92:63:84:a2:9b:15:10:7f:af:d6:4a:34:
1c:e0:1a:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2Q1MC9zPyQE062hFCQn02MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NmFkMmY0ZmZjNTg3MmUzNWE0MjllNTNlZjE3OTkyNWZm
NDIxNWUwHhcNMjUwNDI3MDgwMDQ1WhcNMjUwNDI4MDgwMDQ1WjAzMTEwLwYDVQQD
EyhlYjNmYWVjZWJkNjViODUzN2I2NTA4NzIwMzhiNzlkMWZmMGIzYjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAr5EtSD5bMHT7et59X8Q/XNEXgT
kZA0WpFcJ3P+NkKyCOrno2Q4bj7Hb0sMGajinLHT3B7cd9pTBPtOv7rmeHLjrDlL
KVzmiRiq0rEa5ACO07L+qCs+QCR9JFTzG2Ca1IFUbiTyDL5woBD7UbYxlHnUuYme
gqG2Qw4La3i2rUbrL3l6wHdzq0FsBKOHI8lyYQlsgNB25yOs2/eHoxS9M8R6x20o
Ssq/eS8pWkHeN1czI8vt9fp6/r0xhrR7c7Ar9IkoDe17H4ccAGAtJT/YWsES0HOR
XApOSB2KbcRqv/FbT2XWnl7NtbHowNWjJTLsCS7ZCaUFr4EzNVdvBK8xjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOs/rs69ZbhTe2UIcgOLedH/Czs5MB8GA1UdIwQY
MBaAFAVq0vT/xYcuNaQp5T7xeZJf9CFeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQldyUzlQX0ZoeTQxcENubFB2RjVrbF8wSVY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC80MzMwZmUtZGJmYy00ODFmLThmZDkt
MWU0ZmNiMWM2MGNiLzEvQldyUzlQX0ZoeTQxcENubFB2RjVrbF8wSVY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC80MzMwZmUtZGJmYy00ODFmLThmZDktMWU0ZmNiMWM2MGNi
LzEvQldyUzlQX0ZoeTQxcENubFB2RjVrbF8wSVY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEYz27eSE
3lSfH5fysNisoNEDuELcx2AJiyC1ywZ9yOG7RtYabCw3Ph0OMqKL2+j6qq4f8G12
nS7IF6psVB9qC5WeGWw+JfeAksu68wWze/5TmWqCw9DpCUibuyABVOcyOYT0uTcm
OyipfCo5XnGI68hmlq7pC5ax6dOHPs1pEMODPsvVDzpy9b7FbxoGM2FlHc6sOz2h
zbydfUBfvAMVyrk/gV0en9FatmwHKNzC8+bMhNoL71PpfFLSsMAMk2Kpz4iTLqpN
ZSEhktg27YZpE/4d+w5ieAHt53QNiO5/WvzX8KTmK1MWpQWhFl98tkg6kmOEopsV
EH+v1ko0HOAafQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 18:06:57 2025 by rpki-client