Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.mft
File: bzHGTD5afeEED0Daj-3EfDj-Wfo.mft (raw, json)
Hash identifier: M0OP/aXlMIY2Nbxgt0HasaNgYXY5VQL2pEhU8VmRniU=
Subject key identifier: 7A:6B:03:3B:0C:12:61:1F:EB:C2:C5:72:19:3A:8B:E4:3A:84:AE:90
Authority key identifier: 6F:31:C6:4C:3E:5A:7D:E1:04:0F:40:DA:8F:ED:C4:7C:38:FE:59:FA
Certificate issuer: /CN=6f31c64c3e5a7de1040f40da8fedc47c38fe59fa
Certificate serial: 019683FEFDC5A7B94E413503BFAB15B3914E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzHGTD5afeEED0Daj-3EfDj-Wfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.mft
Manifest number: 0DC2
Signing time: Wed 30 Apr 2025 00:00:48 +0000
Manifest this update: Wed 30 Apr 2025 00:00:48 +0000
Manifest next update: Thu 01 May 2025 00:00:48 +0000
Files and hashes: 1: V-ziE9ps9Cl1x9ik1a79A00SdKk.roa (hash: vAv5TpbiymJ0TO2JtzeVr/xllon/oJLZTZGZk+qEl8o=)
2: bzHGTD5afeEED0Daj-3EfDj-Wfo.crl (hash: udiGpxRYELcIg2E2UyHxDyjy8n/wElHimxGfJvwvVWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzHGTD5afeEED0Daj-3EfDj-Wfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:fe:fd:c5:a7:b9:4e:41:35:03:bf:ab:15:b3:91:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f31c64c3e5a7de1040f40da8fedc47c38fe59fa
Validity
Not Before: Apr 30 00:00:48 2025 GMT
Not After : May 1 00:00:48 2025 GMT
Subject: CN=7a6b033b0c12611febc2c572193a8be43a84ae90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:eb:36:ed:11:5e:f1:17:46:84:a7:36:81:d3:
a6:3c:ac:4a:7f:0f:d5:2f:1c:dd:17:9c:6f:fa:74:
40:a7:8b:85:77:af:4d:b7:08:be:bd:10:05:06:b7:
19:f4:19:e2:9a:3a:d7:e3:51:72:96:0d:46:8f:54:
26:73:4b:7e:29:e9:d8:b1:46:52:e3:a3:ff:da:0a:
5e:80:02:4c:57:e5:5e:aa:bb:2d:7d:e9:54:ab:89:
67:43:e3:0f:37:c8:f4:e9:b1:dd:c7:c3:7e:d5:77:
4a:b8:10:d4:e6:54:24:e4:57:cd:e7:c3:e8:9a:71:
21:a7:eb:a8:c3:17:5b:22:3f:78:de:20:d3:25:78:
22:4b:73:fe:3c:df:ef:a5:2f:bc:10:6b:95:04:ab:
75:1d:f5:be:69:c9:81:2e:06:9a:82:be:f9:8e:d9:
15:3a:6b:73:69:fa:a0:6a:97:40:0f:08:ba:ae:d5:
33:38:ab:e8:7a:d4:00:f5:d0:44:b7:5e:c0:b1:33:
4b:aa:5a:45:96:39:b5:37:c1:49:de:25:cb:eb:28:
13:44:d9:be:f3:08:ab:e1:2d:be:35:54:23:4c:69:
dd:32:ca:e9:de:f3:b6:d0:5c:26:59:47:a4:f8:87:
5f:00:c0:37:37:d3:3c:5c:55:87:03:d4:41:ee:41:
ba:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6B:03:3B:0C:12:61:1F:EB:C2:C5:72:19:3A:8B:E4:3A:84:AE:90
X509v3 Authority Key Identifier:
keyid:6F:31:C6:4C:3E:5A:7D:E1:04:0F:40:DA:8F:ED:C4:7C:38:FE:59:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzHGTD5afeEED0Daj-3EfDj-Wfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c7:27:af:f2:d1:1d:e6:a0:93:ea:12:b9:3f:ca:77:5c:f6:
9f:ba:ff:b6:31:df:f7:b5:09:77:28:f8:b4:ee:a1:83:f3:af:
73:ad:c2:0a:d7:ef:10:72:62:a3:20:27:ab:b2:11:5f:aa:86:
41:8e:cc:59:cf:5f:dc:51:0e:b3:53:8b:62:76:9f:1f:cb:be:
d4:1c:d5:07:20:86:0d:86:94:63:20:d4:b3:9c:09:a4:02:6c:
bc:53:7d:7d:66:53:82:20:dc:fb:50:6a:48:0c:e0:aa:48:7b:
82:9e:dd:7c:7f:51:13:c7:79:05:d8:01:89:d2:f2:6e:5e:c1:
2e:5c:70:51:03:43:f7:df:3b:c7:05:2e:c7:0b:16:93:31:d4:
19:38:ba:03:48:dd:50:d9:82:37:65:db:ac:c3:27:d0:fe:95:
c7:1e:64:16:dd:9c:d9:b4:19:78:9a:92:81:7d:8c:60:40:74:
07:9c:d4:49:d5:49:e8:c8:07:9d:7e:b7:18:28:03:de:75:0b:
eb:68:bd:a5:fc:93:65:6c:1a:b9:2b:a2:6c:af:2a:15:d8:ec:
72:d4:aa:f3:d5:85:4c:b7:da:18:8d:ef:57:ac:83:22:19:40:
10:c6:b7:5b:d8:19:d9:b3:9e:8c:07:28:e6:7d:b3:9b:f4:da:
ca:28:41:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaD/v3Fp7lOQTUDv6sVs5FOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMzFjNjRjM2U1YTdkZTEwNDBmNDBkYThmZWRjNDdjMzhm
ZTU5ZmEwHhcNMjUwNDMwMDAwMDQ4WhcNMjUwNTAxMDAwMDQ4WjAzMTEwLwYDVQQD
Eyg3YTZiMDMzYjBjMTI2MTFmZWJjMmM1NzIxOTNhOGJlNDNhODRhZTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAues27RFe8RdGhKc2gdOmPKxKfw/V
LxzdF5xv+nRAp4uFd69Ntwi+vRAFBrcZ9BnimjrX41Fylg1Gj1Qmc0t+KenYsUZS
46P/2gpegAJMV+VeqrstfelUq4lnQ+MPN8j06bHdx8N+1XdKuBDU5lQk5FfN58Po
mnEhp+uowxdbIj943iDTJXgiS3P+PN/vpS+8EGuVBKt1HfW+acmBLgaagr75jtkV
OmtzafqgapdADwi6rtUzOKvoetQA9dBEt17AsTNLqlpFljm1N8FJ3iXL6ygTRNm+
8wir4S2+NVQjTGndMsrp3vO20FwmWUek+IdfAMA3N9M8XFWHA9RB7kG6BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHprAzsMEmEf68LFchk6i+Q6hK6QMB8GA1UdIwQY
MBaAFG8xxkw+Wn3hBA9A2o/txHw4/ln6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnpIR1RENWFmZUVFRDBEYWotM0VmRGotV2ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi84ZWQzODItMzA5Ny00MTNlLWI2YTIt
YjA4MGEzNDUxYzdmLzEvYnpIR1RENWFmZUVFRDBEYWotM0VmRGotV2ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi84ZWQzODItMzA5Ny00MTNlLWI2YTItYjA4MGEzNDUxYzdm
LzEvYnpIR1RENWFmZUVFRDBEYWotM0VmRGotV2ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVccnr/LR
Heagk+oSuT/Kd1z2n7r/tjHf97UJdyj4tO6hg/Ovc63CCtfvEHJioyAnq7IRX6qG
QY7MWc9f3FEOs1OLYnafH8u+1BzVByCGDYaUYyDUs5wJpAJsvFN9fWZTgiDc+1Bq
SAzgqkh7gp7dfH9RE8d5BdgBidLybl7BLlxwUQND9987xwUuxwsWkzHUGTi6A0jd
UNmCN2XbrMMn0P6Vxx5kFt2c2bQZeJqSgX2MYEB0B5zUSdVJ6MgHnX63GCgD3nUL
62i9pfyTZWwauSuibK8qFdjsctSq89WFTLfaGI3vV6yDIhlAEMa3W9gZ2bOejAco
5n2zm/TayihB2g==
-----END CERTIFICATE-----
Generated at Wed Apr 30 08:16:12 2025 by rpki-client