Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
File: bcXjzvXaXn_fw2TF1aBALTpnhtw.mft (raw, json)
Hash identifier: 9RtXKNG8QSetKXbCaKbFKlVjsEM8vuF99j4a5zBKH6U=
Subject key identifier: 04:CA:E8:A6:B3:3E:78:14:6D:2A:FC:8D:82:77:3C:1D:73:4E:B1:1E
Authority key identifier: 6D:C5:E3:CE:F5:DA:5E:7F:DF:C3:64:C5:D5:A0:40:2D:3A:67:86:DC
Certificate issuer: /CN=6dc5e3cef5da5e7fdfc364c5d5a0402d3a6786dc
Certificate serial: 01967D5787D3879539949859A9E183CD3A13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
Manifest number: 0DAD
Signing time: Mon 28 Apr 2025 17:00:10 +0000
Manifest this update: Mon 28 Apr 2025 17:00:10 +0000
Manifest next update: Tue 29 Apr 2025 17:00:10 +0000
Files and hashes: 1: DoUsi8lBp24xgpF7Cj5k0M8Xf1k.roa (hash: 8DoQ+UjZ0y3DouoJyhRBNdxsuMKM8IPBGox8SgTwz/M=)
2: bcXjzvXaXn_fw2TF1aBALTpnhtw.crl (hash: fqJZr6niDCqivrqwLXaqJXNmz6gqF5vyxHIXANkg6wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:57:87:d3:87:95:39:94:98:59:a9:e1:83:cd:3a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dc5e3cef5da5e7fdfc364c5d5a0402d3a6786dc
Validity
Not Before: Apr 28 17:00:10 2025 GMT
Not After : Apr 29 17:00:10 2025 GMT
Subject: CN=04cae8a6b33e78146d2afc8d82773c1d734eb11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:da:20:da:a5:71:ca:08:46:2b:7c:34:39:81:
23:1e:c1:34:08:81:43:4e:86:2a:47:b9:52:bb:5e:
d6:d6:26:2e:6f:37:fa:be:c2:0e:3f:a2:e1:c9:42:
e0:56:ff:55:19:9a:95:5c:b7:85:f5:05:fb:45:5d:
dc:bc:34:45:d8:e3:64:fc:5a:b0:23:21:bf:fb:2c:
59:ff:2a:94:f8:3b:c7:6c:65:64:62:2b:55:2a:41:
7b:9e:f8:60:a0:62:1e:be:f3:bc:f1:34:d7:43:50:
f3:82:19:8e:73:39:b6:b7:13:06:ed:c6:ed:60:9b:
7c:fa:a5:3e:35:0b:4c:37:be:57:34:c3:55:b6:15:
24:e7:e3:61:66:ab:d5:68:08:af:cd:43:7c:cc:3c:
7a:0a:b9:12:b5:d0:e5:1d:06:3c:51:bc:b9:30:49:
d5:fd:66:c2:ac:24:7f:40:5f:a3:bd:32:43:53:8b:
34:a5:5d:b5:5c:ad:34:54:86:17:a2:08:a5:7a:98:
c3:ed:17:ab:ac:04:67:7c:73:54:c2:8f:e6:98:a1:
43:83:8e:8e:5e:1d:1c:c8:6d:4e:94:c0:c0:ee:f3:
92:fc:30:e4:f2:fb:34:99:f3:49:1a:27:a1:1f:76:
18:42:e9:18:44:23:8c:57:f8:22:56:4b:9c:6b:3d:
39:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CA:E8:A6:B3:3E:78:14:6D:2A:FC:8D:82:77:3C:1D:73:4E:B1:1E
X509v3 Authority Key Identifier:
keyid:6D:C5:E3:CE:F5:DA:5E:7F:DF:C3:64:C5:D5:A0:40:2D:3A:67:86:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:e1:fd:d4:be:c0:7c:a6:68:31:7a:63:bb:88:c0:c8:a5:30:
ce:25:85:6a:86:fd:86:72:8e:78:42:9c:85:e5:e4:6c:40:68:
22:e5:dc:11:ff:e8:19:ff:c1:f3:82:e6:8c:8e:7f:2e:d3:fa:
81:ce:07:4c:3c:da:c6:d5:5e:7a:d6:aa:18:2c:c5:c2:0b:17:
7b:f1:c8:50:79:eb:23:95:6b:a5:91:06:10:64:21:46:fe:40:
84:00:c7:22:c7:4d:8e:ef:75:e4:22:83:d9:b2:e7:00:3e:be:
51:9b:8b:bc:6a:d1:b3:e1:48:db:8a:50:de:04:d2:6c:6c:75:
63:bb:0b:79:97:68:69:21:a0:ff:43:5e:38:28:18:9b:96:de:
eb:41:4e:2e:2a:de:14:f8:d3:cf:dd:b3:69:17:e1:b8:6b:23:
5d:20:bc:30:1e:5f:e7:c8:b3:68:35:12:0b:07:8d:b5:88:84:
ba:f1:51:f5:04:31:f8:5e:98:36:bf:36:a4:da:ad:a6:1c:ac:
80:68:75:38:aa:f6:b8:71:fc:21:bc:f1:a5:72:d4:86:41:0e:
8b:cd:b7:6e:7b:5b:55:78:b4:a5:d1:08:58:12:19:b9:13:40:
de:28:22:97:82:de:1f:17:b3:e4:4d:c9:ed:7a:96:8c:4d:84:
a2:ca:d4:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9V4fTh5U5lJhZqeGDzToTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkYzVlM2NlZjVkYTVlN2ZkZmMzNjRjNWQ1YTA0MDJkM2E2
Nzg2ZGMwHhcNMjUwNDI4MTcwMDEwWhcNMjUwNDI5MTcwMDEwWjAzMTEwLwYDVQQD
EygwNGNhZThhNmIzM2U3ODE0NmQyYWZjOGQ4Mjc3M2MxZDczNGViMTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNog2qVxyghGK3w0OYEjHsE0CIFD
ToYqR7lSu17W1iYubzf6vsIOP6LhyULgVv9VGZqVXLeF9QX7RV3cvDRF2ONk/Fqw
IyG/+yxZ/yqU+DvHbGVkYitVKkF7nvhgoGIevvO88TTXQ1DzghmOczm2txMG7cbt
YJt8+qU+NQtMN75XNMNVthUk5+NhZqvVaAivzUN8zDx6CrkStdDlHQY8Uby5MEnV
/WbCrCR/QF+jvTJDU4s0pV21XK00VIYXogilepjD7RerrARnfHNUwo/mmKFDg46O
Xh0cyG1OlMDA7vOS/DDk8vs0mfNJGiehH3YYQukYRCOMV/giVkucaz05/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATK6KazPngUbSr8jYJ3PB1zTrEeMB8GA1UdIwQY
MBaAFG3F48712l5/38NkxdWgQC06Z4bcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmNYanp2WGFYbl9mdzJURjFhQkFMVHBuaHR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9jYzc3YTYtMmIwZS00Y2RkLTg4MjYt
Y2RjYzk2NjA3YjlhLzEvYmNYanp2WGFYbl9mdzJURjFhQkFMVHBuaHR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9jYzc3YTYtMmIwZS00Y2RkLTg4MjYtY2RjYzk2NjA3Yjlh
LzEvYmNYanp2WGFYbl9mdzJURjFhQkFMVHBuaHR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjeH91L7A
fKZoMXpju4jAyKUwziWFaob9hnKOeEKcheXkbEBoIuXcEf/oGf/B84LmjI5/LtP6
gc4HTDzaxtVeetaqGCzFwgsXe/HIUHnrI5VrpZEGEGQhRv5AhADHIsdNju915CKD
2bLnAD6+UZuLvGrRs+FI24pQ3gTSbGx1Y7sLeZdoaSGg/0NeOCgYm5be60FOLire
FPjTz92zaRfhuGsjXSC8MB5f58izaDUSCweNtYiEuvFR9QQx+F6YNr82pNqtphys
gGh1OKr2uHH8IbzxpXLUhkEOi823bntbVXi0pdEIWBIZuRNA3igil4LeHxez5E3J
7XqWjE2EosrU3A==
-----END CERTIFICATE-----
Generated at Tue Apr 29 01:37:11 2025 by rpki-client