Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
File: bzOv1B6gEvsoA8cnRSPI7D8mExE.mft (raw, json)
Hash identifier: N7skgUG4Jni/f8FVqKcisCkdTIobYtMvIYdMH4Pjh4s=
Subject key identifier: 06:37:4C:FA:12:D7:73:65:16:C0:6F:84:3F:D5:72:97:65:D5:4D:E8
Authority key identifier: 6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11
Certificate issuer: /CN=6f33afd41ea012fb2803c7274523c8ec3f261311
Certificate serial: 01967E6A590E6DEFAB9F53EE233F75AFE353
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 22:00:20 +0000
Manifest this update: Mon 28 Apr 2025 22:00:20 +0000
Manifest next update: Tue 29 Apr 2025 22:00:20 +0000
Files and hashes: 1: bzOv1B6gEvsoA8cnRSPI7D8mExE.crl (hash: YS5ApN38ALieXFjIUypLz8tEkOdnOomkHCk2OG/Xw7A=)
2: v8tpm7-4VwDQ4BW9MfFdtqRUZ9c.roa (hash: Xcaj7PWNKHBPkwnwanmCNYJ/FSFogXNO8sh3nrmk3Ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:6a:59:0e:6d:ef:ab:9f:53:ee:23:3f:75:af:e3:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f33afd41ea012fb2803c7274523c8ec3f261311
Validity
Not Before: Apr 28 22:00:20 2025 GMT
Not After : Apr 29 22:00:20 2025 GMT
Subject: CN=06374cfa12d7736516c06f843fd5729765d54de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3c:03:e6:44:dd:74:ee:41:21:80:5a:06:bd:
a6:9b:6c:3d:0c:38:7c:22:77:a6:17:2e:d6:56:55:
30:55:e1:56:79:92:cc:b8:d7:b3:17:56:9f:3b:21:
8d:c6:97:92:d1:8d:bf:da:7d:c8:36:e3:a0:08:db:
8d:1f:48:e5:c8:7f:db:67:f0:b1:aa:7b:34:f1:ca:
ff:4d:b5:fa:98:ca:71:18:b3:e2:72:15:8f:95:b4:
ba:0f:62:95:3b:f2:21:c1:3e:6d:43:7f:4f:25:37:
c7:93:c8:87:05:4c:1e:d8:ff:22:8d:11:54:43:e1:
83:67:f1:39:1f:e9:7f:cb:52:2f:38:0d:d8:9d:87:
27:4b:a4:76:d1:da:79:87:f0:e3:96:3c:53:c6:31:
07:a1:c4:02:96:ad:69:16:97:25:61:e9:9d:50:ca:
d5:2b:c1:5b:c3:55:f1:15:f3:b4:57:42:e5:21:a2:
7b:3d:1b:e7:17:49:c0:10:22:40:6b:99:69:db:db:
c8:c8:0b:4e:b4:1c:a6:50:32:69:3a:39:19:fb:4f:
a2:ea:68:f6:a2:9b:f2:af:eb:b6:84:72:47:5c:85:
95:89:30:0e:60:32:b8:dd:3a:fc:d3:90:6b:a8:5c:
73:0e:a5:36:93:33:9c:37:0a:86:2f:74:87:c5:fc:
32:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:37:4C:FA:12:D7:73:65:16:C0:6F:84:3F:D5:72:97:65:D5:4D:E8
X509v3 Authority Key Identifier:
keyid:6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ef:8b:c2:3a:7a:ed:d9:35:7d:59:2b:f8:fc:51:79:4b:c1:
cd:e8:fa:6c:3c:eb:f0:4a:3d:4e:78:db:9e:7e:2f:c6:f0:a6:
06:d3:a4:37:6c:b8:35:db:e8:3e:c1:e6:26:f8:f2:f5:37:ee:
2f:58:32:2a:77:4d:a1:f9:d0:43:48:6e:ae:c1:b4:87:c7:d7:
10:3a:1c:bc:6a:8b:3a:d2:e2:26:e5:41:7e:f5:25:7c:7d:b4:
1d:c8:2b:64:9e:5a:d9:9d:c9:86:74:12:31:1d:aa:f7:7b:cf:
27:ec:1f:77:af:78:a5:0e:f4:e5:a8:c2:54:38:8a:95:80:c9:
f8:94:b7:17:df:46:41:31:dc:11:a9:a3:78:7e:a8:22:f5:3e:
e8:2d:cc:9a:72:51:da:64:07:49:15:fb:cd:ce:02:8f:dc:c1:
f6:3b:8b:51:a1:03:1f:21:48:55:50:4d:46:53:82:35:e9:18:
67:da:ba:d8:9d:c0:ee:c1:09:fc:9d:01:1c:73:59:74:ae:ba:
7b:7d:78:65:2e:90:d7:62:22:67:30:71:ab:e5:1a:d3:12:f1:
20:52:dd:dc:43:ea:01:da:70:a6:e4:a8:d5:ed:48:92:3a:65:
14:4b:49:1d:44:d8:69:9a:13:bb:a3:86:6d:b9:15:be:eb:4a:
7a:44:2b:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ+alkObe+rn1PuIz91r+NTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMzNhZmQ0MWVhMDEyZmIyODAzYzcyNzQ1MjNjOGVjM2Yy
NjEzMTEwHhcNMjUwNDI4MjIwMDIwWhcNMjUwNDI5MjIwMDIwWjAzMTEwLwYDVQQD
EygwNjM3NGNmYTEyZDc3MzY1MTZjMDZmODQzZmQ1NzI5NzY1ZDU0ZGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDwD5kTddO5BIYBaBr2mm2w9DDh8
InemFy7WVlUwVeFWeZLMuNezF1afOyGNxpeS0Y2/2n3INuOgCNuNH0jlyH/bZ/Cx
qns08cr/TbX6mMpxGLPichWPlbS6D2KVO/IhwT5tQ39PJTfHk8iHBUwe2P8ijRFU
Q+GDZ/E5H+l/y1IvOA3YnYcnS6R20dp5h/DjljxTxjEHocQClq1pFpclYemdUMrV
K8Fbw1XxFfO0V0LlIaJ7PRvnF0nAECJAa5lp29vIyAtOtBymUDJpOjkZ+0+i6mj2
opvyr+u2hHJHXIWViTAOYDK43Tr805BrqFxzDqU2kzOcNwqGL3SHxfwyoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAY3TPoS13NlFsBvhD/Vcpdl1U3oMB8GA1UdIwQY
MBaAFG8zr9QeoBL7KAPHJ0UjyOw/JhMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnpPdjFCNmdFdnNvQThjblJTUEk3RDhtRXhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85ZWFmN2YtYWIwMC00MmIyLTljZTIt
YjM1ODA5OTRhM2IxLzEvYnpPdjFCNmdFdnNvQThjblJTUEk3RDhtRXhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS85ZWFmN2YtYWIwMC00MmIyLTljZTItYjM1ODA5OTRhM2Ix
LzEvYnpPdjFCNmdFdnNvQThjblJTUEk3RDhtRXhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcO+Lwjp6
7dk1fVkr+PxReUvBzej6bDzr8Eo9Tnjbnn4vxvCmBtOkN2y4NdvoPsHmJvjy9Tfu
L1gyKndNofnQQ0hursG0h8fXEDocvGqLOtLiJuVBfvUlfH20HcgrZJ5a2Z3JhnQS
MR2q93vPJ+wfd694pQ705ajCVDiKlYDJ+JS3F99GQTHcEamjeH6oIvU+6C3MmnJR
2mQHSRX7zc4Cj9zB9juLUaEDHyFIVVBNRlOCNekYZ9q62J3A7sEJ/J0BHHNZdK66
e314ZS6Q12IiZzBxq+Ua0xLxIFLd3EPqAdpwpuSo1e1IkjplFEtJHUTYaZoTu6OG
bbkVvutKekQrSg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 02:22:30 2025 by rpki-client