Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft
File: Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft (raw, json)
Hash identifier: scewznTCppb8QBLUjtMkw8jSxsBwKzcjUFFCxA/1t18=
Subject key identifier: AF:84:36:F2:7C:B9:74:2D:FF:62:B3:86:49:BB:FC:C1:D7:BB:7F:2E
Authority key identifier: 06:7D:CF:57:76:54:DC:A1:7A:61:0B:9A:F4:F2:CA:74:21:DC:BB:81
Certificate issuer: /CN=067dcf577654dca17a610b9af4f2ca7421dcbb81
Certificate serial: 0196778CE394F3666243000A8DC1B391A99D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft
Manifest number: 109E
Signing time: Sun 27 Apr 2025 14:00:44 +0000
Manifest this update: Sun 27 Apr 2025 14:00:44 +0000
Manifest next update: Mon 28 Apr 2025 14:00:44 +0000
Files and hashes: 1: 1GqtXlpLHOQrMWA32pTa86lAWYQ.roa (hash: tnU3CSzBIjcvcUTrt2DgQBxjNJjtnLH3C2y91tIJFC8=)
2: Bn3PV3ZU3KF6YQua9PLKdCHcu4E.crl (hash: Kwxjvm3lIT3vNHCt9jd2x8PjhxPHazgy1giFt8GwdJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8c:e3:94:f3:66:62:43:00:0a:8d:c1:b3:91:a9:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=067dcf577654dca17a610b9af4f2ca7421dcbb81
Validity
Not Before: Apr 27 14:00:44 2025 GMT
Not After : Apr 28 14:00:44 2025 GMT
Subject: CN=af8436f27cb9742dff62b38649bbfcc1d7bb7f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:73:80:24:71:86:a4:06:1d:34:56:0e:1b:39:
4d:d6:54:22:87:d6:b0:a6:b6:5c:e2:aa:e3:cf:0e:
35:b7:40:f4:49:7f:d5:a7:c0:4a:e9:7e:c7:8a:3a:
0e:c0:ff:81:f4:5f:5c:b6:32:c3:47:e4:d5:81:a7:
d8:0b:80:fc:8d:c2:4f:1c:60:50:e8:b8:2c:35:6d:
32:a1:ab:64:63:4f:43:39:5a:39:0f:75:58:71:41:
d9:ae:0d:09:fa:26:c1:be:4d:d9:d3:92:3f:22:d9:
7f:c8:18:10:b7:9c:a6:7f:6a:90:fe:c5:d1:30:dd:
4f:b2:d5:39:79:8f:d7:f9:dc:aa:01:08:26:36:97:
f6:d9:16:8d:5c:1c:b4:df:0d:78:38:59:43:fa:03:
83:bb:56:72:47:7d:a7:69:5d:06:23:22:e8:cc:8c:
8d:ca:57:b0:00:13:e1:ba:57:11:2e:e9:22:65:c1:
f0:d0:66:84:13:03:32:1d:9e:9f:1e:e2:a4:06:a7:
a8:26:20:40:db:d9:96:e8:1f:51:f3:1b:a2:98:80:
47:ce:f6:53:ec:f9:6b:f6:bc:8e:2d:bb:e9:31:29:
1b:1c:21:fa:fb:b4:ce:b9:a7:f0:72:1b:1f:72:53:
42:16:41:72:eb:14:22:f3:f8:3a:95:33:5a:22:81:
97:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:84:36:F2:7C:B9:74:2D:FF:62:B3:86:49:BB:FC:C1:D7:BB:7F:2E
X509v3 Authority Key Identifier:
keyid:06:7D:CF:57:76:54:DC:A1:7A:61:0B:9A:F4:F2:CA:74:21:DC:BB:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:e6:d7:c6:01:dd:8e:82:74:6f:f2:f3:16:61:9c:9d:1a:98:
f4:c8:2e:1e:01:de:5f:e8:d4:86:7d:9c:cc:dc:23:39:1a:d9:
1c:59:89:34:a1:e1:67:7a:e7:ea:d1:6c:78:d0:64:57:02:5f:
35:7e:61:f7:07:8e:c9:0b:5b:0b:84:21:d0:6f:f3:a7:76:93:
86:45:4f:17:97:bc:2f:07:92:63:1c:2f:97:aa:78:71:45:29:
d5:33:36:9f:9c:d0:26:19:62:0c:2c:db:90:ee:d3:9c:58:96:
14:41:f2:8a:a7:81:c6:69:2a:c7:18:17:19:a5:8c:98:a7:94:
fe:5e:a4:c5:99:9b:c5:71:6d:ab:14:54:93:30:ca:24:79:20:
38:2d:30:cb:bc:b3:42:7a:ab:0d:fa:9d:e4:dc:29:71:af:b2:
a1:b3:b4:8f:00:84:cd:79:f7:b9:71:d5:48:5b:74:34:b3:ce:
05:91:15:63:4c:8b:60:bb:8c:ee:e4:77:38:42:1a:e6:8f:5a:
24:24:46:a9:50:1c:6d:c4:e9:f5:72:06:f9:da:7c:e7:46:9d:
75:c9:b4:63:3b:2e:5e:67:71:be:c3:37:15:a5:a8:9c:ee:8a:
6f:98:92:fe:8c:16:91:bf:dd:d1:68:7b:b9:2b:7a:f0:35:fc:
79:f2:5e:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3jOOU82ZiQwAKjcGzkamdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2N2RjZjU3NzY1NGRjYTE3YTYxMGI5YWY0ZjJjYTc0MjFk
Y2JiODEwHhcNMjUwNDI3MTQwMDQ0WhcNMjUwNDI4MTQwMDQ0WjAzMTEwLwYDVQQD
EyhhZjg0MzZmMjdjYjk3NDJkZmY2MmIzODY0OWJiZmNjMWQ3YmI3ZjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHOAJHGGpAYdNFYOGzlN1lQih9aw
prZc4qrjzw41t0D0SX/Vp8BK6X7HijoOwP+B9F9ctjLDR+TVgafYC4D8jcJPHGBQ
6LgsNW0yoatkY09DOVo5D3VYcUHZrg0J+ibBvk3Z05I/Itl/yBgQt5ymf2qQ/sXR
MN1PstU5eY/X+dyqAQgmNpf22RaNXBy03w14OFlD+gODu1ZyR32naV0GIyLozIyN
ylewABPhulcRLukiZcHw0GaEEwMyHZ6fHuKkBqeoJiBA29mW6B9R8xuimIBHzvZT
7Plr9ryOLbvpMSkbHCH6+7TOuafwchsfclNCFkFy6xQi8/g6lTNaIoGXVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+ENvJ8uXQt/2Kzhkm7/MHXu38uMB8GA1UdIwQY
MBaAFAZ9z1d2VNyhemELmvTyynQh3LuBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm4zUFYzWlUzS0Y2WVF1YTlQTEtkQ0hjdTRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yOWNiMmUtNDY4MC00YTM2LWIwYTUt
OTg1MTgyMDAxZTkyLzEvQm4zUFYzWlUzS0Y2WVF1YTlQTEtkQ0hjdTRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8yOWNiMmUtNDY4MC00YTM2LWIwYTUtOTg1MTgyMDAxZTky
LzEvQm4zUFYzWlUzS0Y2WVF1YTlQTEtkQ0hjdTRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtubXxgHd
joJ0b/LzFmGcnRqY9MguHgHeX+jUhn2czNwjORrZHFmJNKHhZ3rn6tFseNBkVwJf
NX5h9weOyQtbC4Qh0G/zp3aThkVPF5e8LweSYxwvl6p4cUUp1TM2n5zQJhliDCzb
kO7TnFiWFEHyiqeBxmkqxxgXGaWMmKeU/l6kxZmbxXFtqxRUkzDKJHkgOC0wy7yz
QnqrDfqd5Nwpca+yobO0jwCEzXn3uXHVSFt0NLPOBZEVY0yLYLuM7uR3OEIa5o9a
JCRGqVAcbcTp9XIG+dp850addcm0YzsuXmdxvsM3FaWonO6Kb5iS/owWkb/d0Wh7
uSt68DX8efJeKQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:38:25 2025 by rpki-client