Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
File: B2KQRhen92vQw05C0bl_fIPc8Cg.mft (raw, json)
Hash identifier: q9dSLoqWzo3XRqfk+m2v9FkqaAHWHICSdkp728T8ik4=
Subject key identifier: BF:90:BE:2B:95:24:4C:95:1C:80:CD:08:22:0D:A6:DA:60:0C:0F:0F
Authority key identifier: 07:62:90:46:17:A7:F7:6B:D0:C3:4E:42:D1:B9:7F:7C:83:DC:F0:28
Certificate issuer: /CN=0762904617a7f76bd0c34e42d1b97f7c83dcf028
Certificate serial: 0196534A59C49EDB0668AC8061DEDAD8C46D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 13:01:43 +0000
Manifest this update: Sun 20 Apr 2025 13:01:43 +0000
Manifest next update: Mon 21 Apr 2025 13:01:43 +0000
Files and hashes: 1: B2KQRhen92vQw05C0bl_fIPc8Cg.crl (hash: K+jzoHUQjDrf6Q/6XyZWj6Kle6v/WgLDgSjMBvEQ/Jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:4a:59:c4:9e:db:06:68:ac:80:61:de:da:d8:c4:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0762904617a7f76bd0c34e42d1b97f7c83dcf028
Validity
Not Before: Apr 20 13:01:43 2025 GMT
Not After : Apr 21 13:01:43 2025 GMT
Subject: CN=bf90be2b95244c951c80cd08220da6da600c0f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:31:40:dc:58:bc:8b:26:e6:c6:b2:2f:17:80:
b1:ee:f0:1c:db:2e:a1:d6:64:94:a5:73:39:9b:27:
fa:6c:a2:7c:6c:90:8f:e4:1d:46:d1:12:89:16:58:
a8:b5:83:04:a2:c5:a3:a1:c8:37:87:55:b5:78:e1:
02:d1:bc:ea:77:60:97:99:1b:3c:1c:21:c4:79:4b:
c2:39:81:9a:f5:17:cf:de:a4:a9:66:99:09:8c:16:
68:70:7c:5d:57:0b:27:14:5c:42:86:2c:2c:73:6e:
8b:36:83:0d:29:6c:ef:b0:2d:9f:4e:e3:33:03:72:
3b:c4:2f:a2:61:c9:d4:36:d2:8d:b4:11:65:1d:48:
73:0e:ba:e6:91:4a:b0:37:98:0a:1b:9a:6d:da:94:
b2:c4:ac:65:b4:0f:da:c3:b2:9b:0e:ad:c1:6d:7a:
53:23:4f:5c:03:cf:63:0e:13:6c:f1:13:63:99:b1:
b6:51:6a:27:dc:25:50:7a:61:48:10:15:c7:30:ef:
0e:38:8e:05:39:ff:de:92:8f:96:b3:ce:65:67:33:
ff:35:ea:9c:26:12:e3:d2:45:53:d7:97:9f:86:8d:
7a:09:04:eb:88:f1:87:04:a2:f2:4e:b0:bc:07:d9:
c7:d1:d9:81:c6:a8:38:ca:86:38:42:67:01:be:40:
37:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:90:BE:2B:95:24:4C:95:1C:80:CD:08:22:0D:A6:DA:60:0C:0F:0F
X509v3 Authority Key Identifier:
keyid:07:62:90:46:17:A7:F7:6B:D0:C3:4E:42:D1:B9:7F:7C:83:DC:F0:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:43:96:08:d2:41:9a:fc:a9:26:37:d3:70:f4:3c:1d:00:ec:
42:45:9a:4b:6f:7b:54:69:5b:ee:c1:f3:e4:3d:7f:f6:2f:57:
09:c8:14:5e:36:45:6e:45:7a:79:4f:84:d8:03:8a:96:c7:4a:
4f:48:f3:67:58:24:1a:6a:56:af:5a:34:81:6c:2d:88:1e:08:
ea:cd:44:9e:eb:ce:ec:62:f5:3a:67:ff:aa:55:ba:23:04:ab:
5e:48:35:43:1f:0b:52:af:1a:35:29:f9:c5:95:d9:b1:67:eb:
53:38:58:d4:5a:8c:52:32:87:94:b6:a8:59:ff:2c:45:b0:be:
77:9d:96:ef:e4:1e:00:8e:86:76:82:55:3a:f1:46:26:ec:55:
34:d8:91:8c:17:99:b4:5e:bf:6f:37:a7:f4:9b:ee:12:60:7c:
ab:d6:d3:b9:3d:10:64:0a:4d:b2:49:96:3b:2e:33:22:5e:49:
6c:50:e5:9d:20:dd:f7:7e:d1:3d:c4:3e:19:2c:a1:57:8e:3d:
f1:9f:92:ca:8c:d1:ca:0f:5d:2c:43:ca:9b:bc:78:73:fd:e5:
6c:2a:4b:a7:13:f1:2b:d8:4e:0d:88:17:85:59:3a:c7:91:6f:
a7:1d:4d:2e:86:fe:94:af:e0:4a:64:5f:5c:bd:fb:a0:55:7e:
08:6f:c2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:23:47 2025 by rpki-client