Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft
File: BCSFBLVFValEOwKjPTUakChju5k.mft (raw, json)
Hash identifier: oG1xW+RpvK87D4PZslzWPp1fK0pSxFC07gtsif4MtzU=
Subject key identifier: 58:B2:5D:D0:D0:D4:89:32:D2:DB:A4:E6:96:06:34:F1:90:84:9B:A6
Authority key identifier: 04:24:85:04:B5:45:55:A9:44:3B:02:A3:3D:35:1A:90:28:63:BB:99
Certificate issuer: /CN=04248504b54555a9443b02a33d351a902863bb99
Certificate serial: 0196564A1FBF4BA8CADD9E3675F3AB9B7476
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCSFBLVFValEOwKjPTUakChju5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft
Manifest number: 1501
Signing time: Mon 21 Apr 2025 03:00:20 +0000
Manifest this update: Mon 21 Apr 2025 03:00:20 +0000
Manifest next update: Tue 22 Apr 2025 03:00:20 +0000
Files and hashes: 1: BCSFBLVFValEOwKjPTUakChju5k.crl (hash: +I0sP0QBXQTlg8ZJ6DlRgkqEocA3jai273LoYn512NQ=)
2: b8vdOmpolmwnMi7asOpMYmI4_jA.roa (hash: 9A3fwbUf06Rc6Df5WmKqMxfDfFV1g3qJ0g03eRw6WqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCSFBLVFValEOwKjPTUakChju5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:1f:bf:4b:a8:ca:dd:9e:36:75:f3:ab:9b:74:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04248504b54555a9443b02a33d351a902863bb99
Validity
Not Before: Apr 21 03:00:20 2025 GMT
Not After : Apr 22 03:00:20 2025 GMT
Subject: CN=58b25dd0d0d48932d2dba4e6960634f190849ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:32:ef:c0:d0:d4:74:55:16:e5:9d:ad:4b:6f:
74:0d:03:01:9f:16:4c:46:cb:29:dc:f1:6d:6d:24:
cd:ef:a4:63:e0:58:f2:24:b1:b2:35:fe:e6:e7:ae:
f7:c7:8f:f7:9d:f4:2c:91:14:1f:7c:bb:f2:bd:d9:
e2:0d:30:7a:c5:a5:92:ce:42:9f:b4:de:68:52:f2:
64:5d:cd:53:8b:b3:10:2e:df:97:c7:14:16:8d:72:
13:6d:3b:4f:b0:74:64:f2:d0:4c:6f:55:e7:08:6d:
b0:8b:6b:0c:2b:e9:51:4c:19:5b:12:bf:a6:3c:ff:
10:ba:62:0d:15:da:ae:69:b8:aa:e2:75:e2:7b:c5:
d7:5a:2a:bf:24:58:66:71:16:d2:b4:df:4b:a6:b8:
66:ab:45:2c:82:cc:2d:a9:e9:c8:53:0a:86:cd:0a:
be:0f:54:03:17:99:69:7a:f0:02:1e:64:8e:19:73:
2c:0b:d2:b5:f9:11:53:d4:a6:05:36:4e:81:e2:09:
92:d7:0c:80:69:03:fd:b5:5e:b2:7a:28:a3:a4:d7:
be:fc:9f:b1:f1:7f:7a:10:d2:44:75:f4:9e:7e:dc:
9a:1b:56:48:fa:f7:67:57:38:0e:57:83:a7:ac:0a:
19:0b:46:fa:58:1f:5b:42:57:50:f0:aa:82:25:49:
b5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B2:5D:D0:D0:D4:89:32:D2:DB:A4:E6:96:06:34:F1:90:84:9B:A6
X509v3 Authority Key Identifier:
keyid:04:24:85:04:B5:45:55:A9:44:3B:02:A3:3D:35:1A:90:28:63:BB:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCSFBLVFValEOwKjPTUakChju5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:cd:12:2f:31:54:93:3a:84:9d:75:4a:ff:ed:a9:70:9a:38:
cf:4d:b7:c4:38:b4:43:52:7f:e5:88:26:8c:6a:73:d7:5c:77:
37:02:2f:d0:a3:87:85:5f:44:76:5e:ee:d4:4d:8c:7e:ae:db:
d8:f2:d6:d8:19:85:63:59:fa:53:49:0f:93:50:29:7b:55:cd:
96:72:68:60:ae:18:9d:37:cd:c0:41:59:29:cb:9a:8f:aa:c7:
5d:08:c6:7b:40:6b:cb:db:34:63:3c:78:0b:ea:03:eb:75:b9:
96:67:00:84:53:30:00:9f:00:ec:43:13:3f:f5:4b:d3:04:25:
14:da:38:f7:a4:6b:7e:25:e5:8d:2e:4c:4d:e8:2f:9f:b1:e4:
a1:b8:42:10:4a:47:16:9a:ae:31:6b:61:a8:08:2e:42:bb:8a:
96:fa:22:35:05:b1:e2:01:51:59:61:85:06:36:07:c5:cc:88:
e9:d6:63:7a:3e:a6:af:07:e8:b3:a4:37:b1:49:d9:03:f0:a2:
b9:31:83:96:7d:18:94:0e:f5:88:e0:d4:1c:a1:c0:62:5a:d0:
8b:f8:39:c7:60:98:da:e1:5d:53:65:96:cc:5f:7f:69:18:74:
a7:63:b3:ca:18:5c:3c:ce:cb:9c:0d:f6:d4:c5:f5:d9:4e:50:
a6:27:f4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:38 2025 by rpki-client