Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
File: BjyTAb89LhVgz69-3EGnw-yKFqY.mft (raw, json)
Hash identifier: 66FNXDo7Nn+ckPzTqljlmmZ+kOI7BJVqlTxV8r854r8=
Subject key identifier: 91:11:97:C0:34:24:13:85:3B:64:9D:E3:C2:75:23:D8:8B:EB:15:11
Authority key identifier: 06:3C:93:01:BF:3D:2E:15:60:CF:AF:7E:DC:41:A7:C3:EC:8A:16:A6
Certificate issuer: /CN=063c9301bf3d2e1560cfaf7edc41a7c3ec8a16a6
Certificate serial: 01965681582AAE7B7AD992BA5653FC37DF91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
Manifest number: 14FC
Signing time: Mon 21 Apr 2025 04:00:39 +0000
Manifest this update: Mon 21 Apr 2025 04:00:39 +0000
Manifest next update: Tue 22 Apr 2025 04:00:39 +0000
Files and hashes: 1: BjyTAb89LhVgz69-3EGnw-yKFqY.crl (hash: 85PMKunt99AEKFvMSVVsP9CeKidVei4zgBTJ+UpYyVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:81:58:2a:ae:7b:7a:d9:92:ba:56:53:fc:37:df:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=063c9301bf3d2e1560cfaf7edc41a7c3ec8a16a6
Validity
Not Before: Apr 21 04:00:39 2025 GMT
Not After : Apr 22 04:00:39 2025 GMT
Subject: CN=911197c0342413853b649de3c27523d88beb1511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:da:1e:00:0e:68:07:8f:ed:75:bf:20:d4:1d:
0d:19:4d:fc:0d:b0:d6:b7:5f:8e:aa:3b:d1:ea:4b:
48:fe:5d:72:d4:f6:31:00:2c:2f:11:b8:c5:19:94:
7c:65:d7:64:42:de:ab:56:06:b1:72:42:aa:1c:7f:
8e:8a:4e:fc:35:3b:04:4d:23:05:26:90:92:ca:bf:
6a:71:9d:13:e8:c9:63:56:02:61:e4:11:60:c2:59:
a2:d9:30:33:8d:6d:95:34:27:94:0d:0b:f7:db:c8:
34:93:0a:e2:f5:91:9a:b3:fb:65:32:26:fc:a5:84:
46:db:37:d7:45:86:b4:0e:f0:d1:a8:25:e6:41:ce:
5c:21:cc:8f:d1:d6:56:7b:e8:94:55:51:7e:d8:c7:
d6:ae:47:a5:49:65:48:71:fc:a4:74:11:39:d7:0a:
d2:4c:09:c1:9e:e9:9f:21:42:35:ec:fe:27:4b:ce:
e9:84:8d:2e:d5:af:31:4b:18:c0:ae:f7:08:9a:2c:
b3:fc:83:47:22:c9:c7:0c:1c:6e:8c:ff:71:12:19:
aa:f3:bb:9e:55:67:d6:80:1b:82:19:a1:34:2e:13:
2a:94:da:78:17:d2:a0:c9:8e:a8:ba:55:e7:b7:f5:
72:46:59:c5:d0:8d:7b:3b:b0:46:87:dc:50:7b:33:
9a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:11:97:C0:34:24:13:85:3B:64:9D:E3:C2:75:23:D8:8B:EB:15:11
X509v3 Authority Key Identifier:
keyid:06:3C:93:01:BF:3D:2E:15:60:CF:AF:7E:DC:41:A7:C3:EC:8A:16:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:83:a1:10:5f:ff:e5:08:88:bd:40:f4:42:5d:40:7e:7d:c9:
95:a0:ee:67:b6:17:cc:30:17:3a:52:30:e4:ab:a6:d8:57:ce:
b4:bb:13:d1:6b:53:62:d4:6c:47:87:1e:9d:b1:a4:27:70:e7:
68:42:ec:73:4e:2a:a1:c6:9a:08:d3:c1:e1:0c:31:28:80:27:
91:a7:89:e2:3e:1e:1a:0d:31:7e:19:87:a2:31:a9:00:e2:3d:
9c:74:8d:05:49:99:a9:1f:cf:f4:b7:b9:06:e1:70:30:26:70:
ee:4c:80:da:ce:2f:36:55:24:bf:d4:1a:7e:6a:ae:a1:1c:15:
57:2c:61:c5:b3:cd:c9:98:84:bb:b6:cb:b4:8c:b0:ee:a9:aa:
f6:eb:3d:b3:67:aa:7b:a3:54:a9:26:30:6a:bb:8b:51:d0:9f:
44:33:cf:f6:aa:ad:f7:f0:ae:a5:f6:b3:99:9c:3a:7f:0a:49:
70:ce:7d:12:e4:d9:cb:3d:9e:33:fe:b8:e1:88:b9:ed:dc:42:
49:7c:1a:fd:59:cb:0a:4a:e8:52:1b:89:00:b9:ad:f9:b7:c9:
f6:be:60:07:a7:96:ae:32:fe:9a:f6:75:53:7d:83:f4:14:19:
f4:21:1a:0b:72:2e:08:75:7e:b0:7d:e4:a1:2e:67:17:88:e5:
e3:a9:26:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:48:27 2025 by rpki-client