Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
File: bzxUCLL2cjP2DWP3SaxIPrZq58g.mft (raw, json)
Hash identifier: DeGzgyDhB8FvW1f29P3SoZZvHJSAWm9zTTc58VWH1rw=
Subject key identifier: ED:FD:FB:4B:CD:92:61:A6:4B:06:AD:79:4E:57:1C:4C:C8:F6:1E:4C
Authority key identifier: 6F:3C:54:08:B2:F6:72:33:F6:0D:63:F7:49:AC:48:3E:B6:6A:E7:C8
Certificate issuer: /CN=6f3c5408b2f67233f60d63f749ac483eb66ae7c8
Certificate serial: 019655A5B60D695D53C717FF72242A465CD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 00:00:45 +0000
Manifest this update: Mon 21 Apr 2025 00:00:45 +0000
Manifest next update: Tue 22 Apr 2025 00:00:45 +0000
Files and hashes: 1: bzxUCLL2cjP2DWP3SaxIPrZq58g.crl (hash: rU1er61NQyx+4h81MSyGCAy3pHYWYtMMYTz5lJ0fyuE=)
2: h5hkogAm1tMHtJhfME4RZjDHuf4.roa (hash: RP4fFeHsjDtuvEjbGy1zv2SpMtLitRmpW5FaeuzZl5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:b6:0d:69:5d:53:c7:17:ff:72:24:2a:46:5c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3c5408b2f67233f60d63f749ac483eb66ae7c8
Validity
Not Before: Apr 21 00:00:45 2025 GMT
Not After : Apr 22 00:00:45 2025 GMT
Subject: CN=edfdfb4bcd9261a64b06ad794e571c4cc8f61e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:33:88:7d:de:8e:5a:07:07:52:8a:42:27:4a:
b8:da:c4:f7:b0:19:20:09:e9:36:da:d6:cf:c3:bd:
21:65:f1:9b:c6:f6:a0:52:77:81:05:0a:db:de:02:
11:74:03:2c:2f:55:c7:6d:fe:a0:00:9f:57:30:d3:
ec:11:2b:c0:9b:b0:25:f8:59:db:52:ac:ad:85:bf:
03:9c:15:4a:98:23:15:a1:28:13:b6:ac:20:d5:34:
71:2d:5f:59:c0:06:56:a7:0a:fd:15:7b:c1:94:d8:
3c:ce:4c:c7:f1:70:f1:00:f1:03:9f:fd:6c:b0:ea:
35:aa:b8:96:af:e0:4f:0c:85:6a:8c:ed:24:19:9a:
b2:b2:47:c5:59:ea:3a:94:a7:54:41:d8:b5:f3:d8:
61:c5:6c:fa:2a:b5:3a:49:b2:ef:0e:b8:68:f5:8a:
b8:85:d3:6e:eb:7f:48:02:5d:59:20:04:eb:c8:00:
27:11:bf:fe:8e:61:51:0e:fa:b8:84:16:23:7c:98:
37:8f:d3:27:dd:39:9c:9e:b3:e6:01:05:ef:e1:e1:
b5:10:87:06:7c:aa:f9:50:65:a4:32:fd:82:a6:a9:
eb:5e:0a:21:cc:1c:03:4c:05:e4:8e:a5:54:af:c9:
de:d8:be:84:66:91:ef:b1:35:ec:5b:60:92:28:58:
85:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FD:FB:4B:CD:92:61:A6:4B:06:AD:79:4E:57:1C:4C:C8:F6:1E:4C
X509v3 Authority Key Identifier:
keyid:6F:3C:54:08:B2:F6:72:33:F6:0D:63:F7:49:AC:48:3E:B6:6A:E7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:09:42:33:f2:77:43:1d:88:2c:93:e2:b8:1c:06:9d:1e:c2:
cf:68:46:3e:58:0f:aa:01:ba:42:e6:91:89:4a:72:41:32:3e:
07:d3:d3:4b:61:0c:72:82:34:da:6c:b3:a3:1b:16:16:76:5e:
a0:f0:14:03:88:26:a9:33:8c:ff:39:9b:4a:bf:15:21:15:3f:
f4:bf:eb:40:00:ac:6f:62:5b:2a:0c:cc:e5:2b:e8:63:02:fd:
80:15:86:c5:75:d4:47:10:a9:cf:60:de:18:d8:5f:6a:5e:14:
d0:47:7e:bb:2c:53:6f:c2:4e:3a:09:d4:75:c9:09:7f:b8:87:
3c:1b:86:4b:64:d2:18:cd:8c:26:e1:24:3e:30:b6:d1:c1:b7:
72:cc:e4:e3:b4:62:da:5b:61:98:82:8e:38:64:75:8d:4a:62:
af:0a:92:66:e7:17:4d:9a:da:ad:f2:38:e7:ab:30:5f:c2:2e:
8e:b6:26:2c:ab:f0:42:0a:49:12:31:86:b3:d8:76:f3:c0:13:
7c:53:d6:f0:9d:e4:04:7f:d7:a8:b1:8a:c9:4a:f0:68:26:bd:
17:45:71:64:02:4a:f0:c1:25:2c:f6:8d:0b:27:0e:db:92:ab:
b9:df:f0:0e:34:88:63:da:13:eb:f8:10:c6:4a:23:2b:a5:16:
23:37:05:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:06:51 2025 by rpki-client