Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
File: BXEVMhUM58l6fqSMDXekLm8NX8M.mft (raw, json)
Hash identifier: rrUYvGJpfbFEx1egUDBhsm0hn9kw0QNdxjjD4++EMqI=
Subject key identifier: 9E:04:46:84:6A:35:0C:76:57:9E:4B:F3:D9:7E:29:81:09:8D:A2:1C
Authority key identifier: 05:71:15:32:15:0C:E7:C9:7A:7E:A4:8C:0D:77:A4:2E:6F:0D:5F:C3
Certificate issuer: /CN=05711532150ce7c97a7ea48c0d77a42e6f0d5fc3
Certificate serial: 019655DCC6EF7048799DDE69025E63D0D6C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
Manifest number: 0585
Signing time: Mon 21 Apr 2025 01:00:54 +0000
Manifest this update: Mon 21 Apr 2025 01:00:54 +0000
Manifest next update: Tue 22 Apr 2025 01:00:54 +0000
Files and hashes: 1: BXEVMhUM58l6fqSMDXekLm8NX8M.crl (hash: UQBO00YF6v8Rnpra/j+SboI3bqp2b7f1ndLr1a3A7I8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:c6:ef:70:48:79:9d:de:69:02:5e:63:d0:d6:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05711532150ce7c97a7ea48c0d77a42e6f0d5fc3
Validity
Not Before: Apr 21 01:00:54 2025 GMT
Not After : Apr 22 01:00:54 2025 GMT
Subject: CN=9e0446846a350c76579e4bf3d97e2981098da21c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:82:36:f2:d8:b5:91:06:f8:b5:f0:02:9f:88:
ba:6d:aa:1c:3a:41:7e:c9:38:81:3b:21:e2:34:1e:
91:13:14:86:e7:e4:e0:a2:fd:b3:cc:a9:3a:85:af:
8d:2d:e1:e9:e8:70:cf:e5:7c:12:a4:02:63:51:36:
76:ab:cb:09:13:2c:cb:6e:ca:9d:2b:d4:9f:07:66:
08:a0:df:fc:9a:24:82:3d:c3:09:90:55:69:af:06:
3e:7e:29:97:fc:0b:5c:e0:3e:35:d8:b0:2c:e8:62:
1d:98:cd:15:60:4b:b6:d3:ed:e8:b9:07:0e:71:ea:
0d:a3:57:3d:c5:b8:d3:39:01:ef:6c:d2:7d:67:e5:
56:a5:34:da:39:f4:b5:e5:d5:f8:87:2c:e4:78:19:
9b:3c:61:57:42:d8:cd:b8:9f:8b:cd:2f:da:5a:a2:
93:45:56:cf:44:60:ef:da:3e:c9:f9:91:23:80:e2:
0a:4c:38:c0:d7:f3:04:a5:eb:49:88:51:0d:cb:74:
5b:8c:bf:ea:52:43:f8:64:ee:73:8c:df:86:35:f0:
92:3b:be:fd:0c:6c:89:3c:ab:2c:ac:45:31:c3:56:
fe:dd:b5:e0:7f:78:9c:e9:72:eb:59:81:3a:df:e5:
1f:f3:9e:c0:d8:b4:c6:5b:c4:29:66:74:8d:7d:b8:
2a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:04:46:84:6A:35:0C:76:57:9E:4B:F3:D9:7E:29:81:09:8D:A2:1C
X509v3 Authority Key Identifier:
keyid:05:71:15:32:15:0C:E7:C9:7A:7E:A4:8C:0D:77:A4:2E:6F:0D:5F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ef:a3:8b:dd:8c:36:26:2e:38:62:58:6b:20:50:ee:14:4c:
d2:48:c7:ae:95:c4:d7:bf:50:80:3b:7a:95:fd:51:81:69:6f:
ce:75:6f:93:4b:1b:31:14:5b:de:e2:02:19:2e:70:26:92:df:
07:c2:f5:f1:76:65:7f:78:d6:d2:65:89:43:56:ed:1a:c1:98:
95:bb:87:13:e4:e1:c9:bb:73:c7:47:c3:2e:38:93:ac:1a:24:
16:1b:d8:d9:f8:66:32:0c:57:a0:cc:49:f3:ed:61:be:11:d2:
8e:92:49:a6:fb:08:2e:91:c8:35:f9:33:56:85:01:a1:fd:7c:
80:5e:da:d3:3d:e2:7b:c2:b3:d4:48:c5:18:be:60:90:5f:39:
85:19:3f:c0:6e:44:33:02:4c:30:e6:4c:80:73:87:24:48:89:
c4:c3:3a:0f:fd:a6:a3:3b:2e:dd:22:e7:f9:ce:fd:bb:e7:13:
84:e4:cd:7d:43:75:68:d6:90:67:f4:30:ba:26:fc:ff:1d:a9:
ae:6f:25:38:91:b2:fa:3e:c2:0d:7e:da:50:1b:c4:39:91:f6:
f7:e9:ef:c0:5a:f3:ef:59:b2:e0:d7:13:c2:65:89:44:2d:70:
be:9d:2a:9b:14:45:e6:b0:91:3f:67:4a:1a:9c:d4:bb:6a:4d:
45:18:11:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:00:22 2025 by rpki-client