Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
File: BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft (raw, json)
Hash identifier: 8Qd5FPmEMGPfazq+Dmf0aMriyDfZGjZs+6GDyIY4+y8=
Subject key identifier: BD:C2:7A:8D:60:77:23:A9:74:49:DF:9E:89:6A:BB:42:AA:81:36:DD
Authority key identifier: 04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C
Certificate issuer: /CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c
Certificate serial: 01965DCCE9B3270C4A26AF27D8E37EA489AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
Manifest number: 11E1
Signing time: Tue 22 Apr 2025 14:00:31 +0000
Manifest this update: Tue 22 Apr 2025 14:00:31 +0000
Manifest next update: Wed 23 Apr 2025 14:00:31 +0000
Files and hashes: 1: BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl (hash: vQlfKtm574X4xU46v3h3eSlQIZUV3tkPi2typrOHo/8=)
2: hLFJquKo-2HrHgS3tC85H4343DU.roa (hash: nh7NbrSlckvvLuSFfKgI45STQ6KlvJNVJOtaSTVOkeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:cc:e9:b3:27:0c:4a:26:af:27:d8:e3:7e:a4:89:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c
Validity
Not Before: Apr 22 14:00:31 2025 GMT
Not After : Apr 23 14:00:31 2025 GMT
Subject: CN=bdc27a8d607723a97449df9e896abb42aa8136dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a6:b3:95:5e:3a:35:33:0d:0f:bb:39:c3:db:
ff:50:d7:a5:d9:80:24:5a:f4:19:a5:8b:08:40:9d:
3f:2f:3d:b4:30:7f:0f:25:94:75:33:b5:7f:a6:3a:
8f:ae:3f:c9:d1:a6:ce:07:b2:c9:3f:8e:c4:f1:d6:
c6:13:97:27:2e:67:ff:8b:e5:09:bd:c0:b0:73:33:
ad:06:43:23:66:72:60:9c:cd:d9:e5:0c:65:f8:5e:
c0:be:0b:65:55:13:c3:dd:fb:28:6d:38:4f:ec:79:
1c:ac:a6:e0:f3:5d:80:c6:75:63:56:ef:8d:4c:f1:
9a:22:25:92:92:25:93:5e:ef:65:9d:92:15:54:73:
ce:3e:e4:7d:9b:7c:92:00:35:8c:03:c2:22:03:7c:
4d:8c:36:c5:a4:16:05:06:44:c9:d1:10:8f:95:38:
8a:34:85:f4:20:d9:d2:5c:24:57:e6:1b:2a:34:cf:
ce:9f:d7:a4:51:54:d9:a0:d8:33:b0:6f:62:83:c8:
bd:d9:88:53:39:3f:94:12:1c:e1:da:07:52:24:5a:
8a:6a:6d:4b:38:3a:4c:61:cb:7e:1e:5a:5d:54:a6:
4b:1a:84:90:47:d8:06:dc:78:b3:51:1b:52:fa:70:
52:56:25:88:24:91:b9:83:6a:d1:25:a5:73:ea:a5:
7e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C2:7A:8D:60:77:23:A9:74:49:DF:9E:89:6A:BB:42:AA:81:36:DD
X509v3 Authority Key Identifier:
keyid:04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:b3:8c:0e:b1:ab:e2:be:dc:f5:dc:51:89:80:79:d4:30:47:
97:66:a0:3c:25:5c:20:7d:81:f4:86:4f:8e:c1:89:7d:28:cb:
fc:8e:09:ab:66:e0:e0:3c:50:3b:b5:fe:3e:aa:41:f5:89:3b:
b2:17:4d:a9:fe:58:36:00:6f:2e:c3:b9:f2:3d:00:75:bf:31:
b4:9d:2e:be:8d:b6:5a:46:f3:c3:ba:3a:5f:48:a6:3a:87:d2:
1b:6a:0f:78:15:92:46:c4:74:fe:af:59:58:b8:36:6f:7e:a7:
4f:9a:e4:8b:85:e3:94:70:37:85:87:d8:58:d9:b9:1e:72:9a:
64:b9:5b:1d:d4:a0:6a:5b:c1:9c:57:d9:54:b2:2e:ee:41:4c:
10:fd:17:17:2d:47:99:d2:b8:90:32:c3:4c:7b:eb:86:cf:6c:
70:92:73:c9:44:ad:66:b3:f7:eb:ce:05:12:34:0f:1f:75:30:
1e:c5:e0:3e:d6:68:90:0c:c6:78:ae:8d:53:74:5a:5c:52:da:
d7:ce:a6:ed:d0:75:fa:b4:2d:ca:9e:7c:e3:6a:9f:05:d7:3e:
5c:7f:df:ba:4d:af:e3:fb:4f:f1:f2:a1:22:6f:5c:11:b3:da:
41:f1:b1:d5:a7:d1:7f:ab:99:68:7d:47:c1:37:f7:07:7a:75:
36:23:26:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:30:19 2025 by rpki-client