Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/832d67-4506-47f2-a944-cabe1d84f709/1/BSLIJ03EQgYXFxrL8pML6bi1bWA.mft
File: BSLIJ03EQgYXFxrL8pML6bi1bWA.mft (raw, json)
Hash identifier: Om4AButiABTSOcLXcpeLAsQuhEAqyhs+leeVfURMEzo=
Subject key identifier: 0F:27:D3:AF:08:34:38:49:A7:26:EB:37:56:ED:CB:CD:BC:E7:A6:BD
Authority key identifier: 05:22:C8:27:4D:C4:42:06:17:17:1A:CB:F2:93:0B:E9:B8:B5:6D:60
Certificate issuer: /CN=0522c8274dc4420617171acbf2930be9b8b56d60
Certificate serial: 019654C9936D47DFD6FCC92EC6C8290C9AF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSLIJ03EQgYXFxrL8pML6bi1bWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/832d67-4506-47f2-a944-cabe1d84f709/1/BSLIJ03EQgYXFxrL8pML6bi1bWA.mft
Manifest number: 0267
Signing time: Sun 20 Apr 2025 20:00:18 +0000
Manifest this update: Sun 20 Apr 2025 20:00:18 +0000
Manifest next update: Mon 21 Apr 2025 20:00:18 +0000
Files and hashes: 1: BSLIJ03EQgYXFxrL8pML6bi1bWA.crl (hash: KEfh6lTvgtPZCjg7Aw8iS+O8bjFXOuCK7m1D3rvqC3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/832d67-4506-47f2-a944-cabe1d84f709/1/BSLIJ03EQgYXFxrL8pML6bi1bWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/832d67-4506-47f2-a944-cabe1d84f709/1/BSLIJ03EQgYXFxrL8pML6bi1bWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSLIJ03EQgYXFxrL8pML6bi1bWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:93:6d:47:df:d6:fc:c9:2e:c6:c8:29:0c:9a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0522c8274dc4420617171acbf2930be9b8b56d60
Validity
Not Before: Apr 20 20:00:18 2025 GMT
Not After : Apr 21 20:00:18 2025 GMT
Subject: CN=0f27d3af08343849a726eb3756edcbcdbce7a6bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f5:78:d6:46:00:29:6c:83:fe:c7:dd:5a:56:
0a:e8:2e:99:96:9e:ce:52:34:12:83:87:01:bf:da:
e0:36:64:70:be:7a:d0:38:6f:ab:0d:91:82:86:a6:
78:74:88:55:63:3b:ea:ce:78:a6:2a:1b:4e:b5:0f:
5e:5e:a0:7b:95:fc:fc:27:d7:46:83:85:10:bb:29:
e3:0a:a5:4b:1d:15:25:27:81:30:74:91:a5:96:ea:
5d:1b:3a:6d:53:3f:b4:79:69:40:c3:17:93:7e:6f:
86:81:da:11:d9:52:51:af:46:e0:10:b5:25:8c:8c:
6f:5f:50:f5:46:be:2e:a8:85:3c:80:c6:e4:80:92:
02:e8:cc:fa:08:c2:0a:ae:58:b9:91:cf:a2:96:4e:
d5:f4:aa:a3:9f:59:94:da:b7:55:4e:d9:dd:c6:65:
df:32:0f:c6:b6:ef:95:90:9d:4c:d7:c8:59:4b:b9:
de:63:24:6e:be:3d:ed:43:c6:d5:19:3e:bb:e3:fd:
12:3b:fc:89:8c:34:b1:b6:d6:b8:df:5a:f1:c4:56:
54:bc:1a:44:12:5c:52:c7:01:c7:11:9a:29:a6:ff:
a3:1e:ac:44:b7:4e:1d:c2:1d:ec:5c:4a:28:e5:86:
ac:28:95:9c:f1:3b:b8:4f:72:95:01:c9:25:d2:aa:
c7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:27:D3:AF:08:34:38:49:A7:26:EB:37:56:ED:CB:CD:BC:E7:A6:BD
X509v3 Authority Key Identifier:
keyid:05:22:C8:27:4D:C4:42:06:17:17:1A:CB:F2:93:0B:E9:B8:B5:6D:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSLIJ03EQgYXFxrL8pML6bi1bWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/832d67-4506-47f2-a944-cabe1d84f709/1/BSLIJ03EQgYXFxrL8pML6bi1bWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/832d67-4506-47f2-a944-cabe1d84f709/1/BSLIJ03EQgYXFxrL8pML6bi1bWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:40:b9:b8:25:e8:29:93:88:80:b9:81:37:2b:36:22:9f:35:
0a:8e:59:68:4c:a1:c5:67:52:c3:0d:dc:3e:c3:56:87:56:c0:
b0:09:71:2e:f1:03:43:bb:d3:50:ea:ba:67:16:c2:85:dc:fa:
9d:49:ed:f4:a7:dc:cc:14:d7:34:2f:3b:f5:6c:db:83:7c:d5:
cf:91:26:c7:7c:02:c0:79:5f:88:45:a6:22:10:d0:10:15:0d:
30:73:73:28:c9:6e:bc:40:fd:1f:6d:3d:06:bd:8c:9c:5d:19:
95:ab:dc:c3:e7:5f:7f:d3:0e:10:8e:b4:f7:70:dc:e4:ed:5e:
99:ef:54:9b:42:9e:f1:c7:64:79:eb:66:ec:42:54:b3:ca:d5:
43:43:8c:b5:d0:ee:45:7f:e8:55:ff:29:b9:3d:fa:3a:62:da:
d2:4d:7e:ce:d3:0a:94:29:b6:d1:16:b9:e0:89:4a:cf:f4:cc:
7b:f0:e9:20:42:98:d3:fc:cd:0c:a3:b6:7d:ce:80:a6:9b:4b:
f3:19:c0:b9:01:4c:c1:31:df:02:56:c0:c6:df:d2:fa:e4:47:
16:74:ac:4c:37:44:9a:ce:35:42:f5:f5:45:c1:43:d6:9d:4e:
04:60:6e:11:42:bc:2e:e4:b3:09:d2:b3:5e:47:bc:ad:69:a4:
aa:29:59:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:36:01 2025 by rpki-client