Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
File: BzX8jPArik43L6W8ZAlE_rwk8f4.mft (raw, json)
Hash identifier: VbnO3CSW7Chv6oMfZBOeKRrTtQxuCMPkF2oEUlbkkJE=
Subject key identifier: 39:8B:A1:3C:E9:77:53:9B:C7:52:F4:A0:A6:9B:99:40:DC:62:48:A9
Authority key identifier: 07:35:FC:8C:F0:2B:8A:4E:37:2F:A5:BC:64:09:44:FE:BC:24:F1:FE
Certificate issuer: /CN=0735fc8cf02b8a4e372fa5bc640944febc24f1fe
Certificate serial: 019655DCAFE771D551BD6F15955BD87C813A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
Manifest number: 02FD
Signing time: Mon 21 Apr 2025 01:00:48 +0000
Manifest this update: Mon 21 Apr 2025 01:00:48 +0000
Manifest next update: Tue 22 Apr 2025 01:00:48 +0000
Files and hashes: 1: BzX8jPArik43L6W8ZAlE_rwk8f4.crl (hash: Wvk0ggqmo9o1GmsaAIP0nM/RSOAm22CtyUAtJVQFvp8=)
2: J8Ib4FQqHMHCvKM2y1SUnog9X74.roa (hash: f8Ibq/aTG18/pniIFSUAU4E687jQnL2EjkQj6M5lHl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:af:e7:71:d5:51:bd:6f:15:95:5b:d8:7c:81:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0735fc8cf02b8a4e372fa5bc640944febc24f1fe
Validity
Not Before: Apr 21 01:00:48 2025 GMT
Not After : Apr 22 01:00:48 2025 GMT
Subject: CN=398ba13ce977539bc752f4a0a69b9940dc6248a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ac:8c:5c:08:cc:72:dd:6b:0b:08:27:5c:d3:
32:2b:d6:95:16:3c:0c:e3:a0:ce:ff:c1:9c:63:36:
20:57:69:59:d2:68:fc:91:76:a0:ba:39:a7:fe:14:
2a:f7:db:ab:4f:db:d6:6d:81:32:09:ea:9c:13:bf:
78:41:09:60:1d:51:39:68:6c:03:ad:73:88:0f:98:
d5:4d:66:6e:d1:e1:bf:bb:0f:a9:b4:4e:1d:e4:c5:
79:56:57:8b:f7:4d:b0:1e:b6:04:4c:6d:12:af:ba:
dc:ee:16:37:45:51:26:f1:7c:1a:a3:14:b5:f9:00:
d0:d3:1e:3f:70:4d:ef:ad:46:06:18:96:a6:bb:b1:
31:8b:41:49:9a:3e:fd:6c:20:6a:35:37:f0:ec:7f:
fa:1f:71:02:0b:95:fc:9d:00:0a:ec:67:f1:c0:50:
ea:e9:d5:ff:e0:1a:06:86:26:d6:24:df:8b:c7:03:
23:2a:90:fd:25:a9:46:2d:81:d5:3a:fe:d1:3c:24:
de:b1:f6:9a:4f:72:c8:07:7e:f9:d6:2a:43:e6:16:
c6:c4:a7:b5:9e:dc:56:d8:c0:06:1b:60:17:38:f5:
1a:9b:15:d6:d1:44:8a:14:78:4e:46:a6:aa:eb:91:
d8:72:6b:46:d1:9d:0d:01:d3:75:11:ee:2c:e9:ba:
cd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8B:A1:3C:E9:77:53:9B:C7:52:F4:A0:A6:9B:99:40:DC:62:48:A9
X509v3 Authority Key Identifier:
keyid:07:35:FC:8C:F0:2B:8A:4E:37:2F:A5:BC:64:09:44:FE:BC:24:F1:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:28:77:91:d8:e1:aa:5f:4c:00:50:6e:3f:6d:49:53:24:ca:
74:8b:17:eb:70:27:61:41:be:72:73:4a:1f:f6:0a:fc:f9:3f:
88:aa:a7:25:95:79:f6:6e:16:70:10:5d:17:04:c1:94:dc:9f:
88:08:37:f4:1f:5e:c9:88:6c:35:b3:0a:d5:36:01:59:56:9b:
c7:a5:f9:ed:a8:64:5f:3c:91:f9:79:12:ae:28:1c:8b:e6:95:
f8:26:e8:4a:1a:26:2a:a3:e3:65:ee:6f:a7:22:98:e2:47:c8:
e1:67:f9:0e:71:76:1e:fa:a1:0f:63:9f:cd:4b:f5:0c:0b:0b:
d9:bf:1c:4e:f2:ba:58:19:1c:7e:a0:75:9c:27:c0:f2:82:89:
20:2e:0c:f9:ea:04:e3:a9:29:f2:65:a4:44:40:28:19:b2:44:
2f:0f:45:54:b2:a3:1a:fb:cf:04:36:18:4a:5a:87:bb:5d:b5:
d2:f9:53:08:35:c4:55:94:b9:bd:f4:9c:0e:7b:d4:32:10:24:
44:08:31:3b:a3:a6:fc:73:79:29:2d:04:10:af:e0:b2:e5:80:
61:09:17:e1:de:08:04:1b:d9:cc:d5:96:53:82:e3:61:44:12:
ce:0a:b3:bb:88:f2:26:2a:0e:14:c9:2f:78:ab:f3:0f:83:3e:
2d:c3:3d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:43:10 2025 by rpki-client