Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
File: BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft (raw, json)
Hash identifier: j/EnolmiD12lMcNPRdwlwztsgkI4hDLFZcmqsxwUlAw=
Subject key identifier: B3:9E:57:5B:26:00:88:0F:47:DD:AF:05:20:BE:84:34:99:C6:AA:A3
Authority key identifier: 05:74:07:D2:E7:B2:FF:4B:CE:E6:EA:10:D4:08:52:EC:DC:BC:69:B8
Certificate issuer: /CN=057407d2e7b2ff4bcee6ea10d40852ecdcbc69b8
Certificate serial: 019659F05182C291B8D82791C10A31CCB78E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 20:00:43 +0000
Manifest this update: Mon 21 Apr 2025 20:00:43 +0000
Manifest next update: Tue 22 Apr 2025 20:00:43 +0000
Files and hashes: 1: BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl (hash: U3SQurRTylb+M8FEcFrGLlTNH01jfDkqciv4yGzJadc=)
2: V1jBLHDx-YMbIoIxpTiAmkmziIw.roa (hash: SGHuNvgj4twRIgtAoRf+w31bdCCwfTwFv+zuwmyR4Do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:f0:51:82:c2:91:b8:d8:27:91:c1:0a:31:cc:b7:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=057407d2e7b2ff4bcee6ea10d40852ecdcbc69b8
Validity
Not Before: Apr 21 20:00:43 2025 GMT
Not After : Apr 22 20:00:43 2025 GMT
Subject: CN=b39e575b2600880f47ddaf0520be843499c6aaa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:db:86:a9:d6:de:fe:e7:bf:ad:ad:b7:38:62:
86:f0:97:34:6a:dd:0a:cc:50:df:91:aa:f6:e6:da:
fd:84:48:84:40:f6:16:fb:78:73:ec:89:dd:50:95:
fb:c6:31:f6:fd:14:ac:67:3b:53:ec:aa:5e:48:dc:
62:b5:4b:56:f1:4f:af:3a:a2:37:ad:e1:e1:da:2c:
c4:8f:a6:8d:1d:e1:70:64:85:22:2a:62:a6:06:fa:
5a:b2:b8:f7:0c:2b:ca:9c:87:25:25:35:2a:a5:04:
c3:d2:73:55:0d:df:8e:e2:72:9b:55:da:f1:7b:5f:
c4:21:77:e6:08:49:87:33:d2:81:55:51:04:fc:d7:
53:eb:93:1b:d6:41:a6:26:4e:fd:ab:fe:66:b9:0c:
9d:a1:45:32:0c:a2:a8:df:86:ca:02:b4:4c:3b:d6:
cb:95:48:68:99:3e:ea:5e:f7:3c:bd:07:31:87:4c:
ce:1d:50:bf:ec:21:fe:7f:d4:f0:41:ba:51:92:96:
4c:a4:d3:77:f2:15:50:f2:53:ba:e7:0d:95:27:68:
8b:98:2c:b7:4b:e4:6a:60:e9:54:99:67:8b:1d:3d:
b4:17:08:8a:f1:19:ea:84:ad:0e:91:9f:0d:7e:17:
fa:f4:2c:e8:49:5e:cd:59:82:4e:27:d1:54:d6:d7:
cb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:9E:57:5B:26:00:88:0F:47:DD:AF:05:20:BE:84:34:99:C6:AA:A3
X509v3 Authority Key Identifier:
keyid:05:74:07:D2:E7:B2:FF:4B:CE:E6:EA:10:D4:08:52:EC:DC:BC:69:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:53:c4:3f:52:16:55:75:77:a0:65:8f:6f:05:8b:33:59:fb:
00:91:6e:a7:eb:1f:db:1a:c3:e6:95:76:dc:4a:77:22:db:2e:
bb:91:6a:90:98:67:d2:a8:99:03:07:36:54:21:c1:d4:91:8e:
5a:63:cb:c2:44:d7:dc:69:af:b2:77:0a:85:63:25:8e:77:9e:
50:d2:fa:a3:3b:16:9f:29:b5:11:11:99:c7:e6:a0:2d:73:73:
0d:d3:dd:6a:2d:f1:08:46:45:16:ec:e8:ae:2d:83:15:e0:6a:
f3:75:74:5b:10:c1:02:bd:4c:ac:4f:c0:c3:f2:13:28:c4:32:
32:4a:c9:6a:34:26:b2:e6:c6:66:de:21:7d:41:b0:16:e4:e7:
53:2a:47:15:6f:38:13:d7:a1:22:2d:3a:d0:7b:18:5e:ef:99:
16:33:19:9b:72:75:f2:f3:12:c1:2c:4d:2e:4b:25:56:de:18:
fb:7d:75:64:ac:5c:ff:d9:d0:94:ac:1d:dd:a6:88:e1:40:b5:
32:4f:94:a1:4f:3e:da:57:88:ff:92:46:bc:ee:3a:d9:98:5d:
2a:a2:39:f2:c9:5b:45:c2:5a:d4:65:ac:83:cf:fc:ee:ce:78:
2a:b7:6f:57:3b:90:3c:88:3e:af:ca:36:06:8a:08:cb:74:c9:
2d:85:fc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:14 2025 by rpki-client