Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
File: BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft (raw, json)
Hash identifier: gcmO+7K6VPI2VSSGNbuWlF2mynrnl6YZRjglrTEtqXk=
Subject key identifier: AE:57:7B:EA:DB:83:95:7B:8F:64:44:B2:E2:70:7E:B5:22:59:D7:30
Authority key identifier: 05:F2:74:8C:B4:38:62:A1:04:B5:6F:8C:62:04:B6:20:97:06:55:8C
Certificate issuer: /CN=05f2748cb43862a104b56f8c6204b6209706558c
Certificate serial: 019659B997A463D53AE032D0701696010FDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
Manifest number: 0BE7
Signing time: Mon 21 Apr 2025 19:00:57 +0000
Manifest this update: Mon 21 Apr 2025 19:00:57 +0000
Manifest next update: Tue 22 Apr 2025 19:00:57 +0000
Files and hashes: 1: BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.crl (hash: fKVZyxc84AcKFfVrZ2f4P8d9Ekjfdm73l8pNNKbmQbg=)
2: EhPdkmEcd5kZgSYia-f_ZpjHYY0.roa (hash: 3TfVzsPjB0vFUIoLoSrG9hGoNnzjzko9raGZf0VmPMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:b9:97:a4:63:d5:3a:e0:32:d0:70:16:96:01:0f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f2748cb43862a104b56f8c6204b6209706558c
Validity
Not Before: Apr 21 19:00:57 2025 GMT
Not After : Apr 22 19:00:57 2025 GMT
Subject: CN=ae577beadb83957b8f6444b2e2707eb52259d730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cd:4c:90:ac:0f:ed:1d:cc:d1:91:25:37:64:
79:74:bf:2a:ed:d2:3a:08:9c:3d:0e:ee:50:c6:8d:
28:b1:db:70:c7:af:dd:15:f7:87:f9:03:f3:21:b4:
5f:9d:6f:a8:fc:89:fe:98:02:43:60:ba:0a:4a:02:
3a:ef:44:2b:26:34:d3:46:88:28:0e:1d:f3:b4:ef:
ae:7b:75:70:08:7f:01:83:d6:ed:14:84:1b:ef:8b:
c7:ff:60:b4:41:30:b4:f1:f7:24:f6:0f:6e:a8:b9:
f6:9d:78:53:2f:f5:70:24:a1:5f:ca:7f:53:02:6d:
45:f0:31:d1:15:15:5d:32:4d:f7:c9:1e:42:db:19:
ed:14:00:54:20:72:1b:77:0f:95:0b:4e:ef:ee:0a:
a5:b4:f4:d5:fd:22:55:60:f3:a3:3b:71:2a:70:0d:
66:4d:ee:9b:0f:79:d6:9a:9c:ad:9e:b5:9a:07:cc:
56:56:9e:c0:6a:64:3d:85:63:53:62:53:da:17:49:
8a:95:09:e6:2e:22:2a:81:c2:a9:32:f5:67:92:bf:
22:1f:36:85:03:18:b6:1b:93:dd:5f:33:5a:67:5d:
49:15:fe:34:4d:3c:f4:0f:82:c1:be:a8:8f:43:2b:
3e:13:ba:cc:b7:84:b0:44:c6:b0:13:58:1f:89:69:
14:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:57:7B:EA:DB:83:95:7B:8F:64:44:B2:E2:70:7E:B5:22:59:D7:30
X509v3 Authority Key Identifier:
keyid:05:F2:74:8C:B4:38:62:A1:04:B5:6F:8C:62:04:B6:20:97:06:55:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ce:e7:c7:7c:ce:cf:03:b5:dc:d6:a8:f6:98:26:56:6b:8e:
dd:73:b9:41:aa:e6:7b:c1:f5:85:9e:0a:3f:5e:e6:1a:c5:d5:
99:89:bb:c4:bd:6d:e5:c9:99:90:52:ae:20:85:c2:5e:e8:d1:
ba:28:81:06:97:6c:c5:7c:52:65:40:fa:c9:f0:bd:16:3b:b7:
0b:ba:f3:d6:d9:dc:69:34:c2:a1:b8:0c:98:46:3d:20:bc:7b:
f0:3c:aa:90:da:b6:d1:92:87:2a:ae:31:ff:ee:d5:f7:90:0f:
80:95:e6:24:1a:9d:c0:74:72:2f:b9:dc:b3:57:f8:e6:44:a3:
45:45:64:0e:35:9c:52:fc:33:fe:54:9d:2c:2a:6a:6e:01:89:
c8:28:58:8e:7b:3a:3a:c7:69:c6:09:63:49:97:04:32:60:90:
fb:c2:e0:e1:cf:a7:1a:cf:ca:18:e6:00:61:c0:a6:f8:93:71:
8d:dc:83:ba:3b:f0:04:bd:17:fa:51:58:7d:62:53:ba:60:0b:
f6:e2:88:bd:29:dd:ee:28:cb:4b:e6:16:db:00:55:5b:57:1b:
13:d0:e2:7e:04:fa:93:d5:4d:f2:3f:23:6c:e9:90:30:f3:63:
3c:da:f9:7d:dc:ed:9e:64:d5:db:a9:05:d5:e8:a4:f6:71:b7:
a6:4c:2e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:19:25 2025 by rpki-client