Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
File: BUQJodiwcvfbAkUouXIDOb27sQY.mft (raw, json)
Hash identifier: 3SVCWs9M9leuaIGcGAgTB8EayxkhCkp2ARCE1T0f3+4=
Subject key identifier: 3D:94:3F:B6:07:A0:89:E9:73:FE:F3:EB:FA:20:1C:BA:B9:CF:B4:7B
Authority key identifier: 05:44:09:A1:D8:B0:72:F7:DB:02:45:28:B9:72:03:39:BD:BB:B1:06
Certificate issuer: /CN=054409a1d8b072f7db024528b9720339bdbbb106
Certificate serial: 019655A5D248333C24E7B1BD5C4DCB3838C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 00:00:52 +0000
Manifest this update: Mon 21 Apr 2025 00:00:52 +0000
Manifest next update: Tue 22 Apr 2025 00:00:52 +0000
Files and hashes: 1: BUQJodiwcvfbAkUouXIDOb27sQY.crl (hash: iBGoS/HL8NRaEWv+3EWS2OLslapU0QpzKaIkrUuUm/A=)
2: UMjcguXzK8JJuV9OAn9YGkymPvA.roa (hash: 4DrO4r19O+5ROWEhi1+BcrHjdVH/qYD6Oqql5i/mVz8=)
3: VVkXzzLot1NoIJDj7qPW9t8KJeA.roa (hash: dj1ugJopxiv7wcnxLpO9LCCqzbXxSCBi0Qzt+qevjaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:d2:48:33:3c:24:e7:b1:bd:5c:4d:cb:38:38:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=054409a1d8b072f7db024528b9720339bdbbb106
Validity
Not Before: Apr 21 00:00:52 2025 GMT
Not After : Apr 22 00:00:52 2025 GMT
Subject: CN=3d943fb607a089e973fef3ebfa201cbab9cfb47b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a1:f7:01:d5:e3:10:2b:78:98:39:8d:9e:a3:
13:af:d3:32:e6:c8:51:ec:1d:1e:09:92:b8:1c:b2:
7e:0c:03:73:2e:ee:05:e7:81:9b:35:e5:7e:f6:46:
08:26:37:c7:37:24:c3:94:56:24:21:5f:d7:16:f2:
f4:53:31:e0:a6:ab:da:86:a0:de:9c:84:d9:22:56:
bf:e0:d0:8c:3c:59:da:c3:c9:1a:29:57:f5:ce:19:
09:5e:6d:ff:16:fe:30:a3:06:fc:b2:7e:88:c5:77:
90:12:15:18:23:61:1d:53:9c:f6:e1:b0:d5:03:4b:
f4:fa:5d:b8:34:51:59:7c:31:9b:9e:20:b8:a7:ef:
02:eb:4e:ad:90:7d:5d:3b:2b:fb:d0:2b:51:ea:f4:
8a:48:61:7f:e4:ac:8f:99:09:f3:d7:9b:6c:2c:5a:
67:51:80:e6:36:aa:14:6d:9a:7b:57:ff:32:5c:90:
eb:80:9d:28:26:25:bb:36:39:57:88:9c:32:fa:59:
eb:65:cf:e3:e0:b7:f6:74:89:c5:70:25:6d:32:50:
da:c2:07:55:35:f9:15:8d:a5:c7:fd:5a:1e:6b:d9:
13:a9:f7:ba:8a:3c:e7:17:d3:fe:9a:7f:78:e6:eb:
6b:33:32:11:5e:5f:fb:0e:fc:27:94:6f:c1:04:d8:
01:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:94:3F:B6:07:A0:89:E9:73:FE:F3:EB:FA:20:1C:BA:B9:CF:B4:7B
X509v3 Authority Key Identifier:
keyid:05:44:09:A1:D8:B0:72:F7:DB:02:45:28:B9:72:03:39:BD:BB:B1:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f9:88:b5:31:24:87:93:5d:58:a8:4e:5b:e7:00:df:a4:fb:
8b:9f:8f:26:54:e5:c0:de:55:eb:06:94:dd:50:7c:7b:dd:08:
ad:5c:5d:fa:e0:e8:42:9a:ec:64:47:a6:c4:9b:28:96:be:4e:
cc:67:6b:b2:99:33:f2:30:c7:6c:bf:38:a7:06:66:ba:87:35:
e4:46:0e:20:72:93:85:c8:66:e6:e9:69:99:a7:54:c7:7d:0a:
60:7c:42:16:2e:dd:ba:c9:8f:a9:8a:b4:94:1a:04:f3:ae:e6:
e3:b9:78:56:08:92:6b:d0:a7:0c:90:df:68:6a:b6:26:d8:eb:
08:6a:aa:15:37:12:df:60:c7:09:d9:0c:96:55:83:8d:83:dd:
40:f0:d8:1b:8c:0d:e9:2c:58:32:1d:83:17:1a:b2:8a:5e:04:
3c:09:d8:86:aa:47:30:53:c4:e6:c2:c7:98:be:81:ea:6c:48:
42:89:11:b6:1e:19:91:d9:c9:4f:5e:64:d0:92:e3:c3:4b:95:
af:e9:3c:9e:a9:c4:2a:d8:4c:9f:f9:14:a1:51:0d:73:e0:c0:
03:dd:63:02:d3:29:99:35:e9:d2:be:48:f9:bf:c8:1f:b6:fe:
85:59:ba:1b:9a:17:28:4d:98:6e:be:69:08:68:05:2a:6c:3a:
b8:24:4b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:34:57 2025 by rpki-client