Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.mft
File: BKf5By6LMAS6CGgfse-IwD9iCog.mft (raw, json)
Hash identifier: MFe5VlQxo+2ykru91Kcb0dDXsc9rizE2TqEH+VHKQo4=
Subject key identifier: 92:8F:45:C2:0A:DA:24:78:85:3E:63:E0:50:78:37:F9:07:F6:87:F0
Authority key identifier: 04:A7:F9:07:2E:8B:30:04:BA:08:68:1F:B1:EF:88:C0:3F:62:0A:88
Certificate issuer: /CN=04a7f9072e8b3004ba08681fb1ef88c03f620a88
Certificate serial: 019659EFE3FBB407682E5AC824CE318C2B17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKf5By6LMAS6CGgfse-IwD9iCog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.mft
Manifest number: 1502
Signing time: Mon 21 Apr 2025 20:00:15 +0000
Manifest this update: Mon 21 Apr 2025 20:00:15 +0000
Manifest next update: Tue 22 Apr 2025 20:00:15 +0000
Files and hashes: 1: BKf5By6LMAS6CGgfse-IwD9iCog.crl (hash: JxAs0Vgb5NxND4n69Y7IGjmoJaZqGSuHprXaDb3gGe0=)
2: wSs_FD2QVb_noY_pKeQvB5Nmc4k.roa (hash: C/YIn0+2EPkhhvHnwCdIJWUCCRmG0HGZx7WYVhFFx3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKf5By6LMAS6CGgfse-IwD9iCog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:ef:e3:fb:b4:07:68:2e:5a:c8:24:ce:31:8c:2b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a7f9072e8b3004ba08681fb1ef88c03f620a88
Validity
Not Before: Apr 21 20:00:15 2025 GMT
Not After : Apr 22 20:00:15 2025 GMT
Subject: CN=928f45c20ada2478853e63e0507837f907f687f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4c:e9:2f:59:ae:72:18:a6:02:fb:ff:e9:90:
84:9a:69:98:b9:d1:68:45:46:09:71:a8:85:bd:e6:
5a:15:0a:c0:04:2e:26:68:4c:92:b3:d2:a0:95:61:
ed:79:a0:c8:5d:a6:58:87:5a:e7:3c:f5:5d:56:63:
15:6d:bb:cb:cc:41:b9:fc:23:37:fb:6a:bd:73:ec:
a6:89:38:25:a9:49:69:5f:82:d5:d9:fa:17:93:4c:
48:67:bd:46:53:21:2c:1f:74:9f:a2:e0:a0:65:ef:
df:82:87:e0:84:0f:d3:c8:b3:0b:1c:03:7c:a8:38:
b0:57:82:81:ec:4e:c2:fa:b5:1d:e3:74:61:09:24:
e6:ef:84:44:cb:2e:61:a5:a8:02:c3:9f:58:a7:d4:
f9:17:d9:92:02:d8:95:7e:32:19:a2:5c:93:5d:54:
e0:17:05:4a:a2:90:41:ae:00:ad:5f:25:46:df:7d:
1c:af:25:57:ad:79:33:ea:9c:1e:07:d2:57:aa:49:
ce:43:07:d0:1e:6a:ff:9d:5c:a9:fa:dd:33:80:c3:
c0:a5:5e:06:6b:a9:ba:90:c8:3c:18:33:28:3c:1b:
6d:a9:28:17:3e:58:77:85:c7:be:68:bb:04:88:34:
03:dd:e6:cb:ab:63:37:f4:30:68:2a:c8:bc:ad:50:
68:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:8F:45:C2:0A:DA:24:78:85:3E:63:E0:50:78:37:F9:07:F6:87:F0
X509v3 Authority Key Identifier:
keyid:04:A7:F9:07:2E:8B:30:04:BA:08:68:1F:B1:EF:88:C0:3F:62:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKf5By6LMAS6CGgfse-IwD9iCog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:7d:84:de:b0:5e:d8:92:48:6c:82:dc:36:ac:0b:3d:05:12:
20:91:6a:c5:11:44:11:86:70:8a:16:98:76:0b:60:08:46:7c:
97:d4:d4:65:99:93:21:33:06:27:e2:5d:75:7d:a7:3f:39:eb:
8b:c5:3c:7f:4c:ae:ae:89:18:bc:ac:0c:6f:42:53:ca:61:2f:
5b:74:38:21:f6:f7:f7:06:41:ff:dc:e6:8b:16:5e:8f:2a:c6:
ed:30:34:f9:d4:58:10:8a:37:b2:2d:6e:08:c3:12:61:63:c2:
2b:9a:51:6d:59:51:60:da:da:6c:3b:ce:f9:06:39:43:fd:1d:
bc:fa:a3:02:85:88:2c:63:2d:6b:cd:98:76:f8:10:52:9b:d2:
27:9e:de:f7:a4:71:32:c6:37:49:c7:00:b9:4e:ef:b8:d6:1e:
a2:53:88:6e:fa:d8:b4:a5:6c:42:65:9a:ee:9c:63:fd:e6:7d:
28:00:e0:b8:60:60:d7:05:a4:b2:29:41:b9:b5:65:fd:6b:c1:
8d:14:1b:4c:c9:ff:c3:89:5c:e3:25:54:08:8d:93:c3:97:0c:
64:11:af:4b:8b:6d:ad:80:7f:df:3f:82:32:5e:fd:33:0d:16:
34:e9:0c:b7:f1:53:6c:51:75:f5:cf:59:5b:d7:f6:c0:ae:9e:
13:7a:9d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 23:58:44 2025 by rpki-client