Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft
File: bxCL1a3fq_FR2QeePT00Emlmb6c.mft (raw, json)
Hash identifier: BgmIbDGCA5qz9uDF5GwFd9fHTkqMXFIaT8bh0++QxiI=
Subject key identifier: CA:BF:41:41:11:24:3D:2C:E3:8A:58:E6:4C:97:7D:51:87:FD:3E:F4
Authority key identifier: 6F:10:8B:D5:AD:DF:AB:F1:51:D9:07:9E:3D:3D:34:12:69:66:6F:A7
Certificate issuer: /CN=6f108bd5addfabf151d9079e3d3d341269666fa7
Certificate serial: 0196572712735F019B10CF53A1EAA98A3DD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft
Manifest number: 0681
Signing time: Mon 21 Apr 2025 07:01:40 +0000
Manifest this update: Mon 21 Apr 2025 07:01:40 +0000
Manifest next update: Tue 22 Apr 2025 07:01:40 +0000
Files and hashes: 1: SVN8chXXLiylZ6iSzxPfIxpS6Wc.roa (hash: S3c0fzdOzI2koB/V4F0MudazfO5SBRZZKt7wV9ucqpI=)
2: bxCL1a3fq_FR2QeePT00Emlmb6c.crl (hash: 3wFRWOshBswbmVA9edyAqCb2vIlJjrkRVDIbxMI8MHA=)
3: h7d4ZTDpPr-K2jwKQKNmXhUJLpc.roa (hash: JWS67wGbGixzjqGud+OGYY8Sh8Xk+/Z+C9GlJ0f+TYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:27:12:73:5f:01:9b:10:cf:53:a1:ea:a9:8a:3d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f108bd5addfabf151d9079e3d3d341269666fa7
Validity
Not Before: Apr 21 07:01:40 2025 GMT
Not After : Apr 22 07:01:40 2025 GMT
Subject: CN=cabf414111243d2ce38a58e64c977d5187fd3ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cb:56:57:55:a5:2a:ea:97:d9:7b:93:24:39:
5a:5d:4e:3a:a2:eb:13:38:f1:74:16:2c:ae:29:cc:
3a:30:c9:62:e3:4e:44:f1:c2:da:ed:73:02:d0:b2:
f9:8c:95:c8:61:44:de:ea:4b:69:d6:f4:39:8a:b3:
ff:80:8b:51:89:35:8a:b8:b8:03:84:f9:57:5e:d6:
8d:a1:81:c6:7c:d5:e4:91:15:f6:0f:85:cf:0f:c1:
d0:45:21:96:7a:0d:6b:c4:c7:fa:e0:9b:d8:98:b4:
90:13:1e:c1:6f:d8:03:01:43:f0:14:6c:86:35:00:
2e:b7:0f:e0:5e:3b:87:e9:fc:a9:93:d2:f2:d7:58:
3a:e3:64:d7:b9:9c:9d:6e:a3:b9:3a:f5:84:eb:3f:
d6:cd:5b:6c:54:69:35:2a:e6:e0:d5:53:4c:a9:80:
1e:74:25:27:2b:a4:8f:65:ea:73:dc:ab:62:39:ce:
c1:0b:d6:91:6d:7c:b1:21:e2:9f:f6:28:cc:91:4c:
59:87:a7:8e:1c:35:0f:e1:e4:27:f3:b6:e2:18:4f:
01:1a:14:fb:ea:16:15:57:35:2b:c1:fa:58:6e:df:
38:a0:ee:ba:5e:52:b3:cb:6b:6e:8e:35:d0:6c:16:
d1:8c:bc:b2:35:c3:72:6c:68:47:36:9b:c3:23:72:
bc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BF:41:41:11:24:3D:2C:E3:8A:58:E6:4C:97:7D:51:87:FD:3E:F4
X509v3 Authority Key Identifier:
keyid:6F:10:8B:D5:AD:DF:AB:F1:51:D9:07:9E:3D:3D:34:12:69:66:6F:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:7c:53:ca:8e:4c:7b:8d:9f:e3:e9:5b:dc:dc:b0:53:bb:c9:
15:bc:11:e7:3c:ea:8b:6b:a1:3c:ec:8c:23:52:66:40:65:1d:
0d:b8:23:44:26:1c:6c:29:09:d1:42:be:75:8a:30:f0:42:95:
9c:f5:3e:1c:ad:c8:c5:89:53:c2:92:5b:30:13:30:f8:b2:08:
8a:e2:51:2c:66:23:52:7d:c1:df:60:fd:dc:ad:1b:6f:c0:a0:
e2:96:35:cd:72:0d:de:a3:0d:7e:02:f1:6c:72:ac:00:ae:41:
17:d6:1e:5c:d2:14:81:23:6e:18:45:59:58:f6:3d:44:2f:e2:
29:a0:b2:22:35:44:a2:3e:54:8f:51:45:b8:82:74:05:3b:5b:
1d:98:6a:71:69:ab:32:fd:4a:6c:03:de:93:fb:03:82:5c:67:
15:d2:f4:eb:2d:98:55:f0:db:07:50:9a:13:e4:f8:2d:6c:e5:
9d:00:09:ae:50:7c:40:63:e9:51:fb:cc:d9:2d:89:0d:ee:d0:
49:f0:b7:f1:b8:79:b0:66:95:19:5f:e2:a6:b1:4f:a6:4e:e7:
50:65:df:3a:5a:74:9d:16:6b:a6:31:51:a2:48:14:34:96:72:
74:4c:2d:17:17:84:15:38:b6:1a:0e:21:3f:0c:8b:ff:37:fa:
f4:f8:7a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:08 2025 by rpki-client