Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
File: B-4HmfCK-P5SD5SCzdBejqZeYag.mft (raw, json)
Hash identifier: hAseu3076OeHDlDvFByT4fSMVschZvR/tpBmPyhAiB4=
Subject key identifier: 6B:4C:D1:74:91:FB:CD:E3:09:FB:99:EA:E1:EE:39:90:E3:DF:58:A5
Authority key identifier: 07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
Certificate issuer: /CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Certificate serial: 01965613862D4FE4DA63E06474F8D8900C5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
Manifest number: 148D
Signing time: Mon 21 Apr 2025 02:00:42 +0000
Manifest this update: Mon 21 Apr 2025 02:00:42 +0000
Manifest next update: Tue 22 Apr 2025 02:00:42 +0000
Files and hashes: 1: B-4HmfCK-P5SD5SCzdBejqZeYag.crl (hash: daSEd1qW/Sf2lT/HFFyUf9SZ7qP1qYManbYf0yyFBdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:86:2d:4f:e4:da:63:e0:64:74:f8:d8:90:0c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Validity
Not Before: Apr 21 02:00:42 2025 GMT
Not After : Apr 22 02:00:42 2025 GMT
Subject: CN=6b4cd17491fbcde309fb99eae1ee3990e3df58a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3c:e5:3c:28:da:d3:ea:cd:14:c8:b4:f2:87:
3b:b1:77:07:a8:af:2d:61:e4:01:2f:e2:33:38:15:
28:a9:fc:30:5f:b5:1b:9e:6b:fe:83:a6:e4:6a:f2:
26:30:9e:0b:f8:07:3e:3c:6f:93:f5:1d:a8:36:8f:
45:d1:71:58:8e:23:34:7b:f9:86:3b:c7:83:09:d4:
49:f5:9b:f5:72:f4:91:57:7c:7b:6e:26:09:6f:8f:
21:90:8f:0e:33:9f:eb:14:65:87:e4:db:71:23:11:
ae:68:ba:2b:f5:78:cc:ab:74:16:b6:f3:e0:c9:af:
0c:d6:36:fd:1a:bb:41:93:02:b4:4d:09:8d:a2:40:
2c:da:72:47:1f:f2:f5:f8:9e:b1:e6:d4:81:3a:1b:
94:2e:42:cf:dd:65:1b:08:15:66:3c:78:1f:aa:7f:
8b:ef:81:39:06:f7:e3:0c:26:d5:ad:ee:5b:61:49:
8d:d7:e5:57:d1:71:a6:3f:05:66:78:98:75:1c:fd:
3d:c1:0d:fa:25:d6:8d:b9:4e:f6:46:e9:44:17:e2:
a1:99:51:69:69:df:49:d9:92:bd:1e:43:d2:ec:66:
46:41:9c:e0:91:ad:5e:d7:31:f0:bc:5d:35:6f:40:
40:d6:15:99:98:98:07:a1:77:7c:18:83:27:d5:ba:
55:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4C:D1:74:91:FB:CD:E3:09:FB:99:EA:E1:EE:39:90:E3:DF:58:A5
X509v3 Authority Key Identifier:
keyid:07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:67:71:fa:dd:26:e8:d3:3b:68:3d:65:80:08:6d:f1:ec:95:
5c:a3:cb:6f:4c:29:16:5e:e6:8b:79:10:06:39:7f:64:79:7c:
59:40:dd:fa:1e:92:1b:84:eb:6c:c7:0a:5d:c3:8e:cc:63:a5:
09:45:fa:df:bc:dc:16:b0:6a:05:e6:58:d8:26:d7:9a:1a:b0:
35:cb:6a:38:1c:8c:50:43:1d:56:35:bf:4e:8c:1e:ab:70:bb:
e6:c6:db:fd:25:33:92:e0:a7:1d:0e:6b:8a:78:de:5f:3b:d2:
17:64:f1:cf:1d:ec:6f:81:53:bf:8f:6c:ef:30:c1:4e:96:25:
21:79:b7:68:02:6f:80:75:d9:45:28:48:b5:d1:e6:0f:71:64:
f9:77:af:64:02:7c:47:7c:45:22:a3:7f:89:03:c9:47:7b:f0:
1b:2d:34:35:cd:47:1a:79:89:ef:41:c8:02:b9:2d:a1:d2:f3:
0a:ed:1a:93:86:9f:fa:a0:a1:92:35:cb:70:d4:f4:b5:9f:af:
55:cd:ad:fc:95:af:d0:14:f2:11:ba:67:81:5a:f3:6d:29:45:
0c:94:01:bf:3a:67:6d:4f:dc:98:d4:c6:3c:b7:3c:c2:9b:b5:
0d:2b:e3:f2:bf:0b:7b:dd:ad:dd:25:3c:91:16:0e:72:24:c6:
68:46:12:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:15 2025 by rpki-client