Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
File: BT-EaexiUgmHiW2JJsFyKKe8-z0.mft (raw, json)
Hash identifier: HBvaUnDPzFbTT4YZMzaiwnke1fSQwLoK4x/KMA5NhUE=
Subject key identifier: D0:54:A8:AE:C6:80:50:5D:08:73:D1:E6:AC:2E:D8:3E:64:2F:3F:29
Authority key identifier: 05:3F:84:69:EC:62:52:09:87:89:6D:89:26:C1:72:28:A7:BC:FB:3D
Certificate issuer: /CN=053f8469ec62520987896d8926c17228a7bcfb3d
Certificate serial: 01965500DB7AB902AE1C9338539E01E6AF1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
Manifest number: 0FAB
Signing time: Sun 20 Apr 2025 21:00:41 +0000
Manifest this update: Sun 20 Apr 2025 21:00:41 +0000
Manifest next update: Mon 21 Apr 2025 21:00:41 +0000
Files and hashes: 1: BT-EaexiUgmHiW2JJsFyKKe8-z0.crl (hash: KI97YRNdepTae80rosbMkTlAIlEODr6O44j4h0/LkjI=)
2: HpFnJRgfsAOyrTqeLs8eo-g69ro.roa (hash: J1KtXJzzKcy+lZa+G0mBDKjPPemff/M6vpOlwWEgP+4=)
3: lLdmQa0LkR3Co21uBQYZ1e5FhDg.roa (hash: vtgIAMazUzVSJC7ln2bJgxtzKzngIXSl74Jinz+5lNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:db:7a:b9:02:ae:1c:93:38:53:9e:01:e6:af:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053f8469ec62520987896d8926c17228a7bcfb3d
Validity
Not Before: Apr 20 21:00:41 2025 GMT
Not After : Apr 21 21:00:41 2025 GMT
Subject: CN=d054a8aec680505d0873d1e6ac2ed83e642f3f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ab:a0:aa:fa:41:12:1c:d8:83:9c:e3:40:be:
c8:42:ca:ad:54:f6:e1:85:fc:ff:6b:ec:38:0b:3b:
e4:a8:f2:76:98:46:68:c6:9c:ca:95:9a:b9:1e:17:
46:f3:a3:73:58:a6:4f:d4:65:f3:6b:4b:a3:ae:bd:
cb:b9:23:72:e2:43:aa:af:14:68:ae:1a:ee:d7:61:
00:ba:f4:07:be:3a:ad:f7:54:ea:a0:2b:66:1c:52:
78:e5:9d:a5:8a:b3:0b:1a:c2:13:0a:f6:89:42:ec:
7d:58:b3:43:d1:dc:ed:2e:6a:a9:8e:1c:f9:d3:19:
c7:af:5f:6d:fa:fe:19:73:c2:f4:7c:c5:18:b5:c4:
02:e8:3b:1a:c3:e2:f2:39:f9:49:5e:60:7c:ad:02:
16:f3:a1:34:1d:df:38:3d:94:22:75:d0:58:dc:d5:
de:df:a2:af:71:a3:6b:8c:18:ea:e7:ab:25:d7:50:
b2:62:02:ef:b3:c6:e6:3c:a4:2f:b4:c0:48:68:a7:
ec:97:47:54:a8:dc:42:29:af:9c:ff:dc:1a:a4:8e:
d2:18:f8:e5:e0:66:5d:19:c5:a4:e9:6a:60:6c:85:
dc:d9:75:f2:83:b1:94:3a:76:ad:81:2d:24:22:6c:
b0:92:5b:29:29:4e:ce:1c:98:3d:89:e4:86:ba:d8:
e3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:54:A8:AE:C6:80:50:5D:08:73:D1:E6:AC:2E:D8:3E:64:2F:3F:29
X509v3 Authority Key Identifier:
keyid:05:3F:84:69:EC:62:52:09:87:89:6D:89:26:C1:72:28:A7:BC:FB:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:dc:ce:6a:8b:75:38:8d:69:97:72:a4:7c:02:0d:b3:e9:9b:
e3:ff:18:5a:5d:85:ba:85:e2:49:eb:87:27:d7:0c:a2:2d:37:
56:1d:9e:70:49:12:14:4d:06:53:3b:f2:20:f8:ec:cf:fa:63:
63:cb:30:fb:ca:85:e0:82:b2:ac:ca:bf:b5:18:dd:55:fd:b8:
7d:58:dc:e1:24:7e:9b:9f:b7:ec:31:37:3c:4f:e3:53:bc:a5:
44:e0:96:e9:ac:8b:51:d9:f4:9b:fe:1f:a9:3c:36:cb:7c:9b:
c4:4f:65:16:47:8b:e3:ca:d2:7f:71:02:d8:41:53:b0:ee:2a:
64:d8:3d:b0:86:b0:8c:ba:76:e9:00:25:82:96:64:c9:b5:d7:
f6:fb:d1:5e:fc:20:d4:2a:6f:42:09:5f:e6:b2:59:d6:f3:ea:
98:71:fe:eb:76:a0:51:e0:c9:82:4b:e5:3d:db:fc:39:01:7e:
d9:9e:80:39:5a:85:bd:25:de:f0:a9:24:42:ba:d7:7a:38:94:
5b:b4:65:4d:7e:67:77:5b:55:fe:54:a2:ef:c9:96:cf:3d:e8:
ac:e3:4c:bf:5b:f5:d9:3f:d9:37:d4:5b:f4:e6:2a:8f:8d:70:
34:63:c7:6e:da:91:63:f3:80:99:1c:3f:c7:5c:4a:79:a8:1c:
ba:7f:c1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:19:57 2025 by rpki-client