Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
File: BCrDgmiWh7YPzlzp24h7IdaKarw.mft (raw, json)
Hash identifier: F05qjv3Z7TVlXoHrAckEbTg0wJy4M0A+J7j1ZWOqKPU=
Subject key identifier: 19:1D:45:5C:2B:A8:32:07:A0:D1:3E:D8:D5:DE:97:D6:F3:BA:DD:B6
Authority key identifier: 04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
Certificate issuer: /CN=042ac382689687b60fce5ce9db887b21d68a6abc
Certificate serial: 01962BCEE2607D9B530016C76474930F40E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
Manifest number: 14ED
Signing time: Sat 12 Apr 2025 21:01:40 +0000
Manifest this update: Sat 12 Apr 2025 21:01:40 +0000
Manifest next update: Sun 13 Apr 2025 21:01:40 +0000
Files and hashes: 1: BCrDgmiWh7YPzlzp24h7IdaKarw.crl (hash: HROK68rKowCJ5nX3M50I3HGYjEKJXgCyyyW+VnDez8w=)
2: Lh8yvuYECQW6dDow2L76nBGsr6E.roa (hash: 0hiYjVR3RerVN9RXXudfA5pr9cnXHHQqw5O/Jaf9Snc=)
3: vtX7rusa6fZMmF3lc_ZvTTSyZII.roa (hash: /Q3goqDnJ6EwR3K+qh2LYwfBLshEeT0YC75y12sQLG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2b:ce:e2:60:7d:9b:53:00:16:c7:64:74:93:0f:40:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=042ac382689687b60fce5ce9db887b21d68a6abc
Validity
Not Before: Apr 12 21:01:40 2025 GMT
Not After : Apr 13 21:01:40 2025 GMT
Subject: CN=191d455c2ba83207a0d13ed8d5de97d6f3baddb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:11:94:c8:a4:8c:b3:27:b8:4e:f2:3c:2d:58:
d7:e0:b4:f5:83:d6:61:7f:da:f3:a9:8d:47:54:3c:
44:9b:e5:cf:7b:c2:c6:70:c3:a8:7c:63:84:08:32:
73:27:a1:6d:9a:48:bb:22:f5:f6:97:2d:45:f6:69:
0f:48:23:99:75:08:0d:03:f5:46:f5:d2:8d:18:d3:
6e:db:ba:32:6d:e3:ab:ba:00:41:06:ed:a9:80:85:
96:67:07:b0:fc:80:86:75:11:9d:02:99:1c:70:7c:
ec:d2:54:64:0c:e6:84:32:61:b9:8d:1d:e6:06:b5:
52:c4:01:56:27:82:00:20:86:38:70:3e:c3:d5:69:
56:58:e7:cf:7b:c8:f4:86:f6:fe:3b:09:1a:40:93:
c6:1d:8b:03:9d:3d:23:70:ea:3f:da:0e:cf:53:02:
d5:5d:7d:43:4c:c1:1a:89:d3:54:02:89:1e:14:8b:
2c:31:4e:d2:c5:12:c2:96:20:45:f4:85:9e:e9:1f:
1e:52:95:90:23:d8:b9:60:61:0b:26:f8:87:42:8a:
5b:e1:cf:c1:60:4a:97:0d:7b:3f:29:f7:62:07:3e:
f4:bc:f1:20:3a:d4:b4:25:4f:eb:02:2c:66:66:a2:
0a:c1:0c:8c:32:42:5e:7f:0a:0d:64:79:c7:c9:d6:
46:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:1D:45:5C:2B:A8:32:07:A0:D1:3E:D8:D5:DE:97:D6:F3:BA:DD:B6
X509v3 Authority Key Identifier:
keyid:04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:54:c6:40:3f:80:3e:4d:fc:b8:cf:e3:0a:e7:d7:98:7b:f5:
e9:27:b4:95:94:20:07:34:60:26:d3:ba:79:a8:be:76:c9:31:
5e:0c:ce:8c:d6:15:ce:35:4d:a6:cc:57:e9:11:c9:e4:91:e4:
b6:02:b7:a1:4c:df:19:ce:56:8e:70:76:fe:e0:66:ad:5b:50:
95:93:54:a8:92:a0:4c:39:24:e3:6e:7b:c8:ff:38:67:02:72:
71:20:44:f1:a2:03:69:0d:aa:a8:00:9c:8b:f0:4b:2b:cc:de:
97:59:5c:c1:6e:0a:75:41:64:f8:f6:52:9d:b5:df:dd:f0:90:
ae:70:e7:64:47:67:39:a3:74:04:e3:a4:9c:ea:83:7b:e5:6a:
4c:54:b2:f3:ad:df:05:e0:65:30:18:24:86:4c:44:73:82:3b:
ca:3d:70:54:e9:e0:48:ea:5e:79:cf:02:90:f3:02:94:e4:92:
ca:03:4c:42:1e:95:1f:42:a6:70:4d:55:2a:85:1d:80:e7:33:
14:8c:69:62:e2:2a:39:cd:cd:e6:3e:2c:73:10:2b:11:eb:1c:
4a:66:39:37:b4:97:81:c0:6c:fd:4b:d5:d3:98:6e:66:6d:ff:
5f:64:af:1d:27:df:0a:95:0b:cf:6e:51:e8:ab:af:25:0d:bf:
a6:2c:1d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:34:09 2025 by rpki-client