Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
File: BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft (raw, json)
Hash identifier: psFuB/3vGx5ogCUqvZIcl0U4fIZHxeMPJEj2aPiU2KI=
Subject key identifier: B9:14:EB:D9:E4:FB:F1:7C:1F:A2:87:F5:FD:8F:6B:D4:CA:C3:C8:05
Authority key identifier: 04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43
Certificate issuer: /CN=04747b565844e3e2fc712fab5be85924aac58643
Certificate serial: 01965F84713ABC913DB124B5A21DA648AD5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
Manifest number: 1504
Signing time: Tue 22 Apr 2025 22:00:37 +0000
Manifest this update: Tue 22 Apr 2025 22:00:37 +0000
Manifest next update: Wed 23 Apr 2025 22:00:37 +0000
Files and hashes: 1: BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl (hash: jH02VG0RYCr6KeDk4OITzcyVooG/4Rxa2Y/syq9awmM=)
2: BliaGrjDAqHKNEj9Mx9veOEBPEw.roa (hash: Zp3YmeNzMTw4uQ2BI2h1hZyUbxrVTAnKdQaDtTTNRXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 22:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:84:71:3a:bc:91:3d:b1:24:b5:a2:1d:a6:48:ad:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04747b565844e3e2fc712fab5be85924aac58643
Validity
Not Before: Apr 22 22:00:37 2025 GMT
Not After : Apr 23 22:00:37 2025 GMT
Subject: CN=b914ebd9e4fbf17c1fa287f5fd8f6bd4cac3c805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:72:16:d1:1d:a4:ee:07:f5:d3:58:91:86:a8:
f7:c7:7b:51:2c:03:f2:d1:4a:17:c7:09:a0:dc:a8:
61:3f:5e:4d:0a:40:7a:61:98:6a:78:9c:97:99:73:
c9:b0:d7:48:8b:5a:39:20:85:88:1e:a4:f1:55:88:
cc:94:0d:07:72:dc:3a:1d:fc:cb:8f:b0:b3:a3:db:
b2:a0:52:9e:01:d8:89:d8:24:90:ab:a5:07:fc:6c:
fd:9c:cc:b4:26:ba:07:1d:b7:81:5f:00:f6:c6:97:
b3:bb:68:41:57:ec:73:ce:4e:66:01:1d:46:73:4d:
46:05:eb:e8:2c:ea:ed:32:24:9c:ec:bd:48:59:33:
29:7c:32:1e:46:d8:96:cd:29:a8:7e:0b:7f:6d:06:
3b:3f:ac:81:dc:66:83:b3:e1:b4:79:a0:f0:84:7e:
3d:f9:64:55:73:ec:59:87:b4:6f:3d:7d:ba:61:14:
06:c9:08:75:04:58:ce:5b:14:ee:b5:06:e0:c1:4a:
20:85:9d:1c:f9:44:4b:bf:02:68:78:e9:b3:42:94:
a1:ac:b9:00:2f:3a:0f:2c:d1:05:c9:14:ec:92:8a:
7c:b7:5b:e9:4c:f8:7b:32:d2:44:e5:eb:39:4c:b3:
99:9c:13:13:a4:55:b6:b6:77:b8:20:9e:d8:1a:84:
cc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:14:EB:D9:E4:FB:F1:7C:1F:A2:87:F5:FD:8F:6B:D4:CA:C3:C8:05
X509v3 Authority Key Identifier:
keyid:04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c8:c5:89:c8:00:98:0b:d4:f0:30:8d:7b:03:25:00:53:bb:
9e:b5:12:1c:e0:33:6d:8d:6a:e9:9e:8b:30:00:2e:71:7f:57:
16:a2:c3:a9:2f:54:29:dc:2c:13:56:8a:51:ab:84:6f:69:43:
11:9e:66:95:fe:93:32:d8:95:98:d5:1b:3d:ef:0d:4d:15:06:
39:bf:b2:83:d9:d3:49:10:e3:24:5f:3f:0e:8d:ad:0c:c1:8f:
05:a8:3b:42:25:e9:a4:a4:ce:b6:46:3e:85:17:ac:31:b2:bd:
d6:8f:4b:4a:62:d6:fc:14:86:7b:12:85:f9:2b:e2:51:6d:84:
ee:4c:77:28:fc:0f:1c:ba:3d:b2:d5:59:9b:97:9b:0f:3c:2c:
72:2c:59:86:12:ba:7c:88:65:b2:3c:49:53:59:d4:34:e2:c3:
fa:4b:bb:84:b2:f0:a2:ab:5e:66:08:24:75:6b:86:e2:cc:b2:
ea:69:2b:6a:74:0d:8b:0e:ce:b4:ac:b0:9c:b4:b7:16:10:eb:
e6:fb:9e:05:d0:7e:92:1c:20:86:c2:16:5d:a7:0c:81:5f:a8:
e0:55:2f:f3:41:9e:05:87:6f:76:24:99:f7:2f:07:a9:2e:0b:
bc:e1:ee:50:3d:b6:c6:f0:0e:57:87:bc:39:59:e2:7e:c1:11:
eb:52:e7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:14:19 2025 by rpki-client