Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
File: BaCPua9NbK_M-uOyjsbtScQj78Y.mft (raw, json)
Hash identifier: TL4SAE3jmNo14sDrEBfwN9xsAjp8fCPGOaupNrlYb8k=
Subject key identifier: D5:05:A2:B0:BA:4E:FB:84:78:A6:81:F7:BC:53:1C:42:C5:11:8A:8D
Authority key identifier: 05:A0:8F:B9:AF:4D:6C:AF:CC:FA:E3:B2:8E:C6:ED:49:C4:23:EF:C6
Certificate issuer: /CN=05a08fb9af4d6cafccfae3b28ec6ed49c423efc6
Certificate serial: 01964556D7EB9417B5D517BE94F1C05B9EB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
Manifest number: 10A7
Signing time: Thu 17 Apr 2025 20:00:41 +0000
Manifest this update: Thu 17 Apr 2025 20:00:41 +0000
Manifest next update: Fri 18 Apr 2025 20:00:41 +0000
Files and hashes: 1: BaCPua9NbK_M-uOyjsbtScQj78Y.crl (hash: dCPn17cZt3Aeh/RWTGT0oZP4iYkhHqxY5fObx0+ZxRE=)
2: SGQBvdPhJeyzXH46rCn1HprgoUQ.roa (hash: JigxCYquveWyuHmkXH4kT+LxBtbk4j6Ry0hBrLIoDFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:56:d7:eb:94:17:b5:d5:17:be:94:f1:c0:5b:9e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a08fb9af4d6cafccfae3b28ec6ed49c423efc6
Validity
Not Before: Apr 17 20:00:41 2025 GMT
Not After : Apr 18 20:00:41 2025 GMT
Subject: CN=d505a2b0ba4efb8478a681f7bc531c42c5118a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c2:35:f8:6e:a0:01:1b:38:09:7f:55:d0:dc:
ef:82:5b:fd:9d:7c:81:9f:cb:86:67:7c:45:8a:5a:
8b:1d:c8:1f:d6:13:53:f6:81:df:07:46:63:44:3d:
04:7f:fb:35:a2:b0:a8:58:6f:77:a4:1a:f7:3e:41:
c7:20:79:df:d2:3f:54:11:58:22:0e:32:98:c1:b1:
26:a7:40:3a:df:5e:1d:b4:b6:35:85:37:bb:4c:e7:
56:3d:5a:20:30:cb:cc:7a:36:14:7b:a4:ee:f6:a1:
a4:ed:f0:33:26:00:0f:87:e6:25:fb:b5:52:1a:de:
d0:da:e8:e4:f7:99:2c:70:e2:62:34:da:ca:3e:8e:
b9:26:f6:28:fa:eb:93:fe:50:d2:98:1f:fb:67:97:
be:57:c8:50:8b:d6:54:fb:87:cd:60:9c:56:ea:53:
b9:18:f4:43:0c:00:5d:08:07:c4:fb:7b:bd:64:26:
d0:a3:43:b4:32:02:03:30:6e:2d:4c:6a:3b:9d:e1:
bb:95:a4:08:ba:71:34:65:0d:be:dd:a9:f9:a5:0d:
ff:34:4e:8f:16:a5:0c:4e:07:84:13:cb:e4:97:9d:
65:f6:00:b5:31:e9:16:f8:1f:7d:c4:26:eb:9d:2e:
3e:88:c3:da:dd:fe:b7:b2:12:7b:b9:f6:81:63:5a:
28:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:05:A2:B0:BA:4E:FB:84:78:A6:81:F7:BC:53:1C:42:C5:11:8A:8D
X509v3 Authority Key Identifier:
keyid:05:A0:8F:B9:AF:4D:6C:AF:CC:FA:E3:B2:8E:C6:ED:49:C4:23:EF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:03:65:f1:66:6c:c4:79:db:a0:2a:05:fb:e0:6d:cb:df:6d:
6c:c1:36:4e:ba:ad:e1:aa:79:90:71:eb:27:71:eb:c8:44:da:
bb:45:d7:44:2d:33:62:db:2b:47:dc:a4:35:77:86:d6:20:40:
1e:a7:bc:fd:b9:73:7d:a5:7d:2a:08:ea:3f:bf:2a:7d:0a:c1:
36:08:08:f8:9e:ba:47:5e:f6:bb:6b:ae:6a:5f:69:1e:22:d0:
00:a4:12:7a:18:47:d0:3c:51:6d:b5:e1:6e:12:5d:8f:8f:62:
6d:6a:bf:da:fd:c4:37:55:01:88:5e:cb:e9:d8:7d:22:6d:8b:
b8:e4:bc:59:74:7f:67:06:a2:d3:1f:dc:20:10:2c:9e:38:a8:
73:38:15:1a:21:2a:a4:e9:9c:29:7f:ee:cc:0d:d4:18:e4:02:
2a:ad:a1:5e:7b:1f:8c:00:52:1a:45:b7:69:6b:00:74:5d:9e:
54:78:e9:01:90:67:06:25:07:7f:89:c3:46:93:dd:02:42:0e:
2f:1b:98:09:99:08:8d:b5:09:03:1a:de:0b:88:a6:5b:2a:67:
92:e7:f7:be:2a:6d:c2:96:84:d9:1a:86:e0:8a:e1:1c:e2:e4:
81:20:99:e4:13:11:f7:14:d2:13:d8:e8:0e:89:bb:a9:bf:eb:
11:c8:ea:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:32:58 2025 by rpki-client