Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
File: BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft (raw, json)
Hash identifier: vveFUbyRcM7hSMkUbGobH8kQHQtphAoQ01ZVad6lkE0=
Subject key identifier: 24:AB:90:BE:BF:8C:C0:BF:AC:28:9E:C0:88:9D:B2:9F:D3:22:0E:07
Authority key identifier: 04:90:43:47:A2:36:1A:CE:D7:C3:70:F7:44:6D:E7:08:27:7E:E6:D1
Certificate issuer: /CN=04904347a2361aced7c370f7446de708277ee6d1
Certificate serial: 0197481EA91D1E0FF52C60FF102AD2DC6663
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
Manifest number: 047B
Signing time: Sat 07 Jun 2025 02:00:58 +0000
Manifest this update: Sat 07 Jun 2025 02:00:58 +0000
Manifest next update: Sun 08 Jun 2025 02:00:58 +0000
Files and hashes: 1: BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl (hash: QRj2i6S9zVhhUoCWxj1GZn6hB8rUeHnY0eJUBip8c44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:a9:1d:1e:0f:f5:2c:60:ff:10:2a:d2:dc:66:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04904347a2361aced7c370f7446de708277ee6d1
Validity
Not Before: Jun 7 02:00:58 2025 GMT
Not After : Jun 8 02:00:58 2025 GMT
Subject: CN=24ab90bebf8cc0bfac289ec0889db29fd3220e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6e:a6:2c:d8:32:45:0b:3a:01:f5:e3:c2:67:
1a:91:85:7f:ea:3d:64:01:8d:8c:21:29:3c:3d:92:
4a:06:15:dd:e3:f6:36:86:84:e0:e7:10:c3:b5:87:
09:1b:96:bb:d0:52:61:74:00:95:9f:67:e4:df:9f:
1a:04:db:a5:66:70:78:74:e3:7f:af:26:67:d9:cb:
ce:96:00:3d:86:59:da:e3:c7:87:d3:15:d4:a7:d2:
95:84:68:fd:dc:bb:04:f7:2e:91:26:0e:31:7d:53:
d7:5c:ca:51:4b:30:ab:99:9a:6a:bd:26:f9:63:a0:
fe:34:31:84:dc:49:c7:e0:91:b4:90:cb:db:de:97:
8b:91:a6:33:fa:2b:85:07:3b:de:2d:90:7c:8e:57:
68:84:85:42:7f:27:ae:f1:b8:b6:16:58:ef:b0:5e:
d0:fc:c9:65:25:c1:66:0c:ab:aa:21:85:5c:fd:89:
0c:ed:4d:66:09:b6:d8:16:e6:46:77:9c:4e:5d:62:
83:ba:ed:e2:7e:db:be:57:87:15:fa:39:b5:61:ab:
68:44:f5:2a:e5:06:b4:27:41:c6:d6:d0:79:2a:71:
59:39:5f:5b:9b:0a:d4:cd:b2:e0:2b:7c:df:56:81:
39:72:fb:4f:0b:e2:34:ff:d8:55:0c:ec:5a:f5:03:
70:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:AB:90:BE:BF:8C:C0:BF:AC:28:9E:C0:88:9D:B2:9F:D3:22:0E:07
X509v3 Authority Key Identifier:
keyid:04:90:43:47:A2:36:1A:CE:D7:C3:70:F7:44:6D:E7:08:27:7E:E6:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:49:b0:c3:a9:11:65:bb:e1:af:08:e4:9f:9b:f9:b8:31:0c:
e3:5e:94:ce:0f:54:23:ce:a1:10:56:00:25:18:9d:80:69:ac:
56:d6:08:1d:71:fd:29:ba:eb:62:cf:09:e4:2e:17:46:24:bd:
2c:57:b4:9f:0e:33:9b:d6:03:c0:16:d8:54:e4:0c:a2:6a:aa:
47:43:32:01:37:e5:4b:99:bb:ac:c5:c7:33:d8:be:7c:6e:2a:
67:06:cf:ae:b6:9c:a6:fb:54:48:a5:78:01:c3:f0:89:cb:45:
ff:c2:9c:71:51:48:d1:dc:5d:08:bf:c4:72:6f:e7:25:8d:c0:
c7:12:62:b1:d7:7b:f4:f5:a9:c1:29:c1:e5:ca:e6:e0:57:21:
d7:16:5a:db:9e:1a:3b:b7:2d:1d:1c:96:b3:e1:c6:eb:4b:41:
fc:66:e7:1b:86:30:c2:62:bc:2a:33:87:37:d8:2e:ab:13:ac:
b7:7f:35:45:c7:05:cc:85:9e:6f:15:64:87:08:f0:bf:44:13:
ff:c0:cc:67:95:fc:77:73:b8:ac:a4:f1:dc:93:cf:e5:4b:e1:
86:23:7d:b1:ac:ee:f6:5e:47:95:49:d6:c7:d5:61:bf:23:14:
90:2f:4b:43:c1:83:5f:33:6e:d0:9a:6a:12:c7:89:6f:04:2d:
7b:52:88:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:53:03 2025 by rpki-client