Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
File: BKMSumXpC_is9PVzJKMMC2y9HC8.mft (raw, json)
Hash identifier: AD8fzXvVEv/Ezkdu5U3uUeecqwqVXRRS0MLJT/yitig=
Subject key identifier: 56:D0:BA:9F:32:05:24:FF:4E:63:2A:35:EA:71:1B:A3:70:BE:BC:95
Authority key identifier: 04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
Certificate issuer: /CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Certificate serial: 019648FC940D84284F1F2101C3A871BD1F4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
Manifest number: 14FA
Signing time: Fri 18 Apr 2025 13:00:34 +0000
Manifest this update: Fri 18 Apr 2025 13:00:34 +0000
Manifest next update: Sat 19 Apr 2025 13:00:34 +0000
Files and hashes: 1: BKMSumXpC_is9PVzJKMMC2y9HC8.crl (hash: T/QBuMoZEBXvdLfR1SThuei6q1yJ6K2M1fDtP7NMB3o=)
2: dJFiVvdyRrc-N47GUy0rDR_3aS0.roa (hash: 0F0smXVvhLYj+9BCNow/krceI5xEmMfd4H+/Waw0oTE=)
3: muPUtRREeaPkLT6TOq-93dIjDcU.roa (hash: w+l36y5225njDbQNUe9USPk338011nfDzmjvCmLx+iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:fc:94:0d:84:28:4f:1f:21:01:c3:a8:71:bd:1f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Validity
Not Before: Apr 18 13:00:34 2025 GMT
Not After : Apr 19 13:00:34 2025 GMT
Subject: CN=56d0ba9f320524ff4e632a35ea711ba370bebc95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a7:e2:41:2f:4c:be:97:e3:a7:77:a2:77:4a:
33:63:47:ce:24:2c:ab:56:0e:46:5e:13:37:04:56:
95:03:00:36:00:cd:f3:8d:92:19:89:80:04:c2:c7:
28:00:bb:38:6e:fd:31:f0:4c:29:e9:a3:45:7f:36:
6a:da:e4:3d:22:c4:dd:47:14:95:cc:36:fd:3c:b9:
27:b2:77:54:9a:a9:aa:a5:47:a9:e5:fa:b9:87:ae:
28:d8:62:8d:c4:fc:e7:f1:ea:65:fe:95:c7:cc:00:
84:27:12:82:de:a3:cb:8e:a8:71:f1:d0:34:f0:48:
da:87:9b:00:0b:ae:4e:53:51:ee:db:98:67:bf:c0:
b5:db:89:64:bd:b9:01:17:8f:81:e5:7f:51:96:d4:
3b:b5:c9:98:67:f5:9d:8e:f8:87:7d:07:62:00:dd:
57:94:a0:6e:82:1e:54:65:08:ff:cc:84:29:a0:87:
a9:41:f4:77:ab:14:c3:d2:99:e1:8b:80:d6:d1:9b:
e8:87:c5:c3:93:e8:d1:fe:93:bd:f7:3d:92:f6:4a:
3d:20:f4:52:4b:ff:93:00:c9:0a:5e:0a:e6:76:be:
57:44:5d:ce:e7:ee:7c:d9:8f:e0:c0:6b:c8:a9:ff:
ec:71:11:42:35:b3:3a:de:4d:2d:7d:f6:00:89:17:
a4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D0:BA:9F:32:05:24:FF:4E:63:2A:35:EA:71:1B:A3:70:BE:BC:95
X509v3 Authority Key Identifier:
keyid:04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:1f:2c:b3:24:eb:72:19:d0:81:88:61:b9:90:e0:20:64:65:
0b:4d:b3:7d:b0:af:ed:e7:e3:da:7d:31:fe:42:f8:3d:dd:cf:
dc:b1:58:6f:56:31:16:c8:38:5d:f8:8c:7b:89:07:57:74:3d:
53:9c:87:ca:58:85:12:ab:71:1f:86:9a:3e:dd:a9:30:e0:c1:
be:9e:ba:57:08:29:ef:f2:19:d9:17:6a:8d:5c:fa:b6:07:a3:
f9:b5:3c:9e:37:dd:b7:d4:98:2d:27:12:bf:f5:0b:da:f9:10:
cf:2e:b0:a4:ad:e7:e0:44:24:5e:a1:85:9f:e0:3e:54:6e:8d:
da:26:bf:20:d9:c8:64:d4:81:f1:cd:47:14:ed:4e:d1:43:91:
68:22:1a:c3:ad:1e:22:d7:f1:05:a7:81:f8:f7:90:a3:c6:15:
a7:c2:f5:b4:3f:51:1e:4f:ba:2b:5e:01:09:13:14:da:09:ef:
6c:64:9a:3d:81:a0:b4:33:d5:61:de:06:6c:68:6d:72:3c:c8:
f0:ec:24:2a:33:71:2e:73:ff:7e:8d:91:de:40:68:8d:75:0a:
01:7c:46:cd:9c:a2:99:91:30:32:ca:30:f7:66:0d:38:a2:13:
58:56:26:df:f2:c5:23:e1:2d:98:89:6a:bd:ed:a0:8c:1c:90:
a5:78:2d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:51:36 2025 by rpki-client