Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
File: BE1l50JUsl_gDrjqBrtY--aKwZs.mft (raw, json)
Hash identifier: 1c4mMmg3jxBGqfofBhcTvRKP0FQfv96kXgb+hA6IIN0=
Subject key identifier: 00:4F:AF:CC:A5:91:95:A0:52:4D:0A:B9:95:56:75:46:C2:AC:C0:73
Authority key identifier: 04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
Certificate issuer: /CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Certificate serial: 01965236847CDE1AE9F836EE15CCC5752809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
Manifest number: 0AFD
Signing time: Sun 20 Apr 2025 08:00:26 +0000
Manifest this update: Sun 20 Apr 2025 08:00:26 +0000
Manifest next update: Mon 21 Apr 2025 08:00:26 +0000
Files and hashes: 1: BE1l50JUsl_gDrjqBrtY--aKwZs.crl (hash: l+b9tj5MuPrwXwDmZYTBjgikguy+76dHh41wkZLdRqI=)
2: rthTWvBWTldvCBC_jsm-IEkTBFQ.roa (hash: GkYmfEttYtLOHlLhDgqjd5V7UynvO3JpXV9H0/Hyyb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:84:7c:de:1a:e9:f8:36:ee:15:cc:c5:75:28:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Validity
Not Before: Apr 20 08:00:26 2025 GMT
Not After : Apr 21 08:00:26 2025 GMT
Subject: CN=004fafcca59195a0524d0ab995567546c2acc073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c2:1b:68:06:e7:4e:cd:e9:c0:de:a9:db:5e:
c8:77:8c:e9:cb:c0:a5:aa:fa:da:81:8b:17:93:3d:
18:08:ff:1c:03:f4:36:56:96:eb:ca:79:c2:a2:25:
d0:9f:f6:cc:ad:7e:67:07:31:44:f5:b9:37:0f:e1:
9e:70:5e:cc:95:51:cc:19:bc:26:44:84:b4:ea:57:
3f:b4:18:7e:33:7f:53:8e:8b:6c:35:13:bd:4e:ab:
46:8c:b1:2f:3f:18:7e:f0:ec:87:93:a4:cf:25:fb:
20:4e:47:f3:b4:ec:de:16:65:8e:61:af:24:4b:8d:
1e:3b:00:54:8b:2f:0a:5a:8d:94:ae:a9:48:06:ed:
84:26:a6:49:03:c6:bb:05:b2:2f:03:42:a0:88:b1:
d5:e6:a0:92:ed:54:06:b1:9f:df:6b:e0:c2:c2:8c:
f1:c6:62:b6:58:76:c5:35:2e:87:00:ee:85:b7:da:
39:7b:44:48:40:38:ab:0a:8d:0a:d5:00:98:74:aa:
5b:2b:cf:50:25:a3:d5:20:87:b8:30:5a:18:e6:54:
a1:f7:ee:da:7a:9d:fc:c2:27:5f:8e:9c:9f:5d:ee:
38:27:d1:09:fb:2d:eb:aa:bd:30:a5:89:99:ee:c5:
ad:e4:ff:03:41:b8:bf:87:75:3c:1b:cb:d7:4b:14:
eb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4F:AF:CC:A5:91:95:A0:52:4D:0A:B9:95:56:75:46:C2:AC:C0:73
X509v3 Authority Key Identifier:
keyid:04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:17:c4:11:68:4b:37:fa:d0:a8:c8:fa:85:68:76:60:1a:af:
d6:72:b4:07:7c:b7:af:ef:91:da:0b:cd:eb:71:1c:06:6e:24:
1d:a5:1e:75:13:35:d2:05:c1:ae:c3:59:7f:f0:77:8d:f4:8f:
49:25:d9:db:5e:c3:26:91:49:e1:03:f6:98:84:45:b1:67:8d:
d6:80:28:61:b2:7f:58:cc:1e:b2:84:db:ab:32:d3:22:a9:48:
d7:90:98:ba:e6:a6:8f:62:41:a8:4e:f1:d2:d6:3e:9a:07:c7:
e0:ef:9f:26:14:a1:18:95:ec:f9:27:a0:11:a9:ec:ab:e2:37:
08:09:8f:cd:07:a6:34:c0:de:c0:93:a7:8f:c9:f4:f3:20:01:
ab:b0:a0:9a:e7:7d:0a:1c:9d:67:f6:34:0b:d5:b5:61:1f:c8:
4e:f9:cf:e6:cc:e0:7e:c9:5b:24:c8:26:4d:14:eb:5a:3a:7b:
62:9d:3e:3c:24:a0:e4:47:72:fa:3d:68:1b:65:b0:34:4d:43:
29:79:7e:cf:8d:26:69:2f:d8:7e:48:26:ed:c6:f7:e0:c0:d3:
b4:7c:b4:61:3f:1b:0b:7a:22:5b:ed:ba:b7:24:5a:af:14:2f:
3d:1f:a7:9c:5b:17:7c:53:f0:a2:43:d0:b3:ca:0b:8c:5b:c3:
07:36:d9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:14:50 2025 by rpki-client