Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
File: BWAG8qGECQDHU2KBIbP7fsW9iek.mft (raw, json)
Hash identifier: /5beUNTX7mQ804DOc9X5TX2oRTKLqyu71aEvDIgluKs=
Subject key identifier: 82:B2:B3:AA:27:6E:07:F9:8D:94:6D:9B:13:1A:DF:A0:A2:97:94:81
Authority key identifier: 05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
Certificate issuer: /CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Certificate serial: 019643D6FBDCB31AC94E738F8E1C02DEA030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
Manifest number: 0733
Signing time: Thu 17 Apr 2025 13:01:24 +0000
Manifest this update: Thu 17 Apr 2025 13:01:24 +0000
Manifest next update: Fri 18 Apr 2025 13:01:24 +0000
Files and hashes: 1: BWAG8qGECQDHU2KBIbP7fsW9iek.crl (hash: ow0K42bUd1lauBCwuleBNyr/JYuPxI/DRkzgIaiE5Cg=)
2: G7hpWPyXuPCdcjaRbCuAbyP7XNA.roa (hash: CuG2DStYKEKyAlh0IJta5/FjSh93nl0CeskY3cbZDZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d6:fb:dc:b3:1a:c9:4e:73:8f:8e:1c:02:de:a0:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Validity
Not Before: Apr 17 13:01:24 2025 GMT
Not After : Apr 18 13:01:24 2025 GMT
Subject: CN=82b2b3aa276e07f98d946d9b131adfa0a2979481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:61:ea:6b:bc:93:a4:45:fd:5a:ab:b6:84:e6:
89:2e:1e:83:25:ff:a7:46:94:33:48:70:75:74:89:
63:49:17:f1:4d:82:50:c8:fa:bf:b3:50:e0:81:11:
1a:3e:13:e9:b2:5a:18:26:f5:4b:b8:01:90:a5:3e:
c0:cd:fd:16:7f:d1:a2:c8:9c:fb:f0:19:76:2a:91:
76:64:3b:f8:53:ec:6a:71:eb:31:c8:08:b6:84:95:
a5:75:75:35:02:72:0f:20:ba:6b:dc:db:1f:3d:77:
db:2a:27:90:af:70:4d:94:f2:ac:38:ed:f4:1d:4d:
3d:14:28:c0:8c:b4:46:99:3e:af:d0:40:3a:0c:62:
5e:78:e1:9b:06:21:9f:25:08:ae:62:23:de:0f:25:
15:d0:21:56:e6:9f:a2:0e:81:40:22:f5:5b:f3:75:
9c:d3:ff:74:ee:48:75:7f:4a:3e:ec:27:1e:be:a6:
34:92:bf:ca:3a:15:7a:e0:56:e5:00:0a:dc:09:2f:
89:ae:98:58:fb:92:5f:77:7a:b5:86:71:d2:7f:6d:
fb:1c:a9:13:03:2e:ae:ec:4b:d7:11:7f:f2:d1:5b:
29:05:7e:59:78:b0:e2:23:0e:d9:48:a7:0b:10:e6:
e7:0e:be:3c:b7:7f:da:50:3f:1e:30:36:dd:2f:64:
ec:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B2:B3:AA:27:6E:07:F9:8D:94:6D:9B:13:1A:DF:A0:A2:97:94:81
X509v3 Authority Key Identifier:
keyid:05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:45:62:5d:8f:96:8c:c9:0a:3b:d0:02:c0:fe:d9:c2:64:a8:
0f:16:04:7e:7a:3f:c7:90:ca:19:8c:1f:a2:82:dc:96:08:a9:
d3:6a:c1:c8:bb:12:57:6c:3d:07:d1:5c:a8:95:6b:b7:4c:57:
a8:16:52:2f:d3:89:ef:c5:26:14:67:58:1d:90:e5:b1:a3:3e:
01:92:af:e8:ec:4a:a9:c5:58:bb:57:83:ae:0b:24:07:95:d3:
76:8b:97:a8:ec:53:c7:48:96:77:6d:54:57:1e:a5:58:a5:f1:
9d:5c:16:62:d0:11:ac:06:7d:b9:09:e9:d3:f3:b0:98:15:c9:
0f:5a:87:e4:1a:60:f8:69:39:06:df:6d:a8:6e:d1:d6:3e:40:
28:8c:5e:03:b0:84:76:0d:03:6d:b9:21:a7:30:3d:c5:a2:72:
ca:7f:6b:69:2a:04:19:f1:77:ac:33:ea:49:f4:4a:61:52:a6:
a7:46:79:fc:20:ac:0a:eb:fe:f1:ef:80:5d:47:99:3c:06:f0:
89:e4:b6:28:ff:6c:cc:d5:1d:8c:86:12:2c:20:87:5e:b8:73:
88:e6:ca:1d:89:71:ed:9e:78:99:60:0b:f3:8c:84:7a:b5:70:
f7:f0:f1:a8:85:c0:68:ff:0c:a6:1d:b9:fe:96:16:7d:ea:57:
c4:d0:c5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 21:14:49 2025 by rpki-client