Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
File: BGelYhGyHprHzcj7Y58xCpLCEEw.mft (raw, json)
Hash identifier: FnDOQV92nJzuROTVSk4zq/ozFVBA53eXQG64jd5pSLs=
Subject key identifier: 9F:5B:1B:19:A0:2E:EA:E6:0B:08:A0:19:F1:58:FA:0B:63:9B:A4:55
Authority key identifier: 04:67:A5:62:11:B2:1E:9A:C7:CD:C8:FB:63:9F:31:0A:92:C2:10:4C
Certificate issuer: /CN=0467a56211b21e9ac7cdc8fb639f310a92c2104c
Certificate serial: 01964FA396A9CAEACC9DFB85A95FE2E606AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGelYhGyHprHzcj7Y58xCpLCEEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
Manifest number: 0BDC
Signing time: Sat 19 Apr 2025 20:00:43 +0000
Manifest this update: Sat 19 Apr 2025 20:00:43 +0000
Manifest next update: Sun 20 Apr 2025 20:00:43 +0000
Files and hashes: 1: BGelYhGyHprHzcj7Y58xCpLCEEw.crl (hash: OA1tqaCdbvHeeTSwG0TCMAdNJ2m485L74kassEmwYz8=)
2: vBbw-4MxcReP3ao6MqHjBCu3GcI.roa (hash: W28uSnDMlGVkrCQsXwIvXwkvC/TrS+441MfK9XqL5Zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGelYhGyHprHzcj7Y58xCpLCEEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:a3:96:a9:ca:ea:cc:9d:fb:85:a9:5f:e2:e6:06:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0467a56211b21e9ac7cdc8fb639f310a92c2104c
Validity
Not Before: Apr 19 20:00:43 2025 GMT
Not After : Apr 20 20:00:43 2025 GMT
Subject: CN=9f5b1b19a02eeae60b08a019f158fa0b639ba455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bc:8c:2a:36:01:29:4f:7d:84:df:80:eb:45:
4d:84:83:74:66:ae:95:4e:3e:a6:7f:c1:ff:bf:52:
9c:54:b2:00:51:bd:47:c3:ba:50:2f:13:a2:5c:c8:
b7:d7:39:87:8d:15:dd:25:a8:e2:17:b9:b5:41:35:
e5:f5:04:be:8b:50:55:a1:1c:d6:9a:b6:1c:0c:5c:
6e:bf:4e:9a:c7:1b:95:53:4d:1a:fe:2a:ab:90:4d:
5b:8f:3b:1f:57:90:26:64:53:fe:d4:83:ef:b1:e1:
c7:1d:53:c6:01:f5:e3:63:fb:a4:27:67:c3:28:ab:
69:a0:18:ea:1a:6a:81:f6:e4:17:c3:23:82:f2:1a:
7b:ca:67:5b:48:92:b3:22:f0:34:32:3e:5f:b9:3c:
7e:1f:a1:65:75:35:cf:4f:2d:81:a5:8d:15:9c:8b:
fc:34:d6:1d:c3:f8:76:73:ce:85:24:74:b8:55:a9:
d4:38:47:9b:5d:dd:40:26:da:85:28:28:3e:d0:44:
ed:27:40:80:dc:21:ed:51:53:a6:c2:78:71:3b:17:
aa:9a:86:4b:2b:72:30:15:2a:b6:28:58:2f:af:58:
9c:6d:27:ea:f1:8f:e3:50:bd:19:29:95:9c:bf:77:
ae:44:ba:f6:d3:9c:4d:1d:55:ea:66:fc:d8:d0:a7:
5c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5B:1B:19:A0:2E:EA:E6:0B:08:A0:19:F1:58:FA:0B:63:9B:A4:55
X509v3 Authority Key Identifier:
keyid:04:67:A5:62:11:B2:1E:9A:C7:CD:C8:FB:63:9F:31:0A:92:C2:10:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGelYhGyHprHzcj7Y58xCpLCEEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:bc:ad:5d:a0:11:d2:22:67:4a:c8:5e:f0:bb:be:c4:21:79:
05:c7:cc:ba:bf:fb:54:cb:af:1b:a6:ab:fe:78:21:67:64:d4:
76:73:5a:8b:10:34:76:45:fd:ed:20:10:22:a6:53:f0:a4:63:
d2:d9:77:ba:82:5f:33:9b:f6:af:43:42:1f:0d:c1:cf:23:2f:
d0:66:71:f0:71:1d:02:ec:65:d6:05:2b:fa:85:6c:06:12:ed:
6f:ad:18:24:7c:52:fe:43:98:1a:47:fb:01:fb:6d:6d:ad:65:
2d:5f:f8:6c:16:b7:e0:60:df:11:b5:37:f8:8a:34:62:ea:bc:
5a:a4:03:23:30:23:f3:f9:0f:a3:ff:31:ed:09:cf:4f:c3:a9:
69:d6:bf:4c:bf:2b:47:17:cf:d7:2f:e9:5b:69:1c:f3:3a:09:
53:b1:1b:c0:da:5c:71:e2:91:5d:3d:92:b2:8f:83:a9:c1:c2:
d7:af:1a:db:3e:1b:e6:18:2d:ea:11:aa:a3:d9:ff:1b:fe:d8:
55:a9:20:40:b9:69:77:b1:13:ef:36:76:10:56:62:75:e1:ab:
86:7d:b1:72:a6:7d:eb:9c:19:2e:8a:13:35:c3:43:62:14:c6:
6e:ce:8c:95:ee:d3:5a:2b:bc:68:de:f0:51:69:d8:37:af:a1:
11:ca:9c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:52:14 2025 by rpki-client