Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
File: BE-_fHvu77FSWiYU2c1jpCafn0o.mft (raw, json)
Hash identifier: W3tmAmAYUWGmmKyrjntw8AKX9des+UtcsZR6+BWTAi4=
Subject key identifier: D8:C5:BE:85:0F:A9:B5:DB:F7:FD:F2:B3:2A:4D:78:BF:E7:E7:8A:0A
Authority key identifier: 04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A
Certificate issuer: /CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a
Certificate serial: 01965236C6A53D21CB4060EF34E2E92EB1AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
Manifest number: 06BC
Signing time: Sun 20 Apr 2025 08:00:43 +0000
Manifest this update: Sun 20 Apr 2025 08:00:43 +0000
Manifest next update: Mon 21 Apr 2025 08:00:43 +0000
Files and hashes: 1: BE-_fHvu77FSWiYU2c1jpCafn0o.crl (hash: I3wPZ6wU42AtYMrHsSaue2+sRB8IHkvdb4rK+gtLRLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:c6:a5:3d:21:cb:40:60:ef:34:e2:e9:2e:b1:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a
Validity
Not Before: Apr 20 08:00:43 2025 GMT
Not After : Apr 21 08:00:43 2025 GMT
Subject: CN=d8c5be850fa9b5dbf7fdf2b32a4d78bfe7e78a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:64:06:a9:a7:9d:25:9b:60:c4:be:e0:7d:04:
fe:4a:2e:f5:09:90:b3:fe:9a:a8:c4:3e:a6:77:2f:
e3:4d:51:de:4b:29:0a:20:c3:e5:64:e8:20:07:31:
d0:df:2f:f2:6f:68:44:ff:65:c2:81:31:57:7a:b8:
ab:6f:c9:ad:56:aa:6b:13:c2:5c:e4:43:2d:d4:d2:
6a:17:10:a5:bd:c6:4c:f8:55:92:67:3f:09:36:ef:
36:5a:16:1e:06:ff:9a:6e:f2:c4:9a:ee:24:fe:70:
e1:81:93:75:32:46:52:b6:77:cf:17:3e:64:9e:bb:
a1:fd:5f:8e:78:d1:8d:e9:76:aa:92:73:a1:54:c0:
ef:ea:99:b0:46:78:dd:02:44:65:7e:3f:8d:cf:cb:
63:a4:c2:b6:07:aa:bd:69:25:1e:3a:ff:2e:42:a3:
34:cf:61:c5:c3:d0:b3:25:f3:44:10:ae:0e:0c:c3:
ee:8e:e5:cf:69:ac:73:f3:fd:5f:07:ed:47:80:e3:
37:63:c4:f7:40:3b:b9:10:8e:c2:f7:08:b7:69:f8:
1d:91:ec:28:a9:16:cc:7c:b9:ae:ae:6c:c3:5e:8d:
c0:3a:f2:33:80:13:ef:90:1a:de:01:78:e2:7b:da:
79:b6:62:3e:51:fb:3d:ee:45:06:59:35:71:37:cd:
d4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C5:BE:85:0F:A9:B5:DB:F7:FD:F2:B3:2A:4D:78:BF:E7:E7:8A:0A
X509v3 Authority Key Identifier:
keyid:04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:38:ae:d3:6f:38:fa:ef:35:c5:3a:43:60:68:b7:37:00:0f:
70:45:f7:0e:e7:be:2c:27:95:84:10:d2:b5:1a:1d:80:90:c4:
1c:b3:69:77:0b:30:17:3b:f4:6a:e4:9f:6e:13:6e:79:af:e0:
0a:0e:06:9a:63:d8:71:9e:a3:4d:73:cb:9a:9a:07:6e:04:2d:
3f:4b:43:45:7d:9b:0a:0c:5d:52:ae:dd:3f:52:2b:dc:20:78:
03:10:3e:c2:c4:c9:77:7e:1e:70:60:d3:2b:15:32:3b:e6:96:
ef:94:52:a6:a6:64:20:00:93:0e:43:4e:eb:ce:e4:f8:71:a1:
0e:ee:f2:5d:16:bd:26:a9:58:f8:b9:fd:26:f7:ea:8d:d5:96:
04:81:ea:66:83:3c:a6:9e:54:73:34:a3:89:8d:cb:c6:8d:bd:
b6:3d:f2:bb:ae:df:b6:81:fa:48:9b:73:fd:c4:ff:b8:8e:0c:
35:cc:40:1f:1f:a1:c3:14:22:12:46:9b:61:62:2d:11:3a:d4:
77:18:36:d7:85:1e:00:a2:b8:3c:86:60:eb:c6:ae:5b:cb:3b:
df:e3:60:45:1d:de:e6:fa:1e:5a:c7:9e:ab:8c:a4:30:28:32:
d8:32:bf:ea:5c:90:60:4c:00:39:95:a9:5a:52:30:f7:a3:09:
76:04:df:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:11:24 2025 by rpki-client