Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
File: bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft (raw, json)
Hash identifier: hZ9rIBdiJfXgJHhs/Xxhe/K1Nt1U9Ol8m+Bj7UzbmmI=
Subject key identifier: BD:A8:73:70:D0:54:53:EF:BA:D5:CB:F2:A6:AC:08:63:57:87:52:97
Authority key identifier: 6D:FB:07:FE:BD:5D:00:A9:23:AE:39:0A:41:90:FE:56:44:CD:D4:F6
Certificate issuer: /CN=6dfb07febd5d00a923ae390a4190fe5644cdd4f6
Certificate serial: 01965425176AB01948143018FB12DA2EC1C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
Manifest number: 0F7E
Signing time: Sun 20 Apr 2025 17:00:39 +0000
Manifest this update: Sun 20 Apr 2025 17:00:39 +0000
Manifest next update: Mon 21 Apr 2025 17:00:39 +0000
Files and hashes: 1: bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl (hash: caKPAo9/ZOEtDuel9cV6jWIomTBPbwy8gh53uAv/Gac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:17:6a:b0:19:48:14:30:18:fb:12:da:2e:c1:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfb07febd5d00a923ae390a4190fe5644cdd4f6
Validity
Not Before: Apr 20 17:00:39 2025 GMT
Not After : Apr 21 17:00:39 2025 GMT
Subject: CN=bda87370d05453efbad5cbf2a6ac086357875297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:21:86:93:22:ed:4d:80:df:a0:bd:70:d7:33:
ac:16:27:fb:5b:e2:d2:fb:13:2b:3e:de:3c:e4:4e:
80:b7:e8:6f:ed:02:32:9e:8f:6f:48:5e:27:bb:91:
e8:fb:c6:63:18:67:7e:80:b9:d2:f5:c3:e3:86:31:
14:ab:fb:f5:e6:33:46:4d:97:0c:25:dd:81:5d:cf:
05:5c:00:d6:6e:2b:00:04:3a:84:2a:53:db:f4:56:
3d:42:20:57:f3:b8:b1:3b:80:23:20:11:0b:65:e2:
d5:8d:92:61:0e:27:82:3d:6d:7d:c6:61:f6:18:ba:
42:77:97:cc:fe:fc:27:60:28:1a:0b:59:14:76:e6:
12:1c:47:e3:b5:3b:c2:73:28:c1:a3:aa:3e:3d:61:
0e:30:e3:3a:af:bf:5d:0c:91:ce:0c:59:49:18:97:
1e:2e:50:54:0f:0b:28:84:63:8b:1c:eb:df:ff:95:
79:86:42:1b:e3:93:ba:41:e4:4b:d6:b5:e8:de:13:
a6:ef:2b:ff:a6:83:46:f5:a3:e5:9e:f0:9d:6b:3f:
c9:46:1f:6c:c3:96:40:a4:ab:00:f8:b1:a2:be:2c:
65:57:68:67:fc:e1:1b:f2:d5:99:cc:3d:e4:e1:d3:
8f:32:2e:cd:0e:07:4c:3b:5c:02:db:93:9c:99:48:
8f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A8:73:70:D0:54:53:EF:BA:D5:CB:F2:A6:AC:08:63:57:87:52:97
X509v3 Authority Key Identifier:
keyid:6D:FB:07:FE:BD:5D:00:A9:23:AE:39:0A:41:90:FE:56:44:CD:D4:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:00:fe:95:72:a6:f0:b3:f9:db:05:84:62:2b:bf:38:9c:8f:
c5:4b:92:43:55:5f:ab:dd:97:97:b6:d6:d5:f7:83:01:dc:48:
b9:02:a1:61:f6:72:32:ca:65:42:9b:fd:b4:6c:53:57:b0:d8:
be:22:33:e1:4e:ca:35:68:15:0e:1b:fa:03:15:2c:ef:6e:30:
5b:9c:5a:02:63:a8:de:23:c7:7c:91:0a:d7:50:7d:44:30:a6:
7f:2e:fd:8e:7e:7f:7b:c2:73:b1:4b:2b:f1:ff:03:ec:46:9d:
ee:34:b7:4e:f4:65:dd:29:9d:94:2f:a3:6d:49:4a:5c:35:b9:
ac:0e:8b:26:3e:29:c6:1f:1c:a9:53:5c:e1:67:59:f9:20:39:
a4:0e:cf:32:26:67:0e:48:8f:98:02:da:f8:57:36:60:c8:91:
f8:9e:8f:8f:a4:16:62:73:35:1f:52:79:3f:ed:ce:45:6e:5e:
3a:91:a0:6f:67:51:67:0f:d1:05:05:f2:d7:7b:49:2a:ab:5a:
f4:f7:75:7f:81:ea:7a:f4:11:73:33:3d:2e:63:18:4d:64:9a:
71:d3:3b:9e:8d:04:6d:eb:73:b7:cd:cf:24:71:1e:e4:75:b9:
42:c0:6c:70:24:5f:7e:be:28:ec:dd:c7:26:2b:45:89:d2:fb:
02:67:17:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:31:41 2025 by rpki-client