Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
File: BqTBjS4g22T_nbUpKzefU4t2oVE.mft (raw, json)
Hash identifier: U3Rbm/j/iR9hBYPiNs+R19ZQo0PaLl+coy++I/3p2D8=
Subject key identifier: CF:AE:F6:A1:78:62:8E:CD:0B:9C:DE:CE:97:2C:94:D6:E3:2D:EA:EA
Authority key identifier: 06:A4:C1:8D:2E:20:DB:64:FF:9D:B5:29:2B:37:9F:53:8B:76:A1:51
Certificate issuer: /CN=06a4c18d2e20db64ff9db5292b379f538b76a151
Certificate serial: 019512479D6C5899766D07614B2AF75B8E31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
Manifest number: 0B54
Signing time: Mon 17 Feb 2025 05:00:38 +0000
Manifest this update: Mon 17 Feb 2025 05:00:38 +0000
Manifest next update: Tue 18 Feb 2025 05:00:38 +0000
Files and hashes: 1: BqTBjS4g22T_nbUpKzefU4t2oVE.crl (hash: cet4s4f8kXjeOTuvquS/vyyZ7rN/vjJTQw4iYZtx9K4=)
2: wr12a9AIrcr_aNyfTvBnBd_4UPk.roa (hash: q/68eMJ+gUB4PpFkh+pkPW+TmRs5+PPrtN+mSwC3zqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:9d:6c:58:99:76:6d:07:61:4b:2a:f7:5b:8e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a4c18d2e20db64ff9db5292b379f538b76a151
Validity
Not Before: Feb 17 05:00:38 2025 GMT
Not After : Feb 18 05:00:38 2025 GMT
Subject: CN=cfaef6a178628ecd0b9cdece972c94d6e32deaea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e2:93:9f:7d:ba:36:54:24:42:c4:81:b7:3c:
c1:be:ef:f2:6c:1b:f8:61:ff:bf:51:b7:4d:7f:e3:
97:0c:3e:4c:52:b9:f9:20:14:ab:7f:97:4d:76:e9:
42:05:9a:86:f0:0b:d4:fa:7f:49:ff:18:0b:c1:5c:
ca:43:e4:e6:a1:69:f5:3f:dd:d7:bc:45:66:66:ce:
a7:0b:94:26:3b:27:78:4a:67:c4:3a:bd:b6:39:aa:
b7:a3:3d:1b:cc:15:4d:b1:6a:96:59:09:2e:0b:1f:
8b:a5:b8:b0:e0:0f:2a:a0:02:81:a1:07:fb:97:68:
bb:7c:3e:d9:e3:eb:8a:ad:40:46:25:ba:84:73:28:
24:90:fa:3f:4f:f4:04:62:3c:09:f1:9d:72:3a:0a:
94:8e:be:9c:6b:3a:b1:b4:2b:9b:b2:e6:43:e2:42:
f4:83:20:73:e9:e8:2a:f0:2a:ed:59:91:9e:78:4c:
3d:c6:46:e9:bc:2b:36:6b:e6:41:f1:a7:96:4a:0c:
1e:ec:a5:a0:83:4e:58:0e:e2:54:4e:9d:77:aa:35:
70:38:f5:1b:76:b8:17:37:78:f6:34:c1:6d:f1:58:
47:d8:2f:6d:ae:ff:b4:f4:d4:16:7e:93:6e:40:f2:
08:b8:d4:5c:ad:94:44:0a:9d:b3:56:e7:70:33:a4:
33:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:AE:F6:A1:78:62:8E:CD:0B:9C:DE:CE:97:2C:94:D6:E3:2D:EA:EA
X509v3 Authority Key Identifier:
keyid:06:A4:C1:8D:2E:20:DB:64:FF:9D:B5:29:2B:37:9F:53:8B:76:A1:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:04:a0:9a:94:6a:37:56:d4:be:65:7e:c0:1a:65:4b:5b:43:
02:5e:83:ed:ed:0d:f8:e2:68:b8:d6:b7:92:1b:d6:50:0d:e5:
76:da:cf:66:fc:c5:8b:29:77:97:f9:a2:3d:d9:16:74:01:83:
a8:65:1a:bb:b7:48:6e:8e:1d:a8:86:a0:ac:78:0d:55:ce:87:
cf:c1:db:c9:c2:e9:50:7f:cb:4b:f8:dd:63:1b:2e:55:da:61:
36:50:fd:a3:f5:ae:e1:a1:21:d3:5b:0d:6f:96:c9:6e:2d:cc:
d1:a8:76:e2:23:bc:13:88:46:82:61:36:0d:c2:75:5b:df:d6:
c4:55:b9:e3:65:b9:0d:03:53:71:aa:17:ea:d4:17:2c:54:93:
47:b2:4b:fd:7b:08:3c:cf:72:f5:5d:3a:97:37:e5:ea:43:67:
aa:7c:d7:be:96:e3:e0:5e:64:4d:0c:fd:dd:34:a2:a4:1d:50:
af:ee:e4:bb:2c:eb:8b:ac:d0:43:a8:30:d2:d8:f0:d3:5e:1d:
83:63:39:3c:4f:33:f5:67:d1:03:3f:51:ea:4a:29:42:a4:4d:
60:a1:ea:60:64:ee:05:eb:64:a1:45:86:7c:f9:0e:92:48:90:
93:0c:1c:0d:95:01:6a:87:9a:2b:0c:62:0d:fa:3a:80:df:66:
60:cd:80:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:48 2025 by rpki-client