Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
File: BBXVyVzXtY0pfUeSZ8dizekQY-I.mft (raw, json)
Hash identifier: z0khQ/DSfVDnWp1qS+s8LnMR+uuqNR0+rZ1+ebkDAjQ=
Subject key identifier: 21:9C:C5:63:08:0E:CA:6E:E7:2E:C0:CE:3E:E5:86:43:14:58:5F:0D
Authority key identifier: 04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2
Certificate issuer: /CN=0415d5c95cd7b58d297d479267c762cde91063e2
Certificate serial: 01963EB01FE2F4729A5DC874208AB88D96E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
Manifest number: 0456
Signing time: Wed 16 Apr 2025 13:00:51 +0000
Manifest this update: Wed 16 Apr 2025 13:00:51 +0000
Manifest next update: Thu 17 Apr 2025 13:00:51 +0000
Files and hashes: 1: BBXVyVzXtY0pfUeSZ8dizekQY-I.crl (hash: bw2W5gDlj8+z9Vj3FgGoZxO4YiC3Dnmlbz6OxyV+jOA=)
2: gWxtw4ZWlclsFDoK9_z8YzvsRBM.roa (hash: Q3hqFT8VcOBOjGEi5qKDmuRuKylU6JzGGHfWbsdZjmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:b0:1f:e2:f4:72:9a:5d:c8:74:20:8a:b8:8d:96:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0415d5c95cd7b58d297d479267c762cde91063e2
Validity
Not Before: Apr 16 13:00:51 2025 GMT
Not After : Apr 17 13:00:51 2025 GMT
Subject: CN=219cc563080eca6ee72ec0ce3ee5864314585f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:83:8c:2f:cc:c4:28:0c:d2:36:a7:9c:ae:5b:
3b:7a:40:29:92:54:de:18:f8:5f:cc:71:cc:28:28:
1a:18:ba:92:0a:45:1e:ae:d8:f5:5d:e5:6d:f8:36:
80:31:a8:b7:fb:39:32:8c:74:37:2f:34:44:ce:95:
4a:a0:4a:2a:58:1c:02:7f:6f:55:76:23:45:37:23:
aa:42:95:9e:e1:8a:1a:b2:ad:39:29:fa:d1:f5:6e:
d5:9a:1b:e5:46:20:39:52:08:77:35:54:1e:55:88:
c6:05:b2:67:ba:25:86:10:7f:1b:25:db:56:a3:22:
68:a4:21:6e:47:b6:a0:0e:76:a1:87:b0:77:97:ec:
e1:15:00:ff:77:44:ae:7a:78:36:be:74:94:b7:18:
12:a8:ae:16:03:28:96:7c:8f:78:c7:95:fa:b1:3f:
94:16:1d:6c:9f:4c:29:a8:de:1e:b7:f5:cc:c5:c4:
ca:2b:71:9f:e7:00:26:22:ad:39:01:ec:05:12:2e:
6a:bd:21:0a:eb:bd:07:30:1c:c9:a1:7f:68:a9:09:
98:4a:21:6c:26:e0:bc:78:3c:e5:da:e2:7d:29:88:
8c:3e:03:a9:64:46:29:97:30:e4:ed:02:4f:4c:6a:
03:83:60:33:8d:a3:e3:18:36:a4:ed:85:4b:ef:b8:
51:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9C:C5:63:08:0E:CA:6E:E7:2E:C0:CE:3E:E5:86:43:14:58:5F:0D
X509v3 Authority Key Identifier:
keyid:04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:0e:52:1b:b2:01:8b:f3:a0:89:6f:74:bd:ce:1c:29:3f:ab:
b6:af:9d:a9:93:a6:ea:4e:a8:8f:6c:b3:4f:32:03:e6:72:3f:
19:8f:98:85:d3:7c:ca:f1:03:73:23:27:4b:47:5c:b0:e2:8b:
1d:ca:8d:f5:d2:60:5b:8b:e8:b2:60:85:f8:64:49:d9:68:88:
11:93:82:4c:5d:4b:64:78:7b:78:f1:0e:34:1c:a8:bc:61:5c:
0a:ad:2f:37:7f:8a:a0:e8:51:ae:5b:8e:33:7b:8b:ab:38:e3:
7d:3d:58:6c:d2:d0:ee:18:af:ab:7c:ac:b5:5c:e3:37:15:dc:
cf:27:0f:b2:eb:67:fc:af:29:ce:ef:55:83:b6:c7:d9:38:fb:
b7:2b:16:b4:db:85:73:5f:5b:2f:e4:35:02:55:45:cc:a8:df:
ff:cc:ac:9d:49:eb:b7:85:ec:12:75:0f:29:dc:8e:b1:1c:99:
98:2b:f2:02:32:e4:fe:bc:ad:59:8a:12:06:35:72:40:ba:46:
be:2e:ad:91:d5:e7:b0:0b:69:61:1e:4a:37:a3:39:e3:40:73:
db:ec:54:01:8a:e5:2b:4a:86:9b:9d:05:5d:36:80:67:16:84:
c9:3f:db:33:7d:b2:1c:45:28:02:50:b6:6b:d3:bb:ee:88:ab:
62:26:00:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:39:52 2025 by rpki-client