Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
File: BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft (raw, json)
Hash identifier: HB841C+xlx+jllJDb1OO7dz1nOi5pzAIZ3er7HRDql0=
Subject key identifier: A0:AC:5C:88:33:EF:0B:EC:23:FA:17:1E:B4:6A:6D:3C:40:53:58:16
Authority key identifier: 05:53:C4:33:F6:C2:25:01:9D:9C:B5:A4:33:00:12:F4:C7:7A:1F:3E
Certificate issuer: /CN=0553c433f6c225019d9cb5a4330012f4c77a1f3e
Certificate serial: 0196138F632D38823628F29E74B7E13CCA5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
Manifest number: 14D9
Signing time: Tue 08 Apr 2025 04:01:26 +0000
Manifest this update: Tue 08 Apr 2025 04:01:26 +0000
Manifest next update: Wed 09 Apr 2025 04:01:26 +0000
Files and hashes: 1: BVPEM_bCJQGdnLWkMwAS9Md6Hz4.crl (hash: ZJmA0TXUkpvfoNxZYxcN0dTdcLnUr90iT/PKqjI7Wzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:8f:63:2d:38:82:36:28:f2:9e:74:b7:e1:3c:ca:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0553c433f6c225019d9cb5a4330012f4c77a1f3e
Validity
Not Before: Apr 8 04:01:26 2025 GMT
Not After : Apr 9 04:01:26 2025 GMT
Subject: CN=a0ac5c8833ef0bec23fa171eb46a6d3c40535816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:99:36:67:1b:32:95:59:8f:d3:e0:56:69:15:
c7:2e:d7:41:8f:b7:fa:cb:6a:3a:bd:6e:28:77:88:
c5:3e:0a:0e:32:cb:40:18:00:02:73:bd:1e:21:0d:
c2:e2:8f:80:45:57:ee:d5:75:a1:dc:c5:19:4b:fd:
09:2a:49:eb:4c:b8:16:22:f7:37:ee:06:88:20:16:
0e:07:f8:29:1e:95:5b:45:f8:40:91:98:fa:06:67:
6f:81:97:46:eb:0f:0e:ae:03:8f:29:57:f6:f7:b8:
c8:7f:b2:09:34:27:ce:29:0f:33:0b:3d:b8:d1:4c:
9b:cb:5f:bb:34:4c:95:d8:dc:dc:b0:a6:5c:e7:bf:
7e:38:bb:1c:be:b6:84:4b:3b:4f:b2:b4:98:38:53:
18:79:10:50:d0:5e:e9:89:93:92:78:db:c2:00:23:
a9:1b:2e:af:7f:65:1d:3c:1f:1e:0a:22:4a:ce:0d:
02:72:79:f3:aa:ca:74:76:f8:0e:e8:b6:d1:a0:02:
7f:ca:4e:23:aa:1f:f1:6b:bc:c4:63:2e:26:6f:0c:
eb:b7:1c:93:88:1c:1f:81:ac:10:af:fc:c0:e9:0f:
95:63:4e:c3:02:32:df:00:2b:ea:29:8e:55:77:83:
77:24:6e:6e:23:9a:05:62:3f:91:87:22:90:17:82:
6d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AC:5C:88:33:EF:0B:EC:23:FA:17:1E:B4:6A:6D:3C:40:53:58:16
X509v3 Authority Key Identifier:
keyid:05:53:C4:33:F6:C2:25:01:9D:9C:B5:A4:33:00:12:F4:C7:7A:1F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:8f:6e:a8:cc:55:fb:5b:0c:c9:fb:af:96:3e:59:93:ff:ee:
25:95:92:6c:2d:18:8e:dc:31:d7:a1:16:32:2d:b0:0d:1e:a1:
88:05:a1:10:b3:54:05:5f:48:ef:bd:ef:ec:4b:0a:59:c2:5c:
73:64:dc:c9:49:67:bd:7a:46:6d:cf:c6:ee:1f:c3:7d:d5:91:
9a:c5:95:0b:64:f7:64:d5:dd:9f:d4:10:89:7f:26:71:80:07:
54:f0:8e:a1:cd:dd:9a:bc:82:f0:1a:60:6b:4d:f8:2e:4a:89:
09:4f:36:92:8c:0e:a5:62:9a:d6:05:f2:8c:93:63:fd:e9:33:
0d:0f:41:ba:7b:57:22:6c:b8:41:d7:8f:40:53:3b:c6:b1:4a:
32:3a:54:52:e3:dc:91:01:ce:1b:8c:fa:d3:df:ff:7a:65:75:
16:1e:d2:6c:a9:be:4a:03:8b:f2:93:b6:5a:48:c5:09:f9:ce:
a8:5e:c3:2a:53:d8:3f:88:05:be:24:7c:f5:ed:5e:b5:be:59:
d3:90:9e:6d:58:bf:78:3e:12:01:9f:63:01:d6:63:90:1c:9f:
19:2a:cc:66:33:d0:23:58:d7:4e:68:4d:39:c9:5c:90:38:10:
15:03:21:6a:d6:97:69:f1:3b:8b:86:29:a3:9e:0b:01:75:b1:
3c:4b:72:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:41:39 2025 by rpki-client