Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.mft
File: BjnEhGuIwtcOMc5MD8y0z03qVDY.mft (raw, json)
Hash identifier: c80DFE0gekqRkwmB0/YTitmohavAuMYaPWHFJG39K9E=
Subject key identifier: 0B:71:D8:17:86:B3:06:8E:8B:1E:65:85:D8:CE:C0:43:EA:19:16:14
Authority key identifier: 06:39:C4:84:6B:88:C2:D7:0E:31:CE:4C:0F:CC:B4:CF:4D:EA:54:36
Certificate issuer: /CN=0639c4846b88c2d70e31ce4c0fccb4cf4dea5436
Certificate serial: 019754FE20386FB53415ECF6975AE40B66A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjnEhGuIwtcOMc5MD8y0z03qVDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.mft
Manifest number: 1580
Signing time: Mon 09 Jun 2025 14:00:29 +0000
Manifest this update: Mon 09 Jun 2025 14:00:29 +0000
Manifest next update: Tue 10 Jun 2025 14:00:29 +0000
Files and hashes: 1: BjnEhGuIwtcOMc5MD8y0z03qVDY.crl (hash: wwHxQo8BaSbrd1fi7FxKR3ZakxAPfUtyU+1ws9MrZFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjnEhGuIwtcOMc5MD8y0z03qVDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:fe:20:38:6f:b5:34:15:ec:f6:97:5a:e4:0b:66:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0639c4846b88c2d70e31ce4c0fccb4cf4dea5436
Validity
Not Before: Jun 9 14:00:29 2025 GMT
Not After : Jun 10 14:00:29 2025 GMT
Subject: CN=0b71d81786b3068e8b1e6585d8cec043ea191614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0a:a7:f8:81:25:26:98:1a:75:c5:56:65:55:
fd:d9:8f:04:c4:c4:c9:61:3f:07:07:7f:59:e4:21:
4c:87:29:f1:b2:cd:70:dc:9b:13:75:de:28:97:2f:
84:4b:72:f9:c4:e2:fa:c0:ce:e4:86:db:70:2b:82:
6d:33:2f:69:60:b0:08:1f:a3:dd:2e:24:58:3f:08:
9a:bc:78:af:50:9f:c5:b3:13:99:ca:79:01:d7:e5:
2d:30:18:35:23:2d:35:7d:ee:67:8c:52:79:4f:ea:
00:3d:73:35:26:94:3a:3d:d8:7f:60:26:7b:b6:aa:
9a:42:8f:b2:59:e3:d5:48:0b:94:3c:f6:be:ba:ba:
33:28:a4:e6:71:a0:f4:72:25:fc:ae:1a:96:60:56:
7d:0b:71:1c:47:85:31:61:4e:c3:af:c5:37:84:3a:
8a:0d:64:f5:26:c5:5d:65:93:c6:e2:e8:f7:c2:34:
6f:14:f2:00:f7:7a:fc:60:17:20:d0:ca:5e:b4:f5:
13:51:bc:36:f3:21:5c:9a:e4:3f:5d:3c:7f:77:24:
22:47:c0:54:12:43:cd:b9:f9:83:52:be:c4:77:cc:
31:6c:b1:8c:4b:67:88:44:51:0d:10:7b:e1:f2:f8:
a2:e5:55:6b:7b:83:44:c4:7a:02:cd:6b:7f:e6:c5:
25:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:71:D8:17:86:B3:06:8E:8B:1E:65:85:D8:CE:C0:43:EA:19:16:14
X509v3 Authority Key Identifier:
keyid:06:39:C4:84:6B:88:C2:D7:0E:31:CE:4C:0F:CC:B4:CF:4D:EA:54:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjnEhGuIwtcOMc5MD8y0z03qVDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:58:28:17:93:d2:9d:94:2c:af:e1:04:48:d8:29:f8:73:0a:
99:a1:1c:9c:53:be:70:45:ca:e8:80:e4:26:fc:17:b2:8b:b7:
3c:17:4e:9c:2b:9a:7a:de:ba:a5:1b:c1:3f:e4:4e:20:61:f1:
01:d9:df:2a:51:f6:58:e6:f1:8d:be:eb:df:61:99:c3:f2:2a:
35:a6:c4:48:e5:5a:78:ae:d5:c7:c6:fd:cc:55:e4:a8:10:b6:
87:c2:de:6a:5a:52:02:19:15:4c:6f:02:80:72:28:19:3a:99:
fa:b5:89:27:e4:d1:dd:a8:ea:c7:62:47:c8:3b:c8:34:12:55:
0c:fc:b9:96:24:ce:34:d2:03:9c:79:97:01:22:67:14:78:93:
bf:02:6b:e7:f9:5c:27:ab:8d:3d:f3:a5:44:b4:5b:3b:1f:84:
0e:79:6a:7b:b6:68:fa:f1:22:ad:3c:9a:0b:2f:a0:3d:82:4e:
3c:0e:50:67:41:cb:92:46:df:55:b5:ed:5f:12:aa:59:8a:23:
7d:20:1b:98:9c:1a:23:ff:14:f0:db:fe:54:44:e3:a2:cd:ef:
88:f3:39:2c:37:3a:2e:60:6c:3e:ca:40:46:60:9f:8d:8b:d5:
5a:67:a7:52:ef:5e:7e:89:17:e7:aa:c3:85:43:93:af:72:70:
9b:14:d9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:10:45 2025 by rpki-client