Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.mft
File: BjnEhGuIwtcOMc5MD8y0z03qVDY.mft (raw, json)
Hash identifier: K+1eCMEL6u6zZ5u1ea1WH8OQmFKrQadf7umL9H2Nih4=
Subject key identifier: 69:05:0E:18:61:74:F1:CA:73:34:96:FE:9A:1E:94:60:8F:BD:70:3C
Authority key identifier: 06:39:C4:84:6B:88:C2:D7:0E:31:CE:4C:0F:CC:B4:CF:4D:EA:54:36
Certificate issuer: /CN=0639c4846b88c2d70e31ce4c0fccb4cf4dea5436
Certificate serial: 019659F0AC8AAE66AB13C42C15A61C83719F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjnEhGuIwtcOMc5MD8y0z03qVDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.mft
Manifest number: 14FE
Signing time: Mon 21 Apr 2025 20:01:06 +0000
Manifest this update: Mon 21 Apr 2025 20:01:06 +0000
Manifest next update: Tue 22 Apr 2025 20:01:06 +0000
Files and hashes: 1: BjnEhGuIwtcOMc5MD8y0z03qVDY.crl (hash: K+0PkoMDPGn1EBm/07hH26wG3Tb9ShLRMkFePCP2DVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjnEhGuIwtcOMc5MD8y0z03qVDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:f0:ac:8a:ae:66:ab:13:c4:2c:15:a6:1c:83:71:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0639c4846b88c2d70e31ce4c0fccb4cf4dea5436
Validity
Not Before: Apr 21 20:01:06 2025 GMT
Not After : Apr 22 20:01:06 2025 GMT
Subject: CN=69050e186174f1ca733496fe9a1e94608fbd703c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:96:91:c9:df:83:87:9c:d6:a6:08:19:95:53:
79:a2:a9:d1:f5:96:42:2e:82:d5:c5:cc:bc:fa:e0:
90:a3:8c:b0:1a:4c:65:71:c6:26:cc:2c:5c:11:17:
92:6a:d8:59:13:16:2f:fa:99:12:db:98:4d:60:aa:
1d:a2:a8:77:fe:df:51:18:bb:0a:d4:e6:47:24:64:
cf:65:42:e2:1c:d1:6e:ea:21:ea:07:ed:6f:b5:cf:
7d:50:ef:c9:09:6f:5f:52:ac:1e:c6:72:b8:70:22:
5f:04:f4:e4:b5:7d:ce:8b:bd:95:a7:33:ec:53:e9:
21:ed:c8:20:13:2a:69:ae:e7:93:0c:13:16:cf:e6:
ca:d9:9f:59:4d:15:89:2f:97:2e:f3:ba:9c:3d:91:
44:4b:c9:b2:3b:db:56:77:ed:e9:7e:8d:7c:37:c4:
c7:06:c7:fa:64:42:8e:ed:f2:9f:f3:2e:aa:1c:57:
44:5a:d5:9b:b4:d8:c3:20:d7:63:65:ba:79:7c:e1:
d3:2d:ee:9e:69:af:8d:ab:88:87:4f:d0:c5:7e:ee:
c1:df:fa:b5:ab:6f:3e:89:74:b1:7a:44:b8:56:68:
39:d1:7f:db:9b:d5:e9:64:0b:3f:92:45:9c:c9:89:
e1:7f:bd:12:64:7d:4c:7f:83:6e:b6:bf:f4:0d:4e:
42:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:05:0E:18:61:74:F1:CA:73:34:96:FE:9A:1E:94:60:8F:BD:70:3C
X509v3 Authority Key Identifier:
keyid:06:39:C4:84:6B:88:C2:D7:0E:31:CE:4C:0F:CC:B4:CF:4D:EA:54:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjnEhGuIwtcOMc5MD8y0z03qVDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d4:b7:ff:63:d7:43:61:0e:42:20:2b:d0:d8:f2:36:91:31:
04:94:72:0f:41:b5:9f:cb:0e:47:f3:00:24:2c:47:29:eb:bf:
5d:fc:bd:e6:58:b9:d1:75:e4:2f:f6:f6:0a:84:04:ec:ec:d9:
da:ed:0b:ea:af:06:e9:5b:7e:3a:db:df:57:20:8f:df:a6:bb:
96:8b:ca:97:2a:3c:3b:46:4b:e4:c8:f9:b2:4f:63:aa:a1:4d:
f1:8f:63:5a:64:40:fc:96:61:32:ba:2d:a0:0c:71:ea:17:07:
d5:12:8b:77:b7:a7:8d:8c:68:57:20:b0:c7:ce:f2:cb:98:73:
a9:b2:07:f5:3a:c6:06:c6:69:f9:4e:2d:75:33:df:f4:d6:3c:
d1:fe:40:a0:ed:1e:6c:87:9c:eb:52:4d:21:ae:97:df:1b:ca:
b3:1f:19:b5:35:a7:2d:a7:75:88:ea:b8:e0:ce:a8:11:b1:d3:
a5:d2:3e:b7:cb:69:9b:80:c5:6c:3c:35:28:9f:43:8b:b4:41:
c1:d9:ca:13:6b:cd:d3:0f:3e:1b:76:b8:0d:d2:57:82:f4:20:
c1:37:2f:a9:e6:bd:e1:36:95:dc:6d:8d:f7:ea:bf:66:68:5e:
2a:93:cf:b2:33:3a:c4:fa:e4:20:f6:23:fd:1a:7e:19:56:7f:
73:6b:8a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:09:34 2025 by rpki-client