Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.mft
File: BjnEhGuIwtcOMc5MD8y0z03qVDY.mft (raw, json)
Hash identifier: vMyDgJD2a2nEkBc4QKQhlSV2d1f9/zlDcgGjreNgvUk=
Subject key identifier: 50:C2:AC:07:5A:CC:78:28:0C:43:EA:F8:B8:DF:17:70:3C:F7:CB:C0
Authority key identifier: 06:39:C4:84:6B:88:C2:D7:0E:31:CE:4C:0F:CC:B4:CF:4D:EA:54:36
Certificate issuer: /CN=0639c4846b88c2d70e31ce4c0fccb4cf4dea5436
Certificate serial: 019760949B001ECD0558F86DB6053A0AADC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjnEhGuIwtcOMc5MD8y0z03qVDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.mft
Manifest number: 1586
Signing time: Wed 11 Jun 2025 20:00:40 +0000
Manifest this update: Wed 11 Jun 2025 20:00:40 +0000
Manifest next update: Thu 12 Jun 2025 20:00:40 +0000
Files and hashes: 1: BjnEhGuIwtcOMc5MD8y0z03qVDY.crl (hash: 62RYLHhMe7fLG8OjjUS29A3wUqV97JC0j7EV8hLbSrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjnEhGuIwtcOMc5MD8y0z03qVDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 20:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:94:9b:00:1e:cd:05:58:f8:6d:b6:05:3a:0a:ad:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0639c4846b88c2d70e31ce4c0fccb4cf4dea5436
Validity
Not Before: Jun 11 20:00:40 2025 GMT
Not After : Jun 12 20:00:40 2025 GMT
Subject: CN=50c2ac075acc78280c43eaf8b8df17703cf7cbc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:59:d0:22:c1:7f:32:3d:84:36:ab:d5:f6:1f:
a1:d4:76:01:96:9c:3d:3e:3c:76:44:37:7f:fe:3a:
b2:9c:10:b2:c8:ca:9c:6a:87:31:05:cc:48:ea:b2:
03:37:b3:0f:e7:df:16:0a:d3:57:0e:39:68:a4:c5:
87:23:ba:8c:1c:58:ba:b4:44:0f:72:f5:18:bd:6d:
e7:18:f8:d4:54:06:62:68:93:9a:42:fe:a0:87:45:
65:df:cc:07:87:93:6b:7a:2c:68:ec:4e:eb:55:cb:
19:88:3b:d4:72:c4:23:4e:b1:52:84:a2:85:cb:d8:
86:a2:48:a4:29:fd:86:1e:37:ca:06:ee:ce:79:2f:
b3:47:0a:f5:01:dd:33:ec:a6:93:3b:72:2e:8d:d7:
c5:01:79:01:d4:fa:8f:ae:c5:80:a4:5d:4f:d1:d7:
ed:d4:66:3c:89:d2:42:f7:7e:22:2d:1d:a5:56:0b:
66:d1:74:35:9a:5f:4a:6c:7f:d4:b0:c6:78:bf:78:
90:5f:c8:a0:81:e2:d5:d1:b8:12:c4:ab:20:93:17:
82:4b:42:eb:73:e8:db:c7:a9:e5:f1:30:2c:2e:c7:
41:4b:50:3c:a6:24:5f:8b:15:e8:79:8a:bb:1e:fd:
9c:7f:c5:13:66:95:a8:52:45:59:9d:41:9e:6f:63:
49:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C2:AC:07:5A:CC:78:28:0C:43:EA:F8:B8:DF:17:70:3C:F7:CB:C0
X509v3 Authority Key Identifier:
keyid:06:39:C4:84:6B:88:C2:D7:0E:31:CE:4C:0F:CC:B4:CF:4D:EA:54:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjnEhGuIwtcOMc5MD8y0z03qVDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ea:79:e5:4a:9f:1d:64:1f:95:69:97:e0:cd:fe:a5:42:00:
21:2b:11:54:cf:6e:d2:97:d8:7b:d2:fe:8a:fe:b1:f8:83:87:
15:09:13:bc:ba:bb:b6:76:ee:cf:20:4f:70:5b:b1:ca:0b:84:
fb:99:a7:dc:90:25:b0:78:8b:ec:ed:16:d2:de:c0:48:f1:87:
4b:0f:b0:6b:f9:26:62:7f:98:c7:80:1d:f6:3c:65:f8:3e:84:
36:0c:ed:b7:59:67:bd:1a:9b:85:d8:29:3e:25:71:fb:7a:85:
41:1f:2b:c7:8b:5b:42:16:2b:8c:a3:0c:de:e5:5e:51:58:9b:
f4:63:23:37:8c:ba:f3:44:d2:33:05:96:79:ad:46:fd:0e:6a:
87:f6:11:d1:1e:ed:5e:9d:7d:f4:83:63:0f:c2:cf:16:86:ce:
fe:dc:bc:fc:a6:04:0f:21:53:7a:a3:4f:ac:9d:46:56:a1:66:
0c:5d:a1:41:c3:d5:7b:ed:18:a9:06:68:5e:98:85:18:c0:a5:
7e:90:b3:7f:0a:2c:0a:5f:ea:6d:3d:df:95:3f:33:af:de:72:
aa:0d:03:9d:3f:7f:a2:a0:8d:82:d8:bf:b1:88:eb:9c:41:58:
89:c4:9a:2a:ae:24:b3:2f:4f:78:88:61:97:fc:95:eb:0d:cd:
f9:43:98:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 06:01:09 2025 by rpki-client