Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.mft
File: BcojF2aaRo1QmoqhkGvvp1v5wgE.mft (raw, json)
Hash identifier: cvEdsVtTDf+fvqcjUJcQjgk1fMgvlOiKbGf11Z7WX0g=
Subject key identifier: FC:FD:60:D4:02:0F:6D:ED:C7:9F:75:F3:AA:F8:0E:A5:A9:59:E7:FF
Authority key identifier: 05:CA:23:17:66:9A:46:8D:50:9A:8A:A1:90:6B:EF:A7:5B:F9:C2:01
Certificate issuer: /CN=05ca2317669a468d509a8aa1906befa75bf9c201
Certificate serial: 0197488CACC941FA9737C113714FD813EFD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcojF2aaRo1QmoqhkGvvp1v5wgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.mft
Manifest number: 0CB4
Signing time: Sat 07 Jun 2025 04:01:08 +0000
Manifest this update: Sat 07 Jun 2025 04:01:08 +0000
Manifest next update: Sun 08 Jun 2025 04:01:08 +0000
Files and hashes: 1: BcojF2aaRo1QmoqhkGvvp1v5wgE.crl (hash: 4riK5mISNJKxFUyggcKotsjlcfWgfriLDz5hcKWIUtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BcojF2aaRo1QmoqhkGvvp1v5wgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:ac:c9:41:fa:97:37:c1:13:71:4f:d8:13:ef:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ca2317669a468d509a8aa1906befa75bf9c201
Validity
Not Before: Jun 7 04:01:08 2025 GMT
Not After : Jun 8 04:01:08 2025 GMT
Subject: CN=fcfd60d4020f6dedc79f75f3aaf80ea5a959e7ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9c:45:73:d6:b5:c3:c8:6f:8f:da:44:d8:49:
58:0e:7c:3c:c8:b9:58:d8:55:e7:e9:ae:e2:ad:01:
ef:ca:70:fc:8f:3d:fa:ed:4d:3d:45:de:db:fb:bf:
4b:7b:62:12:cd:48:01:cc:88:07:db:42:ff:6f:d2:
a7:2c:31:91:2d:de:dc:1e:d3:87:be:57:03:b1:36:
9d:7b:af:38:27:1b:5e:f2:46:a4:08:62:cb:1f:41:
ee:79:25:eb:a5:d4:ae:1b:71:64:59:51:41:13:c4:
27:ca:b0:65:69:12:63:2d:9b:1c:ee:30:7e:e2:0a:
43:69:8f:b7:dd:dd:97:55:59:5f:56:d1:f9:b2:a0:
ef:ac:23:b5:62:bf:35:17:b5:85:da:47:93:a6:0a:
69:b4:fa:37:cd:3a:fc:88:32:34:60:98:42:4e:ff:
83:64:50:b9:b4:6e:5f:22:a6:20:fe:5d:e5:1a:f9:
ba:2d:78:2d:09:b0:31:06:0f:84:47:12:ca:53:6f:
14:cf:d6:e2:2d:e3:e0:6b:4b:e4:c2:02:6c:8e:d7:
e1:1a:61:52:0a:07:fd:e3:2f:1b:6b:2c:7b:5e:fd:
62:e5:9d:19:20:67:4a:b0:39:81:61:b7:90:7d:fc:
49:80:ef:26:d6:4b:16:65:8a:19:d8:bc:6d:6c:c7:
b7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FD:60:D4:02:0F:6D:ED:C7:9F:75:F3:AA:F8:0E:A5:A9:59:E7:FF
X509v3 Authority Key Identifier:
keyid:05:CA:23:17:66:9A:46:8D:50:9A:8A:A1:90:6B:EF:A7:5B:F9:C2:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcojF2aaRo1QmoqhkGvvp1v5wgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:18:d8:a7:63:66:2a:a9:7e:a4:3b:8e:40:2c:9e:0e:88:9f:
6d:92:96:d2:7c:f1:e5:c7:56:57:d5:e5:c2:d0:25:a0:dd:b6:
31:12:50:aa:c2:fe:cb:72:3a:4a:af:5b:f4:00:ed:23:f5:37:
dc:c7:20:ee:73:c3:3b:0c:0d:1d:8d:68:84:e1:6a:ff:12:2e:
8a:02:4d:45:94:e9:ef:8f:81:00:f9:2c:a2:60:f7:cf:b3:d2:
b2:d2:cc:28:53:13:29:92:ff:2a:87:37:84:9e:ff:d8:d4:7c:
91:68:d4:ff:21:65:3a:77:9a:77:ee:b0:11:8b:a1:4c:63:4f:
e5:9e:97:98:0a:0b:70:94:a9:98:3e:7f:76:65:dc:5b:e3:84:
83:51:75:e2:8e:90:d8:63:ed:f7:fe:e3:43:61:73:a9:be:ed:
3e:d5:fd:19:cd:94:9e:ab:b1:3f:de:b5:02:08:3e:9b:a2:f2:
1e:9b:3f:de:96:90:f7:24:b3:ee:36:30:00:2e:f2:ca:f0:05:
51:a1:d7:a1:81:3c:18:b7:f1:77:d4:37:85:0a:b1:51:e0:6c:
e8:3c:43:dc:4d:d9:08:ac:fe:7e:2c:1c:0f:d3:74:ce:d0:fa:
8d:1e:4d:4c:ce:fe:d6:c3:88:9c:f0:30:e8:40:7b:f5:8c:5b:
50:c3:10:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:46:45 2025 by rpki-client