Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
File: BpCRPbvu2t3pXc5HBFJihOeufMo.mft (raw, json)
Hash identifier: ZaoR6BtdU2gfGFeX8BFd9hRTkVKhzw7Dy4JQzodW23U=
Subject key identifier: 4A:C8:C2:53:22:A7:37:14:A5:8B:2E:6E:CA:5F:34:D8:DE:9A:A9:59
Authority key identifier: 06:90:91:3D:BB:EE:DA:DD:E9:5D:CE:47:04:52:62:84:E7:AE:7C:CA
Certificate issuer: /CN=0690913dbbeedadde95dce4704526284e7ae7cca
Certificate serial: 01958C96F2AC86DAAF68F721D3FB61B84713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
Manifest number: 1426
Signing time: Wed 12 Mar 2025 23:00:57 +0000
Manifest this update: Wed 12 Mar 2025 23:00:57 +0000
Manifest next update: Thu 13 Mar 2025 23:00:57 +0000
Files and hashes: 1: BpCRPbvu2t3pXc5HBFJihOeufMo.crl (hash: Y6llipmZzfb1g/MlAl8MfaeufXcQUpDUscyMbJn0QxI=)
2: Iy7lkqpbyaSDL2grrU_SdETf7DQ.roa (hash: DorRUxYefmWL1rp1az3xVIzdxI7JSTisHh4gg2RZ6eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:96:f2:ac:86:da:af:68:f7:21:d3:fb:61:b8:47:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0690913dbbeedadde95dce4704526284e7ae7cca
Validity
Not Before: Mar 12 23:00:57 2025 GMT
Not After : Mar 13 23:00:57 2025 GMT
Subject: CN=4ac8c25322a73714a58b2e6eca5f34d8de9aa959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:00:46:44:c8:6b:ee:09:19:19:31:93:33:0c:
63:12:19:65:59:b0:f3:03:52:ec:40:87:e1:5b:c5:
a7:77:63:b1:93:bc:b8:92:71:22:05:57:16:72:66:
c9:e2:4f:3a:51:b1:e2:7e:22:36:bd:a9:81:99:71:
49:45:e3:99:f0:3b:64:db:21:16:7f:59:ac:dc:ab:
ae:b2:99:99:16:37:9d:96:58:5c:56:90:39:2f:1a:
d8:9c:e8:e6:f5:43:9f:7c:54:b3:5c:b9:bf:83:1a:
82:8e:da:34:1a:b1:c5:14:1c:cc:7d:07:b4:70:2c:
f9:9d:e8:ac:d3:75:fd:76:df:9a:5c:d1:57:e9:69:
2f:b1:16:3c:9b:04:0d:eb:2a:93:f1:2b:0b:b5:ee:
6b:99:41:6e:fd:79:d7:d0:05:85:71:1f:a7:d2:2c:
f0:f1:d1:b3:2f:05:c4:9e:09:3c:7c:27:60:84:30:
08:be:15:e3:43:61:8c:29:d7:19:ca:22:e4:64:ef:
e0:1d:ff:dd:8e:78:7e:52:5e:66:53:d8:1b:9c:9b:
24:6e:01:06:c1:c7:d3:96:7d:4b:73:a5:9b:36:f4:
28:24:45:d4:8f:c3:71:9f:0d:8d:25:11:50:8f:89:
8b:79:e1:a6:cf:09:a7:7c:e9:7b:a2:f7:e6:ab:0d:
92:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C8:C2:53:22:A7:37:14:A5:8B:2E:6E:CA:5F:34:D8:DE:9A:A9:59
X509v3 Authority Key Identifier:
keyid:06:90:91:3D:BB:EE:DA:DD:E9:5D:CE:47:04:52:62:84:E7:AE:7C:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:0a:02:b9:10:f1:58:5c:73:55:11:e0:81:8d:da:b7:9b:b2:
7c:07:c9:95:c1:08:1c:e6:2e:c7:76:80:46:54:01:e7:e9:3e:
62:23:97:97:7a:c0:0b:99:ec:1d:c0:a8:ae:fe:df:23:00:d3:
09:98:ba:f3:67:e4:7d:bf:6a:a7:bf:db:a5:0e:68:f4:19:7e:
1a:03:4c:d5:2f:74:93:56:4d:65:bd:51:3e:64:96:57:57:01:
c0:18:11:9b:86:fe:40:de:c3:af:64:d5:3d:63:fb:d2:4d:28:
88:45:da:d3:6a:e3:e5:f9:e5:b1:99:c2:8a:0f:1a:5b:97:1d:
01:1c:6d:75:8b:4a:5b:57:e7:9f:46:76:93:f3:d3:dc:0a:fe:
54:5d:a8:18:7f:e7:c8:00:15:ca:09:a7:07:69:d9:b8:0e:f6:
cf:e2:6f:81:0a:9c:e6:c6:91:93:67:26:f8:fe:bd:b9:f2:9d:
83:50:b8:a5:4f:3c:9d:3f:70:96:1a:f1:f3:71:30:c4:f1:c1:
f0:a3:44:84:78:40:74:37:a1:f9:f9:2a:9c:4e:34:63:dc:7f:
47:64:85:bd:84:f2:5d:1c:cb:5c:d0:3b:22:de:bc:a7:21:1b:
f2:46:9b:89:45:09:e2:bc:b9:81:3f:45:a1:cf:39:f5:87:75:
c8:1e:fd:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:15 2025 by rpki-client