Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
File: BpCRPbvu2t3pXc5HBFJihOeufMo.mft (raw, json)
Hash identifier: 1iJGIc5X1PYJ9okZpW0VjePIX6xJkXLg92wmWGoO7Ww=
Subject key identifier: E4:42:1A:0D:03:05:2E:7D:6C:D2:CC:64:04:95:C9:14:88:08:7C:B4
Authority key identifier: 06:90:91:3D:BB:EE:DA:DD:E9:5D:CE:47:04:52:62:84:E7:AE:7C:CA
Certificate issuer: /CN=0690913dbbeedadde95dce4704526284e7ae7cca
Certificate serial: 01965D27DD37485C9266D5C60E7879846186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
Manifest number: 1492
Signing time: Tue 22 Apr 2025 11:00:15 +0000
Manifest this update: Tue 22 Apr 2025 11:00:15 +0000
Manifest next update: Wed 23 Apr 2025 11:00:15 +0000
Files and hashes: 1: BpCRPbvu2t3pXc5HBFJihOeufMo.crl (hash: 04gGzkF91jrnqU0PWD3S59UXdIu4cFu1aYIBiFlkkNw=)
2: Iy7lkqpbyaSDL2grrU_SdETf7DQ.roa (hash: DorRUxYefmWL1rp1az3xVIzdxI7JSTisHh4gg2RZ6eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 11:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:27:dd:37:48:5c:92:66:d5:c6:0e:78:79:84:61:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0690913dbbeedadde95dce4704526284e7ae7cca
Validity
Not Before: Apr 22 11:00:15 2025 GMT
Not After : Apr 23 11:00:15 2025 GMT
Subject: CN=e4421a0d03052e7d6cd2cc640495c91488087cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:52:12:3e:66:a6:68:57:a6:6c:90:8d:95:9f:
50:41:60:fb:d9:74:a0:29:eb:01:73:ac:45:e9:a5:
2c:bb:6e:7c:97:f0:2e:a2:83:3f:41:3e:0d:e4:b8:
ef:63:84:9e:2d:67:c8:c0:99:37:1f:97:ee:06:ad:
b5:c5:ff:d0:98:08:f2:ee:1a:12:59:da:54:cb:f5:
ce:22:1f:2b:a4:c4:fe:93:a3:ba:a5:4b:8a:33:92:
33:e2:45:8e:eb:b8:6a:60:22:3e:51:95:df:ee:6f:
a6:63:b7:77:38:9a:f1:0c:5b:10:ef:4a:8f:f9:1e:
7b:42:48:56:4a:c9:b8:2c:59:60:fb:c5:e3:3e:d9:
10:d7:aa:12:41:f6:cd:c1:d9:92:65:c8:1c:5b:c1:
69:6e:4a:86:ba:e4:da:4b:b7:a6:d0:f7:cc:25:69:
82:67:c8:5b:54:2a:77:52:18:7e:c6:8b:36:4e:ca:
b7:03:81:c5:b2:12:57:3c:b7:d7:24:aa:0f:c1:f7:
36:e1:83:08:95:ce:80:37:99:db:78:86:5e:bf:c2:
ce:90:d6:fe:9f:ce:ca:9c:3d:c6:d8:7f:03:27:72:
d4:e7:1f:ff:97:df:24:09:0f:ca:92:34:8b:4f:61:
b0:aa:82:d7:87:5a:ec:51:4d:de:c6:aa:35:8d:6d:
63:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:42:1A:0D:03:05:2E:7D:6C:D2:CC:64:04:95:C9:14:88:08:7C:B4
X509v3 Authority Key Identifier:
keyid:06:90:91:3D:BB:EE:DA:DD:E9:5D:CE:47:04:52:62:84:E7:AE:7C:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:4d:65:83:11:7b:a3:e8:70:1c:45:48:03:e5:4d:49:27:d4:
78:61:7a:68:b1:7d:66:28:3f:58:0b:0e:36:b4:fa:52:9e:1d:
e2:d0:16:10:02:09:c4:ae:67:44:ae:07:2e:1b:a6:4d:c5:37:
20:39:d3:55:ec:ab:4b:2f:50:fd:1f:46:dd:0c:b1:a1:86:6e:
0c:ee:ca:1d:e2:37:a7:d1:15:ed:5a:c8:df:8d:e1:bb:24:be:
20:4e:dd:23:8d:2a:db:c0:74:0d:18:9d:81:f1:a7:21:40:98:
8b:c3:47:97:1a:bc:9c:55:3a:09:1c:42:7a:68:4d:e5:cd:bb:
1c:ab:e4:b5:fa:09:dd:b6:0d:ab:ed:fd:b6:02:77:23:15:13:
7f:55:54:40:db:04:a8:1a:98:22:b8:25:ce:45:9e:3f:81:cb:
17:ae:72:ae:8e:52:1b:6c:92:f1:ab:86:a7:c7:4a:72:b9:28:
73:d4:ef:ce:76:21:1a:61:85:63:40:65:ec:98:4d:05:73:8e:
4e:20:e3:4b:54:43:d4:15:e6:43:7c:18:b0:4c:54:11:da:70:
37:34:33:a1:55:85:cd:e4:f1:57:8d:e9:ac:2d:de:72:40:4d:
b7:0c:74:d5:b0:54:53:fb:2d:bb:75:10:cd:69:f0:25:e6:fe:
0e:d8:e9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:36:43 2025 by rpki-client