Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
File: BYc3rBvKjBQos5aVRvGXTwaU5AA.mft (raw, json)
Hash identifier: e4Oa8iht98RZHSejVFFViDB/7hqUw+eeh18o7Rxy4Oc=
Subject key identifier: 7D:76:12:13:F4:AE:92:71:9D:59:42:09:19:57:F2:40:10:DE:64:C6
Authority key identifier: 05:87:37:AC:1B:CA:8C:14:28:B3:96:95:46:F1:97:4F:06:94:E4:00
Certificate issuer: /CN=058737ac1bca8c1428b3969546f1974f0694e400
Certificate serial: 01964A0EF6BF745B1FF4334C67AEB9B63417
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
Manifest number: 0F9B
Signing time: Fri 18 Apr 2025 18:00:16 +0000
Manifest this update: Fri 18 Apr 2025 18:00:16 +0000
Manifest next update: Sat 19 Apr 2025 18:00:16 +0000
Files and hashes: 1: BYc3rBvKjBQos5aVRvGXTwaU5AA.crl (hash: jE73qzbZp2iOHx7aLbq2lBc8bIWUYJbwl0mlE0JvlCE=)
2: S34eKn41CbeHBs9JztR1Ea-qnWM.roa (hash: ivl9YTuqSiUvueW/pRMX9Z40ugXy2JCZOHJUmHTZ+5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 18:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:0e:f6:bf:74:5b:1f:f4:33:4c:67:ae:b9:b6:34:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=058737ac1bca8c1428b3969546f1974f0694e400
Validity
Not Before: Apr 18 18:00:16 2025 GMT
Not After : Apr 19 18:00:16 2025 GMT
Subject: CN=7d761213f4ae92719d5942091957f24010de64c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f9:58:9c:eb:2b:f4:c3:25:53:6d:fd:18:a7:
f5:b6:32:cd:09:e0:95:ee:9e:08:e7:c8:0d:1f:fd:
e7:03:44:32:8c:e6:73:9a:a8:a5:37:48:1c:93:a3:
5c:21:a2:2f:ec:4b:5b:47:2f:3c:ae:d8:fe:52:76:
bb:f7:c9:8a:52:e2:e5:ef:5b:70:9f:da:26:f6:2f:
ec:e9:91:bd:05:65:f5:a7:06:23:19:65:74:b0:af:
73:ac:b5:5f:0f:2f:07:66:d7:ef:13:2e:88:8a:3a:
10:eb:0f:42:08:e9:c8:c1:46:6d:aa:dd:64:7e:44:
95:8a:42:4d:8a:54:76:c9:9b:32:8d:8e:a7:8e:e2:
82:4d:33:e9:de:3d:48:a0:a2:35:6a:61:1d:9a:3b:
fe:b4:b1:b0:1d:76:d0:59:db:b7:86:53:79:ee:54:
1f:20:20:5c:24:32:27:0f:69:ed:3e:31:47:cd:59:
57:97:b9:d8:07:66:af:36:e1:df:d4:f7:65:92:42:
bf:2c:46:a7:b0:61:37:66:b5:f4:9a:9b:0c:d1:a1:
0f:81:1f:58:bb:13:27:3f:08:30:ba:43:b1:6b:0e:
b0:c4:5d:fe:bb:5c:d7:2e:da:f9:54:c3:b7:15:47:
a4:7a:3f:9c:4d:fe:48:d7:41:9b:9d:fc:66:9d:9f:
b6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:76:12:13:F4:AE:92:71:9D:59:42:09:19:57:F2:40:10:DE:64:C6
X509v3 Authority Key Identifier:
keyid:05:87:37:AC:1B:CA:8C:14:28:B3:96:95:46:F1:97:4F:06:94:E4:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:18:a7:5f:c3:bd:cc:07:40:8d:c8:f0:d6:d7:e0:3c:57:06:
16:e4:cb:cc:bc:7e:11:9d:07:75:2b:1a:f0:86:4a:6e:e1:18:
dd:c1:7a:6d:2d:ca:3e:5b:7e:0c:21:d8:6e:30:6a:d4:fe:48:
3e:5e:2b:27:8c:cd:27:3a:af:d4:d3:6a:82:66:bc:fc:34:af:
ed:99:31:94:af:61:68:9d:e8:93:00:5f:e1:80:af:05:41:5a:
90:10:66:3a:c3:a5:1e:08:28:b0:1c:58:de:70:e1:fa:6b:0d:
a0:d1:df:b4:4f:20:9a:71:13:0c:20:94:9a:5c:86:15:f8:37:
ed:23:c0:39:fa:77:45:46:21:ea:d1:ca:6c:fa:69:cf:97:41:
60:f8:41:04:48:fa:61:7c:07:0f:bb:57:64:67:c3:c2:b6:ba:
be:67:cf:96:33:e1:97:c8:b8:70:ce:7d:93:98:34:ca:d9:4f:
4a:f2:74:30:db:eb:60:76:cc:69:77:05:0d:5a:0a:d4:73:35:
cd:eb:22:3d:55:fd:5f:63:6c:c7:93:0e:4a:c3:52:87:36:49:
65:76:0d:b1:d5:62:14:d8:c9:d4:49:7c:4c:e7:57:48:6c:61:
d1:c2:38:0c:93:19:1e:2e:28:29:19:76:16:c0:1a:21:8b:3b:
3b:ef:28:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:34:12 2025 by rpki-client