Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
File: BqTXfcLhnm-WAydMCSOmGordtJY.mft (raw, json)
Hash identifier: VhUlFm7cgw2YdNfd+l2lYptyCWlMtjy3oxrm/KzAzKc=
Subject key identifier: 9F:D7:61:40:18:39:AA:95:C6:AB:3A:89:91:9F:8F:15:A2:B8:37:EC
Authority key identifier: 06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96
Certificate issuer: /CN=06a4d77dc2e19e6f9603274c0923a61a8addb496
Certificate serial: 019644E8F3B0E7E73E1D4D5339599AF6B7EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
Manifest number: 0983
Signing time: Thu 17 Apr 2025 18:00:39 +0000
Manifest this update: Thu 17 Apr 2025 18:00:39 +0000
Manifest next update: Fri 18 Apr 2025 18:00:39 +0000
Files and hashes: 1: BqTXfcLhnm-WAydMCSOmGordtJY.crl (hash: vH/uEx19RUdqPUrwkEq6rUGgSVhMiCJ7IxQqb9F/3dE=)
2: cZHYHiGd6PIrfuySObNNa9cF_qc.roa (hash: uKrwrqOr4nsQ7JI8tFB0iH3uyz/0QpuKeozXQRhmsYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:e8:f3:b0:e7:e7:3e:1d:4d:53:39:59:9a:f6:b7:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a4d77dc2e19e6f9603274c0923a61a8addb496
Validity
Not Before: Apr 17 18:00:39 2025 GMT
Not After : Apr 18 18:00:39 2025 GMT
Subject: CN=9fd761401839aa95c6ab3a89919f8f15a2b837ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:42:c5:df:1a:2d:0c:75:4f:8a:3f:61:3d:3e:
9d:ee:f5:bc:a5:a8:23:69:60:ed:0a:9e:75:50:0f:
95:b4:ba:24:6b:6b:02:9a:73:4e:3b:7e:15:f4:66:
a8:00:af:cb:bf:74:87:a5:c7:b9:e0:a8:07:cf:13:
a2:29:40:df:6c:c1:46:15:23:90:07:5a:c0:42:49:
1d:6d:c1:cb:5f:cf:0a:08:b0:9c:09:7b:6f:e5:24:
8d:54:76:3b:fd:25:40:bf:b1:26:10:d4:35:18:a9:
05:58:36:47:93:6c:a0:73:15:dd:99:bb:8f:bf:02:
49:18:b1:8e:56:eb:d1:43:e1:0d:8f:ea:63:1d:ea:
6c:af:f9:be:5b:53:0c:ab:9e:2f:f0:1b:70:b1:04:
81:3a:35:49:b7:28:1b:63:46:35:d0:b0:6c:0a:7e:
83:9b:fd:24:e2:ba:80:ec:18:df:ae:6c:58:b4:36:
e0:d4:fa:36:cb:74:c5:76:12:5d:c2:46:ef:52:0c:
29:20:35:58:cc:c2:b9:e6:a5:fb:40:e0:e0:ab:c4:
8c:6e:d1:e8:d7:39:b9:85:27:75:fd:82:79:72:27:
0e:5a:a0:c8:9c:76:af:17:a4:b5:d0:03:c3:dc:d7:
06:45:28:98:5b:42:40:49:3a:72:66:33:83:91:bf:
b2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D7:61:40:18:39:AA:95:C6:AB:3A:89:91:9F:8F:15:A2:B8:37:EC
X509v3 Authority Key Identifier:
keyid:06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:8c:d1:44:12:3a:53:52:e9:d6:de:e0:ed:ef:73:b9:13:97:
8d:7e:12:12:51:73:31:5b:af:34:cf:26:78:bb:b5:5e:fc:b9:
9e:4d:cb:84:80:c9:7d:0e:3d:6e:80:c0:cb:e9:ba:f7:50:a1:
57:1b:e0:c8:b5:5c:09:fa:5e:25:0c:db:0e:73:3d:5e:92:39:
d4:f8:8d:ea:92:b8:7a:aa:81:46:f6:20:5e:df:55:4a:36:bd:
87:71:62:b9:6e:1b:0c:59:4a:b2:95:d7:5e:e9:f6:f2:30:aa:
43:bb:a9:6c:16:8e:f4:2a:d3:30:2a:e8:f1:ad:83:4d:a2:64:
b4:ef:c1:c6:de:81:ec:90:0b:70:61:19:8a:e5:14:f3:c1:6e:
02:78:87:56:13:d4:ca:c6:21:f5:8d:dd:5c:4b:54:39:59:bb:
6d:ea:39:ef:7a:ea:46:0d:bc:66:05:e7:d8:a1:a5:8f:b2:0d:
87:f6:4b:04:5d:21:98:c6:21:be:04:5c:8a:69:dc:ff:1e:50:
f7:b1:d5:a1:c9:a5:c6:81:88:b8:47:3e:09:29:7e:dc:5a:3d:
5a:0c:1a:6e:4e:55:37:71:c4:28:2a:c0:b5:f2:8e:4f:87:09:
a6:68:be:04:ff:8c:14:9e:f7:57:65:97:53:93:62:78:18:f3:
6d:6d:ce:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:45:33 2025 by rpki-client