Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
File: BFYL6jkur2kgircF70Bc94aEF2s.mft (raw, json)
Hash identifier: 0ioBjlBOecyyUUVs7elVB6waP0jNR8E1xze9J7gkdUE=
Subject key identifier: EF:7D:C2:11:F1:91:DE:5F:6B:99:25:D8:F5:68:97:BF:41:38:7C:0E
Authority key identifier: 04:56:0B:EA:39:2E:AF:69:20:8A:B7:05:EF:40:5C:F7:86:84:17:6B
Certificate issuer: /CN=04560bea392eaf69208ab705ef405cf78684176b
Certificate serial: 01964DB4BF86196A263FC2D1A182310CD9F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
Manifest number: 14FC
Signing time: Sat 19 Apr 2025 11:00:13 +0000
Manifest this update: Sat 19 Apr 2025 11:00:13 +0000
Manifest next update: Sun 20 Apr 2025 11:00:13 +0000
Files and hashes: 1: BFYL6jkur2kgircF70Bc94aEF2s.crl (hash: D/OFDlucxDetMPeyezfH/ZL6qIAgWEH5to8un/A9M8M=)
2: lfnWEOvFiyPQ4V6fSENJIUzxTlo.roa (hash: haGiRVIYQql14DyAfU+5XwsD5ECg69Kir2HoWSWwiFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:b4:bf:86:19:6a:26:3f:c2:d1:a1:82:31:0c:d9:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04560bea392eaf69208ab705ef405cf78684176b
Validity
Not Before: Apr 19 11:00:13 2025 GMT
Not After : Apr 20 11:00:13 2025 GMT
Subject: CN=ef7dc211f191de5f6b9925d8f56897bf41387c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:73:41:ea:d6:a1:fd:56:ca:83:1f:44:ec:e5:
87:d7:1f:49:c9:24:6f:ce:10:c4:2b:97:de:48:ab:
b5:95:10:35:ad:a1:0a:96:60:78:6b:d0:9e:ea:ab:
de:cb:05:f8:64:ee:62:28:95:ae:e7:c7:fe:21:87:
be:80:eb:49:6c:61:df:cf:15:87:b8:fa:f0:36:7e:
73:1e:f6:ab:c8:07:50:ef:f4:27:d0:41:6c:9e:c3:
ee:93:06:f5:aa:ca:f0:96:d0:58:64:41:40:90:6e:
a6:3f:76:53:3a:89:47:30:03:62:48:bf:23:db:1f:
d8:8e:3d:02:b4:f2:80:53:8d:f8:22:d5:7c:4f:70:
9c:c7:f9:c0:43:ba:15:3f:bc:cb:ec:a7:27:f1:1b:
57:ad:61:d4:2e:b7:56:74:d0:2b:48:71:4f:36:21:
c2:20:72:82:99:08:2b:eb:52:b2:a8:41:21:58:23:
61:19:7b:7f:b9:83:1e:2d:ea:fb:0b:f0:aa:72:46:
e6:03:a2:ab:e0:8f:be:20:f4:56:c9:ef:9c:22:28:
13:6e:bc:5b:33:77:f5:b0:f8:71:fd:94:8e:09:4a:
91:95:3e:94:33:d2:34:17:11:34:ab:d5:e6:30:76:
78:47:8d:fa:7c:32:53:4c:9e:c7:57:4f:3c:96:7c:
dc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7D:C2:11:F1:91:DE:5F:6B:99:25:D8:F5:68:97:BF:41:38:7C:0E
X509v3 Authority Key Identifier:
keyid:04:56:0B:EA:39:2E:AF:69:20:8A:B7:05:EF:40:5C:F7:86:84:17:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:84:a1:76:77:fc:9c:8e:c8:52:f6:46:6a:1f:aa:24:fd:a3:
56:ea:a1:c8:c0:b6:87:08:d9:ee:c5:58:79:bf:97:31:9b:d2:
34:b0:dd:1b:61:c1:49:e8:92:81:b6:90:c5:c2:a8:19:e5:6c:
36:bf:07:d4:c8:0a:ef:37:94:d0:a0:34:83:1d:38:3f:f3:48:
15:bf:92:48:18:a0:fe:5c:a2:b9:92:3a:7d:94:9e:76:5b:cc:
c3:3b:3e:2c:ec:3b:75:1f:de:41:10:da:6c:b1:63:b2:3a:e1:
16:89:34:21:7d:55:15:ba:43:4f:c4:01:de:d0:00:3c:2c:d7:
d0:92:c9:0a:f3:e8:e7:8d:33:e5:c2:44:37:ce:df:87:bf:d5:
c5:bc:63:2d:24:b5:a8:a4:23:fe:fe:b4:82:b8:fa:f5:a5:92:
36:c5:c7:b6:9d:c2:4e:8d:98:04:25:b8:4f:ba:17:06:7d:c8:
54:d2:92:1c:69:3f:6a:89:2e:da:2e:b9:0a:3c:3e:b7:37:bf:
d6:90:20:ee:5a:81:38:57:04:ef:9e:90:de:59:ed:1b:c9:25:
c4:dc:98:89:67:07:b3:d7:84:6d:71:75:eb:9f:fe:8b:cc:38:
78:d3:43:82:0a:b1:b5:18:9f:d6:a6:f5:34:f7:2b:44:86:70:
2e:85:bb:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:13:38 2025 by rpki-client