Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
File: BBnxl_FzEXt1MfrLmmOJainZqaA.mft (raw, json)
Hash identifier: pY3f56wHu8PohiYg1GdlNvffHdnBE39+mJqTlkM9SdA=
Subject key identifier: 70:09:6F:62:BE:94:7F:CA:ED:BF:10:24:E5:A7:E8:90:42:67:FC:10
Authority key identifier: 04:19:F1:97:F1:73:11:7B:75:31:FA:CB:9A:63:89:6A:29:D9:A9:A0
Certificate issuer: /CN=0419f197f173117b7531facb9a63896a29d9a9a0
Certificate serial: 01961132DD97CD20D95D593D7A569922AF63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
Manifest number: 0C02
Signing time: Mon 07 Apr 2025 17:01:08 +0000
Manifest this update: Mon 07 Apr 2025 17:01:08 +0000
Manifest next update: Tue 08 Apr 2025 17:01:08 +0000
Files and hashes: 1: 7nvwMdfL4Uh8JLIW4K1RfoR3-vw.roa (hash: CcK4SjzWgLuNPuqtdp0Teo6txyqnY3Mzipf8+pbRh/M=)
2: BBnxl_FzEXt1MfrLmmOJainZqaA.crl (hash: 9Oqp8J0DkRJtOgJ8yNtM8+mWSVM1yj89jA+pZA9vxAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:32:dd:97:cd:20:d9:5d:59:3d:7a:56:99:22:af:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0419f197f173117b7531facb9a63896a29d9a9a0
Validity
Not Before: Apr 7 17:01:08 2025 GMT
Not After : Apr 8 17:01:08 2025 GMT
Subject: CN=70096f62be947fcaedbf1024e5a7e8904267fc10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:aa:d6:4f:2b:72:eb:3a:bd:35:d5:f5:44:c5:
22:e5:74:88:fd:54:66:00:a9:c2:7c:be:ff:db:28:
9b:f3:fe:cc:07:f9:b6:be:ac:7a:53:1c:8a:df:8d:
c1:19:a5:2c:31:73:39:99:41:06:f0:f0:f4:7f:5d:
30:5f:01:5a:52:cb:8f:17:8e:a2:81:c3:12:f9:12:
f6:10:ce:e7:d4:03:56:e2:74:c1:11:ae:b0:98:4b:
39:93:24:9b:e2:d0:d1:dd:bb:cb:b7:65:2f:3c:c7:
07:53:15:71:47:83:b5:4e:88:70:4f:84:d2:f4:7d:
17:2e:b2:be:e0:76:f7:63:92:4d:30:27:a8:eb:27:
22:6e:2e:0a:e5:69:70:c1:f3:36:09:4c:eb:03:c6:
c0:b3:98:4d:8e:0e:5c:ef:ff:06:d9:94:81:7d:19:
70:e0:d9:9c:55:5f:f8:a3:bb:2b:32:0b:f4:7f:a5:
d9:67:64:13:ce:2e:6f:66:ac:59:c7:e6:95:8d:4e:
9a:30:3e:ef:5b:90:99:72:39:c0:ee:81:f4:9a:c0:
90:f0:9c:50:8c:73:bf:48:fb:e1:4c:9e:cc:be:7e:
89:89:a6:cc:01:eb:96:d1:32:73:9e:72:ab:e1:6b:
20:b4:d8:b7:ca:bd:c1:e9:f9:dc:e6:8c:8c:25:0f:
4b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:09:6F:62:BE:94:7F:CA:ED:BF:10:24:E5:A7:E8:90:42:67:FC:10
X509v3 Authority Key Identifier:
keyid:04:19:F1:97:F1:73:11:7B:75:31:FA:CB:9A:63:89:6A:29:D9:A9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:0b:9b:00:44:d0:d3:c1:7a:7c:c5:61:f2:e3:c4:f2:01:64:
3f:69:e2:f3:82:aa:32:cd:17:4b:11:dd:7f:7a:ea:f7:af:28:
af:92:92:45:ca:46:32:63:44:bb:da:b8:9d:f2:66:e2:af:59:
17:90:94:8f:ac:0b:35:a8:01:9e:97:c1:2c:f4:96:87:c7:a5:
46:2e:a8:3e:44:4b:b7:05:63:20:b7:0c:53:76:e4:4b:66:e1:
67:b1:01:32:0e:f9:38:ac:18:c2:fd:31:ef:8c:b3:cf:75:89:
d1:3e:90:3c:66:82:dd:cb:d6:55:09:5a:b4:aa:6d:97:74:43:
d4:4d:8b:91:c9:37:6e:25:79:7a:cc:9f:3c:3f:48:59:cc:23:
81:58:b1:aa:36:3d:6c:88:54:27:f7:21:cb:dd:a1:d3:87:03:
77:64:c8:bc:3e:97:76:9f:e2:41:42:79:c8:e3:ed:39:02:64:
5a:3a:34:40:b1:3f:3a:41:7f:88:61:a8:da:25:8b:98:96:91:
09:fa:69:d3:76:93:3c:7a:a3:a9:3f:70:17:47:13:84:0d:90:
30:62:3f:ce:30:91:75:da:77:d4:29:ad:a2:59:6a:1f:8b:42:
b3:ae:a1:e9:5b:fb:a0:79:1a:2b:3b:9e:1a:41:23:28:a2:5c:
a3:26:d6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:32:24 2025 by rpki-client