Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
File: BjJUIiHK72RIzFRSFOAABxvVa4Y.mft (raw, json)
Hash identifier: NzLmdWxDh1Z+3XG0h063WX4bHw9ljQgFEaUzo9t5nJo=
Subject key identifier: 97:8D:38:4E:D1:41:DA:A6:A3:78:67:26:4D:F8:51:4C:D5:E2:E3:9C
Authority key identifier: 06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
Certificate issuer: /CN=0632542221caef6448cc545214e000071bd56b86
Certificate serial: 019652A49A7B873CA9A25D432A98DB51B18C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
Manifest number: 0F33
Signing time: Sun 20 Apr 2025 10:00:41 +0000
Manifest this update: Sun 20 Apr 2025 10:00:41 +0000
Manifest next update: Mon 21 Apr 2025 10:00:41 +0000
Files and hashes: 1: BjJUIiHK72RIzFRSFOAABxvVa4Y.crl (hash: 4hWRrR2430qkzAzI2XfgnIW5K2qsKJrBJtuXFILyl1M=)
2: GI2JqYrwfOB4H4-WFfI5AvlAgXw.roa (hash: wx2kzfl5/eKVV8cW/FCB0zPSR7qqCq5F0M1Y8hdHGxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:9a:7b:87:3c:a9:a2:5d:43:2a:98:db:51:b1:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0632542221caef6448cc545214e000071bd56b86
Validity
Not Before: Apr 20 10:00:41 2025 GMT
Not After : Apr 21 10:00:41 2025 GMT
Subject: CN=978d384ed141daa6a37867264df8514cd5e2e39c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:81:4b:8d:43:1f:a5:47:9e:b0:ee:b0:2f:9e:
f2:fe:41:1c:09:41:8d:03:cb:37:b4:e2:94:47:d7:
91:3b:1f:ad:c7:0d:53:f4:ee:a4:c3:b7:c5:03:17:
c9:0d:41:f5:1b:59:a0:c8:f9:2f:76:3f:6b:fe:36:
0c:ae:e7:a7:26:7b:3c:e3:ca:89:54:81:b4:b8:6c:
fd:01:04:a1:82:2d:67:a0:93:e1:74:75:47:41:40:
13:d8:36:72:f9:1f:5f:b2:5e:b6:b2:52:6a:0e:b4:
3d:c8:95:76:1b:4c:95:39:a9:70:b4:14:7f:bc:9c:
3d:6d:99:83:6c:15:32:2e:54:96:14:83:61:c3:09:
5a:a4:39:d3:15:1c:4a:05:53:36:bb:40:ff:c1:5f:
e4:25:dd:89:b2:45:11:75:29:89:c7:3e:ca:55:48:
2d:1a:5e:7a:6c:60:21:f4:9e:c7:9f:c8:b5:ec:2f:
2a:55:3a:22:71:c0:52:ae:1d:6b:8c:e5:94:b2:ac:
db:4f:b0:a7:28:4b:2f:bb:6d:6a:4b:4f:3a:13:2f:
b9:51:ed:ba:22:6a:eb:09:a3:b9:f4:0b:1c:b6:7a:
a3:99:db:4d:f6:10:ad:34:68:fb:a8:73:8b:95:69:
04:b8:43:8f:c7:c9:13:8d:7b:9e:9b:c7:02:e3:f6:
e0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8D:38:4E:D1:41:DA:A6:A3:78:67:26:4D:F8:51:4C:D5:E2:E3:9C
X509v3 Authority Key Identifier:
keyid:06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e7:85:0e:86:4e:81:86:58:18:e5:3e:77:ae:cf:68:6e:e5:
52:12:21:87:ab:35:14:31:8c:f5:81:9d:19:3f:48:27:f7:92:
5f:33:51:37:00:0e:46:7c:4f:77:2b:c2:91:25:57:32:5f:08:
64:fb:66:f6:0b:fd:96:12:71:cf:a0:55:a2:06:ba:a1:4d:a4:
d9:07:43:a9:d1:26:98:78:99:e7:6c:9a:a7:68:90:55:d2:3a:
f5:af:16:a0:fc:2c:b9:7d:c1:08:9b:06:c6:3e:32:d7:2d:28:
91:bc:5c:ed:78:d2:a0:dc:2e:6d:14:b7:4b:8b:de:6d:26:39:
53:77:1e:79:5a:06:c4:cb:b5:7e:fb:3d:a1:a8:f5:d2:24:10:
00:84:cc:b6:47:4d:1d:d6:6e:a1:77:0f:bd:fb:eb:dc:71:8b:
8f:16:bf:6f:a3:2b:2e:cc:5f:a6:d7:07:66:4f:17:fa:f0:39:
4f:5c:a9:76:85:05:2b:98:04:12:62:86:0c:40:f1:07:2f:84:
40:69:6a:82:a1:85:e4:8c:78:0c:78:37:6d:e4:03:50:96:96:
f9:cf:c8:00:64:96:80:44:97:3c:3c:d6:dd:09:14:45:49:de:
e4:5a:cf:dd:22:c5:dc:f4:ec:25:33:66:d9:f6:40:c1:e4:9e:
21:4f:ff:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:55:49 2025 by rpki-client