Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
File: BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft (raw, json)
Hash identifier: NtfEGY/L8bHJKzqcSVExaPR3+CpwCCCqXRc4vWkIBx8=
Subject key identifier: 03:7D:69:04:21:4A:04:B6:B6:9F:CB:95:99:E9:E4:E8:B1:A2:CF:30
Authority key identifier: 05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91
Certificate issuer: /CN=050e3b7dfbd59910fe527cc7e29af64d53806c91
Certificate serial: 01964E91148E87E15BD25639D3CBA18DA69F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 15:00:52 +0000
Manifest this update: Sat 19 Apr 2025 15:00:52 +0000
Manifest next update: Sun 20 Apr 2025 15:00:52 +0000
Files and hashes: 1: BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl (hash: 6X+QK8+m+wNNPyVwSl7Tp3ua7DmFAs2D5+b1P5h+FbQ=)
2: g7zSuu1Y2LgUEEcASbCxWIihuvc.roa (hash: DxpZr9EOZTA5swhTGy2g3jLwTeS/IoD0WJP5uBxOYhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:91:14:8e:87:e1:5b:d2:56:39:d3:cb:a1:8d:a6:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050e3b7dfbd59910fe527cc7e29af64d53806c91
Validity
Not Before: Apr 19 15:00:52 2025 GMT
Not After : Apr 20 15:00:52 2025 GMT
Subject: CN=037d6904214a04b6b69fcb9599e9e4e8b1a2cf30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a9:10:a0:89:14:88:21:75:e6:a1:72:1a:e7:
6e:db:27:9e:81:e5:86:1d:07:ba:a6:ba:b9:3f:e5:
7d:fb:76:b0:88:e2:a3:22:85:e0:e9:97:64:92:c5:
cb:d9:05:36:21:45:e1:a0:80:b5:fc:17:9f:13:d7:
ad:5d:b5:a8:a5:db:10:4c:d1:68:fd:e9:63:d1:83:
ad:b7:01:04:97:18:c8:b6:73:df:07:08:a2:a9:7b:
a6:a9:42:aa:b2:88:d9:73:e6:31:66:d1:cc:3f:fa:
26:7c:f2:a8:66:ce:71:6b:9c:8a:83:92:0f:13:b9:
13:01:d0:e1:24:8c:e7:35:0c:2f:4a:b0:8d:86:54:
52:57:74:91:25:b7:e0:95:31:2f:fc:80:eb:ca:b9:
27:b0:bb:7b:66:68:a5:96:10:0a:cd:66:68:94:7f:
2f:a8:dd:c6:55:71:39:d4:c6:84:8e:66:82:95:d3:
6d:5c:ef:90:a7:f0:a5:f2:80:fd:8d:49:d0:42:0b:
95:8b:a0:3d:7d:ba:ee:f0:db:e9:6f:c2:66:4b:5e:
d3:e7:47:c9:fc:e1:f0:44:3a:7e:d3:cc:59:27:bd:
e3:b4:35:43:ea:9a:14:ce:88:0e:a1:37:db:ba:31:
4f:62:1b:56:8a:ec:2f:2a:e1:c1:4c:23:4b:7b:98:
aa:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7D:69:04:21:4A:04:B6:B6:9F:CB:95:99:E9:E4:E8:B1:A2:CF:30
X509v3 Authority Key Identifier:
keyid:05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:1a:72:76:0b:25:05:5f:20:fc:92:4e:e3:8a:2a:b9:4a:6d:
eb:27:2c:78:60:68:f1:c9:19:77:6b:d4:8f:f8:56:ea:07:6b:
65:50:f5:02:19:13:ac:89:c8:e6:21:97:b0:da:39:fb:29:d2:
b0:24:9f:0b:05:7c:1b:a8:7c:13:b7:61:ca:b1:94:97:b4:5b:
64:d1:91:af:05:5b:4b:f2:bc:04:97:f8:46:bc:55:f6:e1:94:
18:81:c9:40:ab:96:b2:fa:5a:be:2d:15:34:b8:a4:bb:4e:c5:
86:6c:d6:16:a5:12:cf:a6:a6:ab:7c:c2:a9:a0:ab:0c:56:f6:
38:b2:cf:f6:17:47:18:77:e5:f2:0c:d3:5d:94:aa:e1:94:c8:
3b:00:05:3c:16:43:5b:7c:db:92:37:7d:94:da:03:d7:a4:da:
50:cc:4a:f8:6d:fa:ef:01:2e:a9:3d:1a:48:03:0c:84:37:03:
d1:5b:a0:70:d6:21:cc:db:36:52:c5:04:63:ac:9e:b6:8d:54:
3e:6f:6f:4f:7b:c4:a0:0e:25:e9:75:96:e3:e3:d6:f0:dc:48:
be:67:a8:62:ea:e6:a0:3b:f1:ab:f8:b2:c9:b6:b7:d6:68:5b:
00:f7:00:c4:fe:ca:4c:96:71:23:0f:a9:ab:8c:11:65:4d:f8:
65:40:12:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:49:57 2025 by rpki-client