Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
File: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft (raw, json)
Hash identifier: REiRm8b+/l/Em2ep4tcheRvsoYzqx8IfdC1OIHBMUJI=
Subject key identifier: CA:90:C1:63:DE:1C:AF:74:06:31:C9:DD:52:2D:B5:B8:02:1B:EF:D5
Authority key identifier: 04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
Certificate issuer: /CN=049d4f66598668079353721c21935a00319f6759
Certificate serial: 019745F950B46F26095C0BCBA92A9B1A3074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
Manifest number: 14C0
Signing time: Fri 06 Jun 2025 16:00:56 +0000
Manifest this update: Fri 06 Jun 2025 16:00:56 +0000
Manifest next update: Sat 07 Jun 2025 16:00:56 +0000
Files and hashes: 1: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl (hash: clDJ9grN0h9RAd/MZTJW6fwL2Y62rNwbji1a2ELRs84=)
2: SBmVAlodI7xnOy2vKS8iSbQ2L-c.roa (hash: Qjp3sgcgeheRs3EPb5cqh07Ww165sSq1F+/13L3R5T4=)
3: g0VLR4dmZuTUcMAH8lFP9-35SEQ.roa (hash: VJzmNAtUkQtzYlHT74BgFDK6+FNteK79SAvoZ6OtMvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f9:50:b4:6f:26:09:5c:0b:cb:a9:2a:9b:1a:30:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049d4f66598668079353721c21935a00319f6759
Validity
Not Before: Jun 6 16:00:56 2025 GMT
Not After : Jun 7 16:00:56 2025 GMT
Subject: CN=ca90c163de1caf740631c9dd522db5b8021befd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bc:81:ed:42:7f:fd:a5:0d:a3:58:27:07:26:
13:25:5a:5b:a7:90:2e:56:60:e1:3b:54:6a:db:09:
90:9a:15:a1:2c:b3:60:cf:10:f6:39:65:a1:2c:98:
ce:17:52:21:f4:8d:20:6d:b2:69:38:df:17:2b:ed:
c3:07:82:b4:44:d2:ac:1f:8a:6b:c7:5f:10:c7:06:
21:ef:2b:99:39:e5:75:a9:0b:6e:71:c1:c9:91:ae:
b7:28:cd:5f:54:cd:9b:5a:b3:29:ea:25:c3:17:1d:
eb:16:78:0b:f3:61:4c:03:e5:f2:28:41:ea:bf:08:
f5:60:bd:59:f8:fd:10:00:00:6f:f2:08:4f:44:48:
9d:2c:2f:30:ee:5b:e3:34:e9:61:bd:04:dd:39:2d:
9e:6d:f3:2c:4f:18:62:fc:37:b6:31:4e:3e:04:55:
b9:0f:41:f4:aa:99:02:3b:9a:6a:17:41:62:ec:db:
29:ea:90:4f:1c:cb:51:0d:cb:b4:57:df:7d:ea:15:
63:05:1c:06:24:b0:4c:c0:4f:4d:06:4f:a6:69:5f:
75:e7:c2:bc:ad:cf:05:28:be:69:22:36:6c:7a:9f:
4e:a0:77:0a:69:be:b4:63:ad:18:91:9a:05:e4:0a:
ed:ad:27:78:64:08:70:33:47:ed:d7:96:dc:f7:14:
a6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:90:C1:63:DE:1C:AF:74:06:31:C9:DD:52:2D:B5:B8:02:1B:EF:D5
X509v3 Authority Key Identifier:
keyid:04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:99:ce:0c:95:4f:4b:3c:47:ac:b0:b7:44:6f:81:75:86:2b:
6a:de:65:15:91:56:fd:68:94:60:05:05:6b:56:5e:df:20:96:
b5:31:bb:21:52:2f:23:45:19:7f:91:96:6e:a3:5c:a9:ef:f2:
06:4b:e2:e7:45:62:49:5e:2e:54:74:40:82:09:52:f8:22:19:
53:bf:5b:9f:ff:27:56:3a:fd:37:5d:16:3f:13:9a:a8:35:67:
04:4e:4d:e4:05:f7:0b:85:f9:0c:8b:02:36:85:8f:0b:2b:30:
8e:4f:d9:78:10:06:28:4e:9e:2d:dd:18:92:ef:26:f7:4e:51:
34:79:33:80:a0:51:be:15:a2:a7:06:5f:06:54:f4:a9:05:d3:
8f:7b:73:2a:ae:5c:49:55:25:37:ba:41:81:ae:ba:9a:65:35:
43:31:6a:54:bc:db:f4:6e:50:a8:49:c7:f4:c5:08:1f:80:5e:
06:83:3c:66:11:7f:90:c2:cd:e2:0d:95:f1:a7:28:d9:30:28:
ff:b5:f0:a5:f6:ab:6d:91:e8:58:b5:64:40:3b:f6:df:69:17:
e0:64:09:1a:1e:c4:62:54:42:a5:0c:82:63:b7:6c:68:81:94:
e3:92:b5:f4:f7:bb:ef:4a:9e:6d:07:99:9c:d1:e2:f2:24:36:
d6:c1:4c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:25:18 2025 by rpki-client