Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
File: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft (raw, json)
Hash identifier: Ue8uqZj5r02BUIPd6AFMqBJzSfgSA4+r/5SZF0Un6lg=
Subject key identifier: 78:B6:91:A8:35:9C:D4:9D:4A:C1:58:AB:44:C3:B9:BD:B5:C1:83:7D
Authority key identifier: 04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
Certificate issuer: /CN=049d4f66598668079353721c21935a00319f6759
Certificate serial: 01963989229E677863461F8284062EB114AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
Manifest number: 1435
Signing time: Tue 15 Apr 2025 13:00:10 +0000
Manifest this update: Tue 15 Apr 2025 13:00:10 +0000
Manifest next update: Wed 16 Apr 2025 13:00:10 +0000
Files and hashes: 1: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl (hash: lqtz/5ghTFsWNw90UUiMKnTXtVMVFjL/8hDndU+TPKU=)
2: SBmVAlodI7xnOy2vKS8iSbQ2L-c.roa (hash: Qjp3sgcgeheRs3EPb5cqh07Ww165sSq1F+/13L3R5T4=)
3: g0VLR4dmZuTUcMAH8lFP9-35SEQ.roa (hash: VJzmNAtUkQtzYlHT74BgFDK6+FNteK79SAvoZ6OtMvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:39:89:22:9e:67:78:63:46:1f:82:84:06:2e:b1:14:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049d4f66598668079353721c21935a00319f6759
Validity
Not Before: Apr 15 13:00:10 2025 GMT
Not After : Apr 16 13:00:10 2025 GMT
Subject: CN=78b691a8359cd49d4ac158ab44c3b9bdb5c1837d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ef:0f:82:00:73:a8:ed:23:be:ad:2e:4a:f4:
c8:22:4c:a0:52:a9:c1:81:e8:89:d5:60:2a:4f:b3:
c4:6c:7d:83:a9:e9:0b:0f:f8:54:d4:7e:c3:06:76:
66:c0:2d:48:52:1d:02:fe:3c:f0:ea:56:91:08:85:
d7:28:30:76:09:a4:94:fc:b2:a6:40:4c:9d:41:87:
79:5e:3b:74:c9:5f:50:3a:53:6a:13:35:a2:e1:f1:
d6:f1:fa:a9:29:a9:aa:69:dc:92:43:0d:77:8c:c0:
79:07:93:f0:c2:0b:42:37:c6:a8:ec:8b:a0:01:71:
18:df:8d:d0:a7:ed:3e:ff:17:31:7e:77:b4:a2:56:
d8:49:af:2f:7f:eb:85:53:97:1c:e5:10:45:6a:7f:
48:1f:dc:ca:42:c1:7c:fd:3d:3d:7b:06:16:02:00:
8e:01:63:c7:bd:08:8f:3e:2d:a4:a2:36:80:e5:b9:
ef:0d:a8:22:23:07:41:b4:b5:ca:2f:1b:83:0a:0a:
8f:5f:46:0c:04:f6:d0:19:60:1e:b9:75:ec:18:f0:
e2:69:0d:2f:95:40:80:d3:be:0b:6f:b0:df:6a:58:
bd:39:d6:d6:d5:eb:02:b1:4e:fe:be:79:ad:65:f4:
63:3b:1b:ca:e2:45:8d:17:d4:d0:74:48:34:f8:25:
3a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B6:91:A8:35:9C:D4:9D:4A:C1:58:AB:44:C3:B9:BD:B5:C1:83:7D
X509v3 Authority Key Identifier:
keyid:04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:4c:0c:3b:7d:46:c2:00:ec:11:3e:f4:da:09:00:77:44:a7:
ab:66:ee:a6:b8:12:cc:93:27:13:b5:9d:71:18:4c:c3:bc:08:
78:80:2c:17:d9:31:2f:ad:22:4d:28:b4:c7:bc:9e:4e:c0:ce:
c0:78:0d:8f:89:4a:41:cf:e0:8b:ba:7e:0f:2a:26:d6:a8:35:
80:f1:5b:27:62:b8:1f:68:35:0f:db:6b:67:eb:07:b1:84:2f:
f1:01:5e:62:09:b8:63:b7:f6:ac:8a:80:23:ee:4b:de:d2:fc:
24:c1:a1:d5:26:9e:af:d9:82:35:ee:0e:50:a6:13:00:fe:23:
9e:28:7c:1c:56:e6:02:cc:b4:bd:28:f6:95:36:57:29:59:63:
f2:b2:21:88:7e:df:95:d6:7a:a0:9c:07:db:cf:2e:2d:1e:c4:
47:5c:d8:05:3d:b7:4c:ee:d7:e1:3a:15:31:56:77:3a:28:d6:
52:b2:6d:06:00:42:f6:df:90:8e:68:d9:75:7c:95:b8:d9:5d:
01:c3:ab:c5:ec:bc:88:e5:4e:ad:58:d6:18:cb:3c:c1:cc:7d:
18:85:9f:22:0c:86:51:83:82:fa:b5:0d:3b:c8:d7:fd:96:f1:
73:cb:a2:81:a4:18:a8:d6:82:29:14:4b:36:fe:1f:96:cc:fa:
c6:a2:dc:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:34:20 2025 by rpki-client