Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/433c47-bf3e-4728-8b93-b070ec34d4c1/1/BzzBj8cG31qZM7C-INzLBGdb9HQ.mft
File: BzzBj8cG31qZM7C-INzLBGdb9HQ.mft (raw, json)
Hash identifier: kCqZTQTYA+h/leBKm9qLdyio3D8agDmlxGMgRNLHWlg=
Subject key identifier: 7B:DB:F0:1D:A5:D8:9A:8A:57:CB:9A:9D:CD:E4:F4:ED:17:72:80:AE
Authority key identifier: 07:3C:C1:8F:C7:06:DF:5A:99:33:B0:BE:20:DC:CB:04:67:5B:F4:74
Certificate issuer: /CN=073cc18fc706df5a9933b0be20dccb04675bf474
Certificate serial: 01963BE5A5442E05DFC7406226A51ACAD0F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzzBj8cG31qZM7C-INzLBGdb9HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/433c47-bf3e-4728-8b93-b070ec34d4c1/1/BzzBj8cG31qZM7C-INzLBGdb9HQ.mft
Manifest number: 11CB
Signing time: Wed 16 Apr 2025 00:00:27 +0000
Manifest this update: Wed 16 Apr 2025 00:00:27 +0000
Manifest next update: Thu 17 Apr 2025 00:00:27 +0000
Files and hashes: 1: BzzBj8cG31qZM7C-INzLBGdb9HQ.crl (hash: Cj7MCUh/rL91z/3gaRwmtjSgTL2mJJUAFR/j4i1uYN0=)
2: goFsxxYVVDsH1YxnuVEoHVEyuUQ.roa (hash: H+4TEC+hHsfjX7/LNloV4KRFUkMNXemYneHOCftwWZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/433c47-bf3e-4728-8b93-b070ec34d4c1/1/BzzBj8cG31qZM7C-INzLBGdb9HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/433c47-bf3e-4728-8b93-b070ec34d4c1/1/BzzBj8cG31qZM7C-INzLBGdb9HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzzBj8cG31qZM7C-INzLBGdb9HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:e5:a5:44:2e:05:df:c7:40:62:26:a5:1a:ca:d0:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073cc18fc706df5a9933b0be20dccb04675bf474
Validity
Not Before: Apr 16 00:00:27 2025 GMT
Not After : Apr 17 00:00:27 2025 GMT
Subject: CN=7bdbf01da5d89a8a57cb9a9dcde4f4ed177280ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5b:53:49:aa:f7:d9:e9:8b:e6:9b:1f:bc:24:
5e:95:9d:87:68:f2:f7:20:9e:0e:65:f4:58:d6:66:
56:19:10:b7:20:08:6e:f5:8d:0d:f6:02:f1:35:d3:
ad:e7:c8:ea:98:bf:1e:95:be:ad:7b:e2:04:aa:8b:
bc:dc:5b:f4:52:01:5a:3d:1d:3c:97:1c:fb:46:79:
24:b8:28:1c:7e:80:d2:1f:e0:15:76:bd:d5:60:63:
21:08:00:b0:f1:2a:e8:13:89:1b:98:2f:f0:f0:5c:
ee:4e:f4:0f:82:bc:5d:93:fc:ea:e5:4d:99:f4:54:
8a:9c:f4:27:24:ed:36:ea:19:4d:44:f9:a2:94:17:
c0:97:09:39:3c:02:59:09:66:af:f0:4d:27:25:d4:
30:b5:b9:a9:60:14:f5:ae:66:83:8b:ec:46:28:d4:
c6:a4:57:03:ca:f4:2d:53:b5:98:63:2b:27:51:80:
c5:fa:c6:84:a7:2e:2e:78:1d:e2:92:d5:7c:b5:ac:
f7:88:f0:7f:71:67:4d:3c:2f:ed:d7:91:33:ac:f2:
6a:2e:d7:24:51:5d:e4:04:15:94:5f:ee:90:d6:07:
25:7e:32:fe:d4:0f:4d:4f:ab:43:8d:b0:dd:0b:8c:
bc:60:78:c0:18:6b:7c:78:a1:a3:a8:f8:44:a2:d5:
f3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DB:F0:1D:A5:D8:9A:8A:57:CB:9A:9D:CD:E4:F4:ED:17:72:80:AE
X509v3 Authority Key Identifier:
keyid:07:3C:C1:8F:C7:06:DF:5A:99:33:B0:BE:20:DC:CB:04:67:5B:F4:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzzBj8cG31qZM7C-INzLBGdb9HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/433c47-bf3e-4728-8b93-b070ec34d4c1/1/BzzBj8cG31qZM7C-INzLBGdb9HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/433c47-bf3e-4728-8b93-b070ec34d4c1/1/BzzBj8cG31qZM7C-INzLBGdb9HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:96:8e:07:83:29:7e:45:2e:b2:2f:18:1b:f3:a3:4f:7d:eb:
42:1c:8e:54:b4:9a:96:d8:57:c8:20:68:8b:fb:17:d6:14:d5:
8b:d5:03:89:49:9f:3f:32:77:b4:70:d9:ae:31:c5:c0:cc:a0:
3b:7a:3b:9a:ce:aa:d4:35:76:a7:9d:3a:5c:87:c1:20:72:77:
64:1d:ce:b6:c7:38:0d:6e:33:d8:5e:d3:ca:d2:55:dc:11:d2:
b8:5f:c9:b7:9b:ec:6b:76:92:5d:e7:55:da:39:cf:b1:b2:b8:
37:53:4c:b9:90:ca:13:a2:81:7c:ba:17:ff:16:49:ff:3f:9c:
38:d2:fb:42:b4:9c:6c:b1:2a:21:d9:41:be:bb:dc:d4:dc:bb:
26:10:64:d0:e8:21:78:d7:80:2e:a2:c9:3f:4e:4a:e9:3d:cc:
6e:1f:a4:77:2a:24:dd:e4:e1:6d:23:99:ec:32:b3:cf:ae:7b:
74:2c:d7:b2:2b:cb:26:4e:46:a8:85:95:f6:48:41:7e:92:cd:
e3:b8:64:35:6e:47:29:70:63:f8:32:1c:a3:cf:59:da:00:18:
1a:0b:55:06:a1:43:94:a5:5c:b6:6c:1a:e1:94:08:f7:45:c7:
1d:a7:90:98:07:cd:9f:66:28:8f:af:33:cb:52:4f:f7:a1:b0:
03:8d:2a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:43:35 2025 by rpki-client