Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
File: BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft (raw, json)
Hash identifier: r+iDePxe7ygRpLXp9I86NZxoqTbgqpt4rLNDUHLnj8A=
Subject key identifier: 93:4E:C7:3F:24:C3:DD:1E:44:BB:96:46:6E:4D:D5:4B:C2:89:9E:A9
Authority key identifier: 04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
Certificate issuer: /CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Certificate serial: 019650480945781CD1CD474518A166A24A26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
Manifest number: 14FD
Signing time: Sat 19 Apr 2025 23:00:20 +0000
Manifest this update: Sat 19 Apr 2025 23:00:20 +0000
Manifest next update: Sun 20 Apr 2025 23:00:20 +0000
Files and hashes: 1: BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl (hash: 5XlXABNL5/jqXi4tjoABN6xUGNBmGg1eeg9lCmbayBI=)
2: NmkuWisNNR7yCTNM4BUhyNRxVxo.roa (hash: qERY3AcVPARhb2r8P5F7KsbGo82n2f3qr7wO9B4TKno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:09:45:78:1c:d1:cd:47:45:18:a1:66:a2:4a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Validity
Not Before: Apr 19 23:00:20 2025 GMT
Not After : Apr 20 23:00:20 2025 GMT
Subject: CN=934ec73f24c3dd1e44bb96466e4dd54bc2899ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e5:aa:f0:57:f8:f2:c7:b9:26:1f:60:60:97:
6a:e1:cd:ab:f2:d2:e5:c9:ae:b0:d2:f1:0e:b0:b0:
63:bf:28:24:fd:b7:e1:88:0e:e8:d0:9c:b5:4b:37:
24:46:0c:51:77:14:cb:1f:4c:43:7f:6b:cc:b2:ad:
ed:f3:1c:ef:a1:a7:b7:c2:70:23:fb:e8:5f:27:f9:
03:ee:aa:76:7c:0b:2e:6d:f6:93:de:ed:4d:34:15:
89:a6:70:7c:6a:ea:69:6c:07:41:a8:f9:a5:b4:75:
6d:e3:27:42:99:ee:7a:03:c8:41:18:fe:67:82:b0:
7a:c0:c9:ec:03:6f:69:6c:9f:97:ba:96:12:fe:15:
8e:0f:78:41:27:b6:77:f3:c7:b5:ba:ec:36:49:b6:
f3:91:8c:5a:ba:54:33:f5:5f:96:58:26:6d:53:e6:
69:2a:5b:0a:67:52:3a:98:de:94:eb:ae:04:a6:24:
e5:fb:17:95:ca:42:f1:64:c3:df:e2:c6:d4:96:5c:
c4:f5:2d:2c:27:2a:b3:b4:36:22:34:fa:89:2c:dc:
46:78:fc:64:e1:e3:e6:09:ec:3f:02:37:cf:f3:79:
58:77:9a:ad:46:31:15:eb:a0:35:08:56:5e:43:61:
6f:31:1c:23:17:73:b4:ef:04:c3:a2:c2:85:79:4d:
e3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4E:C7:3F:24:C3:DD:1E:44:BB:96:46:6E:4D:D5:4B:C2:89:9E:A9
X509v3 Authority Key Identifier:
keyid:04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c9:7b:cd:bd:a3:b4:4e:2d:1f:e3:65:a7:db:6b:bf:a0:70:
3e:1e:d1:5d:9e:84:73:73:15:05:fb:69:de:31:c2:e6:aa:22:
48:3d:a9:a5:eb:19:68:28:88:20:14:b9:79:bf:a0:22:58:3f:
e8:94:1d:2e:5d:6e:8d:14:84:20:04:e7:cd:67:61:d2:7c:17:
d3:40:53:15:e7:59:cc:25:0d:a3:00:63:85:1c:80:58:fd:7a:
ef:b7:e5:9f:86:98:fc:dc:8e:c8:12:19:8a:0e:92:23:2f:27:
31:8b:8a:c4:52:09:b7:43:31:4a:8d:7a:75:63:b1:0b:bf:58:
4d:2e:32:dd:a4:f2:ae:e8:d2:58:23:e6:f4:ba:47:7d:9b:d5:
66:94:d3:5e:e5:3c:b1:76:23:bc:2d:97:22:f1:c4:8d:f4:b7:
c8:2e:68:63:61:b0:87:eb:be:d0:2d:95:72:95:24:2e:42:3c:
27:74:a0:f0:3b:a7:84:a8:ec:0b:90:64:24:df:95:0c:fc:a7:
28:b5:a4:4d:2f:85:7c:84:06:30:d1:fb:91:cd:3a:05:ef:3a:
52:d5:21:d9:b5:2f:1b:5a:20:50:17:71:6a:aa:2c:39:4e:ce:
ea:71:77:78:a1:c1:d4:5d:51:54:75:34:f9:a2:72:98:39:43:
44:39:17:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 01:59:44 2025 by rpki-client