Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
File: BMXx0XeetwkJA2XbmCkXrf0PgEk.mft (raw, json)
Hash identifier: B5/RQSynxNetpHovY6Ga4Upo1CRVRiyBCCaHlPMnaJY=
Subject key identifier: 1B:2A:A6:7D:E3:56:92:D8:8E:92:60:F5:11:1C:14:E5:D2:E2:6C:E5
Authority key identifier: 04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
Certificate issuer: /CN=04c5f1d1779eb709090365db982917adfd0f8049
Certificate serial: 01962A4E525637A962D298B6FFA1791C5A77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
Manifest number: 09AC
Signing time: Sat 12 Apr 2025 14:01:37 +0000
Manifest this update: Sat 12 Apr 2025 14:01:37 +0000
Manifest next update: Sun 13 Apr 2025 14:01:37 +0000
Files and hashes: 1: BMXx0XeetwkJA2XbmCkXrf0PgEk.crl (hash: LUt0Rc762nnKRgWUuQRcYZU2OJXdcAVSJ/xnuOq+XQU=)
2: UiH643w1GrSMb8MdWOXuMKoflu8.roa (hash: Ox1u3sls+4F8aVo0Ns4HTUNM65vIvg8OdP6tILBOlsE=)
3: rLCMQEvNZKScfiZ6xzabxSP9S3Q.roa (hash: pzK0hpbuvro5D5X8t6Q8snrn8GpjD/ysREOxL+vWCA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:4e:52:56:37:a9:62:d2:98:b6:ff:a1:79:1c:5a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04c5f1d1779eb709090365db982917adfd0f8049
Validity
Not Before: Apr 12 14:01:37 2025 GMT
Not After : Apr 13 14:01:37 2025 GMT
Subject: CN=1b2aa67de35692d88e9260f5111c14e5d2e26ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:06:90:8b:c0:26:63:0c:90:45:c1:b5:2e:89:
26:be:b0:00:1e:ef:3e:97:6d:a4:42:d4:5d:37:6b:
f8:89:c4:51:1e:ab:dc:31:a2:42:ea:ae:57:c1:13:
8d:91:2d:c2:c5:06:b7:53:b9:f7:18:9d:45:2c:e7:
95:7e:13:a7:bb:35:c5:5f:65:7c:c0:b0:ab:61:7a:
63:60:87:b5:cb:e9:23:3f:f0:99:79:a4:ff:c8:20:
75:59:36:1c:35:45:41:53:91:d5:1c:0a:3d:05:88:
4f:c3:98:ba:c7:c4:2d:51:e2:b5:ba:4a:cc:ff:3c:
48:7f:68:b9:3e:65:ad:d4:07:63:4c:dd:38:51:04:
a9:ad:c6:96:1b:4a:7f:84:49:4e:84:9d:fb:44:a6:
8b:9c:be:58:96:8d:cb:2b:9a:fd:ee:a8:89:46:bb:
64:ad:93:00:9a:f1:c2:d0:78:0d:a7:dd:7f:bd:0a:
80:8a:86:cd:c0:3c:4c:84:f2:84:41:63:0c:1d:38:
fc:4f:88:e8:26:dc:90:4d:0b:b2:d1:40:b9:4d:a9:
bc:29:29:f9:ed:ac:cf:e1:41:90:af:c9:65:20:37:
4f:38:20:37:60:52:f1:7f:69:61:68:7f:b0:ae:c8:
bf:42:ca:53:3e:3f:32:20:17:58:16:64:e2:a6:29:
a8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2A:A6:7D:E3:56:92:D8:8E:92:60:F5:11:1C:14:E5:D2:E2:6C:E5
X509v3 Authority Key Identifier:
keyid:04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b0:bb:54:ed:7d:94:77:20:62:0b:18:1a:dd:4b:5f:91:96:
7e:90:70:bf:b2:1a:78:39:14:1c:76:27:0c:bf:81:65:11:aa:
b9:6a:a5:43:55:d1:af:b4:e7:75:1b:f4:2a:e5:31:32:cb:8a:
e0:54:e4:fe:8c:b5:fc:c6:31:59:1e:4c:c8:47:6a:a6:37:8a:
64:b3:91:b4:b7:a1:17:7f:13:c7:d4:8a:b4:48:eb:99:44:81:
21:7f:9c:82:42:4e:07:db:a5:ca:77:5f:67:97:2b:de:be:89:
4d:d7:83:e9:29:ec:01:11:7a:f7:e8:93:28:c8:1b:73:a0:6d:
e3:52:07:4d:ac:66:97:43:88:c3:b7:cc:6c:dc:18:0d:30:32:
f5:26:08:dd:2f:73:57:59:d7:74:25:7c:43:9b:29:5a:c7:b4:
c2:ea:67:79:f9:96:75:84:9c:5b:e9:8e:bf:c8:13:9c:cf:64:
65:16:f2:65:91:20:e1:8a:ce:f8:78:d4:b6:17:bf:7e:fc:89:
a3:1c:ab:c8:ab:42:37:a1:15:ba:e2:ff:5c:7c:43:33:fd:82:
66:1c:c4:c3:4a:cb:d0:06:87:2b:d2:f8:8f:4d:6a:db:a1:76:
d3:18:ff:ed:53:fb:c8:30:da:e9:4f:1f:e9:30:fb:97:22:fd:
3f:d0:a2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:43:10 2025 by rpki-client