Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
File: BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft (raw, json)
Hash identifier: N97OQ54/LF0DJKTO+m7eZqcUzfRZ6SttAseEcthGOMw=
Subject key identifier: A4:DB:D9:46:F2:E7:FD:D4:FD:A4:59:0D:30:2F:8A:DD:07:FD:B8:AA
Authority key identifier: 05:77:BB:93:24:FC:75:0A:53:E0:55:84:8E:F0:69:03:41:6C:3E:08
Certificate issuer: /CN=0577bb9324fc750a53e055848ef06903416c3e08
Certificate serial: 0196534A32E24B49820EEEBDD96F6E48302E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
Manifest number: 14F8
Signing time: Sun 20 Apr 2025 13:01:33 +0000
Manifest this update: Sun 20 Apr 2025 13:01:33 +0000
Manifest next update: Mon 21 Apr 2025 13:01:33 +0000
Files and hashes: 1: BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl (hash: QpSWRjlOsl6vnTFRfEDkAj7f7bkWg4e1CHZRUTsrlyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:4a:32:e2:4b:49:82:0e:ee:bd:d9:6f:6e:48:30:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0577bb9324fc750a53e055848ef06903416c3e08
Validity
Not Before: Apr 20 13:01:33 2025 GMT
Not After : Apr 21 13:01:33 2025 GMT
Subject: CN=a4dbd946f2e7fdd4fda4590d302f8add07fdb8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:10:9b:e2:62:00:72:89:a5:7f:90:2d:36:da:
b9:b6:3f:94:22:e1:68:81:95:6d:9b:6f:18:a9:73:
b4:94:45:17:61:f6:e1:03:26:b3:93:3e:1b:6f:37:
9f:4b:82:6e:f3:81:14:84:c0:ee:2f:1b:d5:f8:96:
dc:9d:15:0c:fc:30:d0:eb:9b:ca:34:5a:e2:8c:7d:
4c:16:84:d3:28:38:46:e6:57:30:e2:a8:68:ad:b9:
14:d5:b5:fc:15:bb:f6:15:00:dd:f7:1b:b0:ee:f5:
cc:02:5a:2f:c9:1a:06:47:02:11:63:31:f6:1e:3f:
5d:43:26:78:a2:95:76:90:bb:75:e1:07:0e:c3:ca:
e7:47:1b:d3:c9:43:86:80:a3:cd:18:b0:8e:e1:e1:
18:87:d2:46:17:6c:9b:bb:d7:6f:12:85:16:ec:5c:
a9:e2:4c:b7:3d:95:48:47:15:d6:a0:f9:08:92:1c:
83:c3:b9:40:1b:7e:73:b7:91:50:25:a5:39:bf:68:
25:af:6b:9b:83:94:a6:de:b8:2a:bd:12:14:67:60:
14:02:70:9c:25:2a:d9:89:ec:4f:9e:d4:fc:99:a1:
77:21:1c:1e:05:90:7f:dc:bf:c3:12:f1:f4:94:c2:
c7:2b:10:e9:4e:44:a4:58:7f:cf:bf:8a:b1:5e:40:
71:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:DB:D9:46:F2:E7:FD:D4:FD:A4:59:0D:30:2F:8A:DD:07:FD:B8:AA
X509v3 Authority Key Identifier:
keyid:05:77:BB:93:24:FC:75:0A:53:E0:55:84:8E:F0:69:03:41:6C:3E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:51:1d:52:5d:b5:82:67:c4:a3:9c:f6:07:8b:37:53:3f:b4:
21:ef:44:93:e9:e4:2c:f1:7f:6e:6c:88:82:b1:a6:8b:a4:3c:
83:50:c4:34:d1:45:cc:e7:75:91:6a:87:63:7d:10:14:c9:a3:
14:8f:31:d3:1f:8e:73:af:71:7a:7d:21:3d:1f:b2:0b:66:80:
d5:ee:6b:2f:cd:a5:cd:9f:a8:f7:f4:7b:8f:b4:69:82:c0:a3:
58:d5:4a:58:ff:c1:65:cb:ed:8d:02:4b:6f:a6:05:1b:e7:a8:
ea:a2:2c:fd:c0:b9:73:76:a2:61:08:f0:ca:e4:fd:cc:78:08:
6a:37:d6:91:c8:ab:85:84:cd:87:f2:89:2f:0c:6b:d8:f2:4b:
24:ba:94:e9:0b:74:2f:3b:b7:45:2d:71:25:ce:27:4f:ef:80:
e5:e7:11:07:22:ec:50:cc:99:f8:d2:7f:97:e7:91:17:94:4c:
f7:08:50:5d:04:8e:01:eb:23:52:f7:0a:27:69:7f:c7:e1:25:
bd:35:90:a2:7d:25:a3:95:ce:76:4f:68:97:96:f6:ee:1f:33:
2d:26:b4:89:4e:aa:7a:bf:52:c1:aa:bd:03:db:c9:d2:04:a4:
ff:4e:40:ed:13:0f:1a:1d:36:a3:ee:b2:cb:d4:01:1c:49:d0:
2a:ff:43:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:29:54 2025 by rpki-client