Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
File: BZZLbVGQL9wapoQbs9PGIqV5glo.mft (raw, json)
Hash identifier: VpVKUIdEA59Nxrgl4FSL8LL81XHGt423O6Azw8fLjGw=
Subject key identifier: AA:F1:66:E9:2F:33:D8:3E:5A:59:10:43:27:6E:A6:B4:B8:10:C4:99
Authority key identifier: 05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A
Certificate issuer: /CN=05964b6d51902fdc1aa6841bb3d3c622a579825a
Certificate serial: 019653497891851C47B5639A2A05B5EA0CB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
Manifest number: 08EA
Signing time: Sun 20 Apr 2025 13:00:45 +0000
Manifest this update: Sun 20 Apr 2025 13:00:45 +0000
Manifest next update: Mon 21 Apr 2025 13:00:45 +0000
Files and hashes: 1: BZZLbVGQL9wapoQbs9PGIqV5glo.crl (hash: O/bATOPNG+y5B3AlFcBpq1h+elH8nFPjVhZ1pnpdA3o=)
2: inNKkDFxcUNq5FXZVVy7-DSSYCQ.roa (hash: k4FJ7ff3nr4506kIqSUj3qTtLfz2+PJT75ZSUSvS0y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:49:78:91:85:1c:47:b5:63:9a:2a:05:b5:ea:0c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05964b6d51902fdc1aa6841bb3d3c622a579825a
Validity
Not Before: Apr 20 13:00:45 2025 GMT
Not After : Apr 21 13:00:45 2025 GMT
Subject: CN=aaf166e92f33d83e5a591043276ea6b4b810c499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d8:56:01:1c:23:c2:dc:2e:38:8f:77:d6:19:
c1:c1:1b:db:37:99:b5:19:d7:62:b5:74:08:94:e3:
a9:94:71:c1:66:d3:5f:1d:2f:e2:03:82:d0:b9:ee:
c3:c0:08:88:3a:3a:24:b9:73:e9:77:cd:22:58:fd:
b2:43:de:73:ad:41:56:07:f4:a6:72:25:85:8c:e6:
5f:73:3c:60:b1:fd:55:b5:6d:8a:a8:49:86:f0:7e:
70:a4:96:2e:cc:49:c8:37:2e:25:98:6c:fd:3b:81:
d4:4f:af:e9:80:d4:68:c9:46:fc:d9:91:62:4e:cc:
39:32:b1:e5:93:14:3c:a0:53:74:78:44:c0:c6:98:
29:e7:6f:73:6c:e2:f0:f4:6f:2f:88:ec:3b:5b:9b:
bf:75:5b:5f:5b:64:76:aa:47:f4:0f:12:e7:ff:a9:
54:71:5a:c5:1d:c7:cd:b1:2c:45:59:a1:15:c1:44:
5a:70:e0:58:78:a4:02:a7:5c:31:fe:65:f8:85:fe:
b7:11:77:84:b5:71:3f:48:fa:f2:f6:38:1c:0f:bf:
8b:e6:56:95:8e:9b:f7:01:41:4f:9e:51:8e:29:17:
1c:02:22:f0:ef:9b:03:a8:bb:15:b8:b4:13:9d:b8:
e5:63:b4:fc:c2:2c:3c:69:6f:25:bf:b8:e7:b7:62:
40:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F1:66:E9:2F:33:D8:3E:5A:59:10:43:27:6E:A6:B4:B8:10:C4:99
X509v3 Authority Key Identifier:
keyid:05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c0:79:44:58:b4:bf:01:e6:07:47:ed:35:fd:d6:61:b1:c5:
01:ba:a1:bc:44:f3:d1:c5:58:dd:c4:ea:5f:ac:68:ea:fb:9d:
90:ef:26:81:69:66:99:8a:23:22:bb:dd:ce:22:eb:75:cd:3c:
7b:ec:7c:44:bc:11:e2:cc:8f:59:a5:99:76:80:3d:d1:0b:74:
36:9f:1d:43:c4:8c:35:03:e3:15:21:87:24:b7:3a:7f:1d:34:
ec:69:15:14:7d:e5:c2:7b:40:e4:41:8b:68:73:18:43:f9:9b:
f1:92:96:43:a8:81:b1:7b:a9:15:a1:d2:16:f6:b5:6e:ce:8e:
1f:75:86:f7:98:bd:1d:d1:e0:96:ff:f5:a4:e3:ff:86:23:13:
eb:f3:d9:8e:9e:16:0a:4d:9d:76:c3:ab:f5:b5:6a:89:9c:a2:
59:6b:83:ac:de:1a:ae:19:a9:f9:29:f3:2f:56:f4:38:e2:db:
89:fb:96:81:50:2d:cb:b2:ab:2e:10:7c:e7:89:22:6f:34:f5:
7d:1c:a8:c1:f8:ef:0a:3a:f3:da:ae:f1:77:60:00:bf:95:59:
9e:5f:89:dd:ed:24:b2:c3:3a:72:16:8f:e4:18:19:48:65:a8:
7e:79:1b:68:ed:2a:f2:8f:08:00:1f:4c:ca:40:40:2c:09:9f:
da:05:6f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:54:47 2025 by rpki-client