Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
File: BDjuFv-LwYTI-qF62vWZ4_rwynE.mft (raw, json)
Hash identifier: Et6tQ/WBAcBlTR9mvi+LdvBJ2DHoApVqOSGH9wlQ65M=
Subject key identifier: 2C:55:8C:F7:2A:6C:A2:A5:EE:B0:A8:CA:70:2E:94:55:C8:71:A5:FF
Authority key identifier: 04:38:EE:16:FF:8B:C1:84:C8:FA:A1:7A:DA:F5:99:E3:FA:F0:CA:71
Certificate issuer: /CN=0438ee16ff8bc184c8faa17adaf599e3faf0ca71
Certificate serial: 019651FFD2AB1A8601F73E4BF2CE7DBC005A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
Manifest number: 0ABF
Signing time: Sun 20 Apr 2025 07:00:42 +0000
Manifest this update: Sun 20 Apr 2025 07:00:42 +0000
Manifest next update: Mon 21 Apr 2025 07:00:42 +0000
Files and hashes: 1: BDjuFv-LwYTI-qF62vWZ4_rwynE.crl (hash: U2R4or6rqqhI+VikcLz1CFsIq202RCjB2CBG2HA4rWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:ff:d2:ab:1a:86:01:f7:3e:4b:f2:ce:7d:bc:00:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0438ee16ff8bc184c8faa17adaf599e3faf0ca71
Validity
Not Before: Apr 20 07:00:42 2025 GMT
Not After : Apr 21 07:00:42 2025 GMT
Subject: CN=2c558cf72a6ca2a5eeb0a8ca702e9455c871a5ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:42:9c:ee:ec:4d:a8:6b:af:1c:09:ab:68:4a:
5c:eb:e2:82:99:15:68:d9:d2:86:0a:34:08:2e:18:
29:04:08:f5:fd:eb:e2:17:26:5f:0a:4b:7d:84:00:
ec:65:8d:39:bb:00:ce:d3:e9:58:cd:bd:c8:b7:dc:
5a:0b:2b:85:c9:11:05:d6:0f:f0:4a:23:59:59:1f:
71:fe:21:1f:5a:5c:43:e0:ab:7d:15:c3:6c:15:5e:
ef:a6:fb:aa:10:79:b8:4a:cc:4b:57:fc:c8:53:4c:
ca:fd:24:da:d1:9f:72:3a:10:80:bc:69:75:65:bf:
a5:50:69:b4:e1:48:f8:72:6f:d0:f3:89:cb:57:d5:
82:d1:32:ab:b7:43:25:84:4e:b3:6d:83:5c:ba:a7:
26:67:b8:10:01:43:41:e8:b0:3a:7a:ae:5e:56:36:
40:18:2b:c3:ad:d7:12:f2:7b:44:25:13:3d:22:8d:
09:27:c9:8f:59:a1:0b:d6:df:2c:ca:22:95:f8:25:
aa:47:aa:29:10:9d:cd:ef:46:55:0d:ae:cf:18:2b:
f7:13:40:98:57:16:8a:c8:02:41:ab:46:bd:2b:02:
4b:35:cb:79:86:c2:89:12:be:fb:f6:c9:76:f9:53:
03:1b:7d:99:5c:75:3e:ca:a6:f6:e5:06:62:2f:9b:
8a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:55:8C:F7:2A:6C:A2:A5:EE:B0:A8:CA:70:2E:94:55:C8:71:A5:FF
X509v3 Authority Key Identifier:
keyid:04:38:EE:16:FF:8B:C1:84:C8:FA:A1:7A:DA:F5:99:E3:FA:F0:CA:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ca:ef:32:95:b6:b7:7c:5e:c6:a9:40:03:bd:da:fd:fe:70:
a1:0c:73:92:be:87:8a:02:a0:89:5f:5d:98:9f:b6:36:83:7f:
a2:c6:90:c2:4f:a9:c9:bb:6b:1e:b4:fb:91:55:fc:02:5c:5b:
ec:9e:0e:d3:e8:49:c0:c8:73:eb:f8:6a:a5:18:3d:cc:84:0f:
d6:62:38:3e:a5:34:96:4f:9e:1c:2c:3b:b9:b7:21:f0:be:e2:
59:a4:cd:72:00:4f:3a:a6:cb:c7:c8:c5:4a:f6:3a:87:9f:09:
c7:02:54:a3:27:24:9e:c5:ee:f9:69:17:5b:bf:f5:d7:31:8b:
ef:83:f2:73:89:c6:1f:ec:8d:e3:1a:26:74:80:97:eb:91:f5:
db:1f:9e:2f:fd:83:e9:d0:06:c3:60:08:f9:ad:4a:76:32:b7:
b9:32:8c:7c:16:44:b1:be:d5:17:cb:82:90:a1:49:30:33:13:
02:15:6b:90:88:4c:c2:0e:68:f8:06:18:51:c7:4d:4a:51:2d:
a6:55:c7:2d:69:97:2a:b8:4d:49:04:4a:80:0c:5c:26:12:e2:
ae:8d:47:02:24:a5:a8:af:7d:1e:9f:8c:9c:5e:ed:db:2d:32:
14:b3:40:8a:50:81:08:38:54:90:cc:b6:7a:e8:14:4f:9a:45:
36:22:3d:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZR/9KrGoYB9z5L8s59vABaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MzhlZTE2ZmY4YmMxODRjOGZhYTE3YWRhZjU5OWUzZmFm
MGNhNzEwHhcNMjUwNDIwMDcwMDQyWhcNMjUwNDIxMDcwMDQyWjAzMTEwLwYDVQQD
EygyYzU1OGNmNzJhNmNhMmE1ZWViMGE4Y2E3MDJlOTQ1NWM4NzFhNWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0Kc7uxNqGuvHAmraEpc6+KCmRVo
2dKGCjQILhgpBAj1/eviFyZfCkt9hADsZY05uwDO0+lYzb3It9xaCyuFyREF1g/w
SiNZWR9x/iEfWlxD4Kt9FcNsFV7vpvuqEHm4SsxLV/zIU0zK/STa0Z9yOhCAvGl1
Zb+lUGm04Uj4cm/Q84nLV9WC0TKrt0MlhE6zbYNcuqcmZ7gQAUNB6LA6eq5eVjZA
GCvDrdcS8ntEJRM9Io0JJ8mPWaEL1t8syiKV+CWqR6opEJ3N70ZVDa7PGCv3E0CY
VxaKyAJBq0a9KwJLNct5hsKJEr779sl2+VMDG32ZXHU+yqb25QZiL5uK7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxVjPcqbKKl7rCoynAulFXIcaX/MB8GA1UdIwQY
MBaAFAQ47hb/i8GEyPqhetr1meP68MpxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkRqdUZ2LUx3WVRJLXFGNjJ2V1o0X3J3eW5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy80OTBhMjYtZTFmNS00ZmQ1LWJiZmMt
ZmU0NGJiODhiYzIwLzEvQkRqdUZ2LUx3WVRJLXFGNjJ2V1o0X3J3eW5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy80OTBhMjYtZTFmNS00ZmQ1LWJiZmMtZmU0NGJiODhiYzIw
LzEvQkRqdUZ2LUx3WVRJLXFGNjJ2V1o0X3J3eW5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhMrvMpW2
t3xexqlAA73a/f5woQxzkr6HigKgiV9dmJ+2NoN/osaQwk+pybtrHrT7kVX8Alxb
7J4O0+hJwMhz6/hqpRg9zIQP1mI4PqU0lk+eHCw7ubch8L7iWaTNcgBPOqbLx8jF
SvY6h58JxwJUoycknsXu+WkXW7/11zGL74Pyc4nGH+yN4xomdICX65H12x+eL/2D
6dAGw2AI+a1KdjK3uTKMfBZEsb7VF8uCkKFJMDMTAhVrkIhMwg5o+AYYUcdNSlEt
plXHLWmXKrhNSQRKgAxcJhLiro1HAiSlqK99Hp+MnF7t2y0yFLNAilCBCDhUkMy2
eugUT5pFNiI9tw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 14:33:01 2025 by rpki-client