Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
File: BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft (raw, json)
Hash identifier: nznqUbo1KwacyCrt31l/UtDFnrPBZiAmcTIYeG3xuqk=
Subject key identifier: EE:F0:DE:39:5F:EC:40:85:EA:B6:02:6F:E4:9E:2F:A6:E8:7F:51:2B
Authority key identifier: BC:09:F1:50:8E:1B:C1:1B:EE:CB:80:8E:5B:01:E6:F5:DB:8D:81:68
Certificate issuer: /CN=bc09f1508e1bc11beecb808e5b01e6f5db8d8168
Certificate serial: 0905A09C0D797B28463DBF78C372778B3C268C19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
Manifest number: 024C
Signing time: Sun 20 Apr 2025 07:37:39 +0000
Manifest this update: Sun 20 Apr 2025 07:32:39 +0000
Manifest next update: Mon 21 Apr 2025 09:49:39 +0000
Files and hashes: 1: BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl (hash: 7hTBaGkYkbN5HAf/fRW+FWbF+JbKJciiZilAw+s9Wk0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl
rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 09:49:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:05:a0:9c:0d:79:7b:28:46:3d:bf:78:c3:72:77:8b:3c:26:8c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc09f1508e1bc11beecb808e5b01e6f5db8d8168
Validity
Not Before: Apr 20 07:32:39 2025 GMT
Not After : Apr 21 09:49:39 2025 GMT
Subject: CN=EEF0DE395FEC4085EAB6026FE49E2FA6E87F512B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ca:e6:fe:51:f4:12:6d:cf:d9:64:2e:c9:1a:
1f:c4:d0:a9:fa:48:b8:6c:b0:6f:2b:25:fb:1a:69:
03:cf:ac:61:27:43:a0:90:2e:0c:26:45:d8:29:db:
2b:62:1a:e9:9c:16:3b:ae:e2:da:af:41:ed:5e:36:
d4:f1:4e:4b:84:6d:dd:3d:33:f3:d8:59:2b:6c:bf:
a5:ae:ef:05:bc:d5:04:de:20:db:82:d2:37:23:cb:
df:77:50:e9:d6:79:a8:37:d4:6e:b6:6f:8c:c5:11:
e0:4c:91:d3:e5:1c:a0:4b:d9:e6:c7:42:85:11:28:
f0:ff:d3:d1:05:f9:5b:be:ef:29:c1:6d:49:b3:1b:
dc:5e:a5:7c:68:21:58:69:44:e1:ed:e4:d8:f2:8a:
dd:d1:da:89:ee:55:f9:ba:67:71:a1:7f:69:fa:0f:
3c:c8:67:16:be:86:b1:b1:54:05:10:fb:0c:22:65:
fc:2c:c2:f6:bc:7d:cc:a0:18:05:5c:d9:d1:db:9d:
3d:55:46:31:b4:19:a3:3b:a1:ba:f4:35:89:83:2b:
94:b1:07:1f:a6:81:20:ca:f8:e8:e9:e4:07:6e:aa:
58:6c:e0:ba:94:9a:f2:e5:33:ba:49:e0:1e:2a:13:
31:28:4c:a1:dc:ab:8e:48:58:5a:a9:1e:41:08:49:
ae:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F0:DE:39:5F:EC:40:85:EA:B6:02:6F:E4:9E:2F:A6:E8:7F:51:2B
X509v3 Authority Key Identifier:
keyid:BC:09:F1:50:8E:1B:C1:1B:EE:CB:80:8E:5B:01:E6:F5:DB:8D:81:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:38:aa:d0:58:37:b2:9c:89:e5:07:64:cc:30:6a:57:9c:d9:
57:b3:bc:42:a7:4a:41:ba:19:12:98:ca:3f:be:1d:6d:a5:67:
f8:9e:1a:ca:99:b7:53:e0:6b:a1:56:af:fe:0a:80:81:dc:fa:
6c:38:f0:0b:47:64:62:23:ef:35:2f:24:a2:4e:27:7c:c1:1f:
8d:db:25:86:36:87:eb:41:d3:ec:df:5f:bd:5f:d8:6b:44:f1:
30:7e:54:55:ed:0b:c7:96:f3:e2:e1:df:c4:3d:5b:d7:25:8b:
e6:4f:3a:1f:f5:49:e1:6d:e4:5a:e5:03:2b:d7:8d:cc:44:cc:
c3:8f:c7:dc:81:0f:72:35:e7:20:dd:fa:03:cc:30:c6:a6:2f:
6a:91:fe:14:41:99:3a:e0:e6:bb:83:13:82:ed:0b:2c:eb:39:
3f:30:dd:0d:3f:00:6f:8f:f6:ef:f6:c0:b5:94:9d:93:27:d4:
25:92:b4:9b:2d:13:b1:cc:11:e2:60:8f:58:bf:05:88:e8:82:
b9:43:25:81:23:85:32:b0:15:de:83:70:11:5a:86:ff:4d:1c:
ce:9b:19:20:a4:cb:80:83:ab:95:a3:c7:de:3b:26:f2:79:13:
3c:a8:93:f6:2a:42:e2:de:23:da:b1:b0:a8:46:d9:dd:8b:59:
06:0c:46:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:11:17 2025 by rpki-client