Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
File: BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft (raw, json)
Hash identifier: vMV0lQW/N9IuEW5/9YsCxMV5XbZrV2UvILGqp5u3CQU=
Subject key identifier: 4A:46:00:E7:BC:8F:9C:31:88:02:AA:10:B2:D3:CB:00:88:1C:D2:BF
Authority key identifier: BC:09:F1:50:8E:1B:C1:1B:EE:CB:80:8E:5B:01:E6:F5:DB:8D:81:68
Certificate issuer: /CN=bc09f1508e1bc11beecb808e5b01e6f5db8d8168
Certificate serial: 5558E55B4CFC471FA652A314EC47005283C1828D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
Manifest number: 028B
Signing time: Fri 06 Jun 2025 14:50:12 +0000
Manifest this update: Fri 06 Jun 2025 14:45:12 +0000
Manifest next update: Sat 07 Jun 2025 15:30:12 +0000
Files and hashes: 1: BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl (hash: sDYoA4Wgohq7zFEhOy/3KTuVtGnvv8gvRWHiw11bD24=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl
rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:30:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:58:e5:5b:4c:fc:47:1f:a6:52:a3:14:ec:47:00:52:83:c1:82:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc09f1508e1bc11beecb808e5b01e6f5db8d8168
Validity
Not Before: Jun 6 14:45:12 2025 GMT
Not After : Jun 7 15:30:12 2025 GMT
Subject: CN=4A4600E7BC8F9C318802AA10B2D3CB00881CD2BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ed:f4:dd:32:2b:11:cf:fd:cd:77:12:fd:9a:
3d:4f:6c:31:40:21:4b:d5:4d:07:9b:7c:6e:63:75:
29:92:cf:49:40:a4:a2:ee:9a:37:01:ae:d4:3d:8b:
fb:3f:4f:93:ed:71:43:4a:d8:5e:0d:94:55:95:cc:
72:49:76:51:22:9a:18:45:32:c6:3c:ac:4b:45:0e:
f6:30:d3:84:0b:72:69:a3:c6:a7:18:4a:5a:2a:46:
44:b0:1f:d6:02:4e:55:6c:f0:b0:8b:e7:41:93:14:
6d:4d:4a:fa:8b:5d:7f:20:63:6a:2c:09:73:a5:eb:
46:21:18:ae:be:ad:3a:cd:fd:f2:02:f7:ab:d7:7e:
fe:83:75:32:d7:12:0e:2f:57:d1:d9:e8:25:10:b0:
3e:fe:aa:57:e5:62:83:66:a4:03:b7:5a:3d:14:60:
9b:c8:0c:13:12:42:27:01:b7:6b:08:9c:13:14:82:
8a:53:71:58:6f:41:ce:cd:a5:83:f9:98:83:c5:9e:
82:18:a4:9b:6a:1f:4c:b0:f2:ad:11:2e:2b:0d:f9:
89:a4:03:45:85:1e:98:95:95:d2:4e:fe:60:ad:59:
81:99:81:7d:59:bc:a3:37:7a:1c:14:9e:30:ae:8e:
6e:26:32:1f:39:fc:50:9f:54:a6:e0:36:e3:ef:1d:
0d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:46:00:E7:BC:8F:9C:31:88:02:AA:10:B2:D3:CB:00:88:1C:D2:BF
X509v3 Authority Key Identifier:
keyid:BC:09:F1:50:8E:1B:C1:1B:EE:CB:80:8E:5B:01:E6:F5:DB:8D:81:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:94:49:ea:9a:1c:23:6e:26:bf:03:df:9c:5a:8f:15:08:8a:
e9:f9:6c:4a:b4:4c:0a:d7:60:ea:e9:9a:b5:b6:95:60:f3:7b:
6d:15:00:03:13:6f:88:cb:cd:ff:3e:68:ad:eb:b8:f8:8e:09:
1e:7f:93:55:8d:72:ad:9a:85:07:6a:62:8c:b5:5b:d2:40:78:
c0:fa:8d:bd:a4:be:24:2c:c7:17:5e:4c:28:a0:26:66:b3:a4:
b0:32:0b:86:1f:99:4a:9c:5f:f3:47:4d:2b:4b:c2:3b:74:3b:
3b:0d:db:58:19:ce:f3:55:16:10:39:43:9b:a2:3d:be:6e:27:
ef:67:58:dc:7a:d4:46:07:40:1f:5a:b0:7b:7f:51:bf:f6:b6:
f1:5c:d0:60:36:e1:6e:64:55:fa:c1:70:e4:1a:93:35:74:46:
3a:1c:75:0f:81:be:cb:3d:e7:86:9e:da:99:65:1e:b7:f0:ea:
cf:4b:55:1e:1b:6e:dd:42:a0:66:62:8c:5b:df:41:a0:cc:a3:
f1:ca:c3:b6:97:22:34:be:60:8c:ed:e2:0f:8b:fa:c3:44:6e:
cd:fe:95:04:6f:b5:bc:e4:10:e9:ec:9b:b9:f1:c2:6f:94:68:
7f:21:c8:d4:d4:85:b3:ba:e1:90:43:b0:b8:15:c0:3c:1f:99:
1d:be:3e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:24:30 2025 by rpki-client