Manifest
$ rpki-client -vvf rpki.leitecastro.com/repo/CASTRO-INTERNET/0/BC5BDB97E9476F50638158886D4D97026A5B7AA6.mft
File: BC5BDB97E9476F50638158886D4D97026A5B7AA6.mft (raw, json)
Hash identifier: rep2trTzqaWdlLxOyyDtqokZzPhdVZRm0wu2qftWIKA=
Subject key identifier: 50:E8:8F:26:08:EC:82:1F:05:EF:91:90:4C:68:4B:AA:50:36:58:0A
Authority key identifier: BC:5B:DB:97:E9:47:6F:50:63:81:58:88:6D:4D:97:02:6A:5B:7A:A6
Certificate issuer: /CN=bc5bdb97e9476f50638158886d4d97026a5b7aa6
Certificate serial: 367DEE22BA0CEBD5BB47AFFC7BAC6D1D3612A528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFvbl-lHb1BjgViIbU2XAmpbeqY.cer
Subject info access: rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/0/BC5BDB97E9476F50638158886D4D97026A5B7AA6.mft
Manifest number: E5
Signing time: Sat 28 Jun 2025 06:17:24 +0000
Manifest this update: Sat 28 Jun 2025 06:12:24 +0000
Manifest next update: Sun 29 Jun 2025 07:02:24 +0000
Files and hashes: 1: AS200454.asa (hash: 5ierbdftTasYYliO8P+/cOpYHUCY6FUT2qUaoszJWOo=)
2: BC5BDB97E9476F50638158886D4D97026A5B7AA6.crl (hash: KiAfQ3MyU8C7fQ+5WnC+QeAJm8YRyr5iLLOaZ38SYN0=)
Validation: OK
Signature path: rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/0/BC5BDB97E9476F50638158886D4D97026A5B7AA6.crl
rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/0/BC5BDB97E9476F50638158886D4D97026A5B7AA6.mft
rsync://rpki.ripe.net/repository/DEFAULT/vFvbl-lHb1BjgViIbU2XAmpbeqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 07:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:7d:ee:22:ba:0c:eb:d5:bb:47:af:fc:7b:ac:6d:1d:36:12:a5:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc5bdb97e9476f50638158886d4d97026a5b7aa6
Validity
Not Before: Jun 28 06:12:24 2025 GMT
Not After : Jun 29 07:02:24 2025 GMT
Subject: CN=50E88F2608EC821F05EF91904C684BAA5036580A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ba:c7:60:b5:ae:d0:85:76:72:fe:e8:d9:a8:
b7:a7:5c:fc:e7:a2:a3:0d:c4:82:70:46:27:cc:20:
95:cc:d2:40:67:e7:da:0c:3b:13:b6:bd:c8:17:1e:
da:75:6c:fe:23:7e:2a:ff:2e:fc:7e:cb:8f:55:b1:
9a:00:44:42:61:1e:5b:d2:b9:3d:55:1c:fb:68:28:
d8:a7:7c:43:a6:86:b4:31:9c:c9:cd:1a:f3:df:17:
50:30:46:b0:00:ec:0f:37:4d:fd:15:32:01:e2:e9:
30:1a:cd:74:9f:67:31:fc:37:52:d1:24:9c:f4:54:
4b:9d:a7:88:88:61:6a:44:99:c5:71:70:aa:b7:55:
64:4a:f0:ab:4b:12:fa:ef:6a:46:ac:5a:5f:f1:ac:
25:13:04:8c:9b:d6:1c:29:15:f2:44:fc:22:ab:0a:
90:6e:df:19:27:ac:c4:14:93:b9:ba:75:1d:96:c2:
67:b1:5b:30:07:98:76:f3:b1:89:5b:be:95:1d:b0:
84:1e:46:50:25:6c:1f:38:b4:93:06:f1:40:bc:09:
0b:8b:57:19:2a:b8:20:81:57:46:4e:ae:82:b3:57:
b0:f2:80:d2:7c:85:8c:dc:ab:73:72:e7:9f:ff:f4:
ff:0d:4b:67:09:c8:c1:46:70:c7:19:60:96:27:38:
13:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E8:8F:26:08:EC:82:1F:05:EF:91:90:4C:68:4B:AA:50:36:58:0A
X509v3 Authority Key Identifier:
keyid:BC:5B:DB:97:E9:47:6F:50:63:81:58:88:6D:4D:97:02:6A:5B:7A:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/0/BC5BDB97E9476F50638158886D4D97026A5B7AA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFvbl-lHb1BjgViIbU2XAmpbeqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/0/BC5BDB97E9476F50638158886D4D97026A5B7AA6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c6:4c:69:3e:9b:53:87:93:e4:17:bd:0f:84:7a:7c:64:45:
35:5e:83:3a:e6:e4:60:e3:be:57:a8:07:4a:63:bd:b3:7b:c3:
1a:f3:3f:73:66:51:e9:45:75:dd:d5:1f:55:08:13:c2:30:7f:
47:c2:c7:44:88:d6:08:fd:46:3c:23:62:fd:ea:6d:70:d6:36:
4c:4d:dd:88:ad:ae:c5:c6:01:3c:6e:8a:a8:86:7d:4c:9e:9a:
75:89:ac:37:1f:3a:78:4a:70:bd:ab:42:88:dc:c8:13:0b:8d:
a9:b3:e9:a1:59:b5:87:12:df:93:62:a5:49:d9:d2:3e:31:d7:
79:82:c2:a7:11:55:1e:60:74:d1:92:20:bb:09:05:78:70:f9:
17:f5:08:4f:01:ce:bd:45:21:e1:73:38:18:18:a6:ed:ed:60:
0f:59:23:dd:b5:c4:52:27:44:db:57:13:2f:5c:9b:cb:d9:3f:
9d:e9:d1:0c:7b:12:23:64:76:21:4a:2d:19:24:4d:78:64:6d:
73:7f:7d:a2:aa:74:0c:02:2f:c8:8e:60:97:bf:40:95:fd:24:
42:3a:59:5c:a4:d7:2c:2e:7b:fa:de:bf:85:75:54:f8:36:7f:
7e:40:fe:09:7a:5a:de:eb:6e:52:43:57:c5:84:27:50:76:d8:
df:c9:56:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:40:32 2025 by rpki-client