Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
File: BCrDgmiWh7YPzlzp24h7IdaKarw.mft (raw, json)
Hash identifier: 2R59QZ5rSylgZJgxStds2ZuGtv4aofIDxURCnuH0CmM=
Subject key identifier: BB:D1:83:A3:A8:74:FC:AE:08:17:00:4B:34:0A:46:79:AF:27:69:09
Authority key identifier: 04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
Certificate issuer: /CN=042ac382689687b60fce5ce9db887b21d68a6abc
Certificate serial: 0196C83B2C09616BFF9781CF01C6DBEA650D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
Manifest number: 153E
Signing time: Tue 13 May 2025 06:00:43 +0000
Manifest this update: Tue 13 May 2025 06:00:43 +0000
Manifest next update: Wed 14 May 2025 06:00:43 +0000
Files and hashes: 1: BCrDgmiWh7YPzlzp24h7IdaKarw.crl (hash: 4zPTayDB+/W3LzRoE7po62MZWC/zmI7BrK9YBjT4ocY=)
2: Lh8yvuYECQW6dDow2L76nBGsr6E.roa (hash: 0hiYjVR3RerVN9RXXudfA5pr9cnXHHQqw5O/Jaf9Snc=)
3: vtX7rusa6fZMmF3lc_ZvTTSyZII.roa (hash: /Q3goqDnJ6EwR3K+qh2LYwfBLshEeT0YC75y12sQLG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:3b:2c:09:61:6b:ff:97:81:cf:01:c6:db:ea:65:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=042ac382689687b60fce5ce9db887b21d68a6abc
Validity
Not Before: May 13 06:00:43 2025 GMT
Not After : May 14 06:00:43 2025 GMT
Subject: CN=bbd183a3a874fcae0817004b340a4679af276909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:70:fa:fd:c4:68:83:4f:16:62:d2:45:68:7e:
e2:0d:4e:a5:e3:c4:66:86:2d:79:2f:6f:cc:c8:38:
c4:5d:c3:46:74:87:dd:13:1c:2c:09:fe:db:a7:56:
34:e1:25:d1:b0:f4:20:19:70:94:cb:16:08:5f:ea:
49:94:ac:53:7e:29:84:29:ca:cf:94:c7:48:c1:31:
16:00:44:04:67:9c:97:00:9f:bd:ee:be:96:e5:03:
41:e2:7e:8d:16:ac:67:ce:b7:66:65:b1:7a:9f:eb:
a2:ff:a8:0c:2a:de:ed:09:a1:47:4e:04:0b:57:c4:
58:00:41:fe:e8:f7:28:ec:d1:02:ec:3d:71:94:e3:
3f:8d:63:06:e9:a1:f3:df:df:64:33:21:d2:8d:6d:
c9:dc:65:b2:ac:cd:7a:b0:b6:07:77:ac:55:bc:f6:
16:ab:1d:be:52:a9:64:78:3b:0e:82:ac:a3:d4:5b:
0c:a5:70:5b:87:23:dd:b7:8d:c7:80:0f:e2:f6:10:
9a:0b:57:6a:2f:f4:18:c5:e7:ad:22:87:39:9e:d6:
90:e2:3e:38:25:05:44:da:68:f8:aa:a7:91:a9:f9:
af:4f:e9:4e:ab:a3:34:88:3c:7f:0c:6d:d4:43:d8:
7d:2b:ea:a7:ea:4c:7f:03:69:81:72:fe:b0:a6:96:
1f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D1:83:A3:A8:74:FC:AE:08:17:00:4B:34:0A:46:79:AF:27:69:09
X509v3 Authority Key Identifier:
keyid:04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:9f:f8:b2:c7:72:97:a2:89:10:56:16:6f:e7:53:08:e9:7d:
74:57:b6:b3:2f:b2:d5:08:55:56:d2:c4:20:f7:ec:37:07:2c:
8d:86:c4:6e:7a:14:8c:95:9d:70:be:06:16:3e:bf:d2:29:6a:
8c:ac:ee:c6:72:9f:05:8e:60:dd:84:f3:39:59:91:03:7d:19:
d7:44:ba:9c:2a:c2:3b:b5:21:a2:4f:92:64:39:da:2e:f3:33:
7a:bc:a5:14:30:01:2a:24:c3:fa:83:df:ae:9a:eb:ff:26:91:
84:2a:d5:55:e2:4d:b9:7e:32:8e:2c:99:7f:6a:d2:01:97:17:
cb:82:fa:96:d2:d5:03:32:e4:8e:28:3a:83:3b:a1:75:18:0b:
1a:5c:83:86:50:fd:e4:dc:55:a8:67:6c:57:30:41:b9:a6:ed:
cb:47:c7:be:e8:01:03:97:5d:d9:f3:b9:0d:e9:66:5a:79:83:
d3:fe:0d:24:1f:c3:bf:a1:28:33:dc:c7:51:1a:db:46:0b:e4:
46:8c:5d:cb:10:03:80:4b:85:7d:d7:1e:65:76:92:3a:b9:7c:
ea:5c:ea:2f:97:df:ae:dc:ae:62:d8:4a:8f:1a:4d:04:e1:48:
96:1c:9a:9a:f6:5d:a2:f4:da:d6:71:11:18:ff:3b:36:f7:d1:
2d:c8:32:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:13:16 2025 by rpki-client