Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
File: BaCPua9NbK_M-uOyjsbtScQj78Y.mft (raw, json)
Hash identifier: 0JYjEsjpUAvIrHhVVTbrucG/eMyn7tsMM5hrA+wPLQE=
Subject key identifier: DD:12:A0:B1:4A:CC:F1:FC:7C:0E:33:5E:0B:45:2C:39:87:2C:A6:B0
Authority key identifier: 05:A0:8F:B9:AF:4D:6C:AF:CC:FA:E3:B2:8E:C6:ED:49:C4:23:EF:C6
Certificate issuer: /CN=05a08fb9af4d6cafccfae3b28ec6ed49c423efc6
Certificate serial: 0196D81BF7FC0FB65BAC84AFD3C0C319688F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
Manifest number: 10F3
Signing time: Fri 16 May 2025 08:00:33 +0000
Manifest this update: Fri 16 May 2025 08:00:33 +0000
Manifest next update: Sat 17 May 2025 08:00:33 +0000
Files and hashes: 1: BaCPua9NbK_M-uOyjsbtScQj78Y.crl (hash: mM7KLrOfCrTocVbVlXSQKSgnn45cJfmZxiWOHr20cfU=)
2: SGQBvdPhJeyzXH46rCn1HprgoUQ.roa (hash: JigxCYquveWyuHmkXH4kT+LxBtbk4j6Ry0hBrLIoDFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:1b:f7:fc:0f:b6:5b:ac:84:af:d3:c0:c3:19:68:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a08fb9af4d6cafccfae3b28ec6ed49c423efc6
Validity
Not Before: May 16 08:00:33 2025 GMT
Not After : May 17 08:00:33 2025 GMT
Subject: CN=dd12a0b14accf1fc7c0e335e0b452c39872ca6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2d:20:32:83:74:ab:ed:39:86:fe:69:ad:5f:
3c:08:a0:6a:59:35:ca:f8:25:83:aa:44:54:b1:27:
ec:6a:fd:8f:69:44:f6:a7:29:e0:a2:5e:a4:2f:53:
1e:01:ed:56:cc:51:3b:28:ec:be:68:bd:3c:55:36:
3c:a5:99:cc:94:80:bc:7f:3e:f6:96:40:5d:6d:d5:
05:4b:4c:8b:30:39:74:2a:c4:40:56:5b:52:b6:3a:
af:aa:cd:66:b0:82:31:68:e8:84:96:bf:a2:b6:25:
21:c9:1c:fd:04:e6:2a:20:f1:3a:f6:fb:82:1f:a2:
81:76:94:ad:fd:e5:86:bf:3c:b0:ce:46:9a:b4:69:
d4:3e:4b:36:b9:79:56:00:b4:eb:c0:9f:a2:db:6b:
57:9d:fc:9b:f3:df:33:89:44:20:86:ca:a2:75:20:
07:23:78:69:24:87:57:0e:d8:fd:05:77:43:74:e7:
03:cc:3c:3f:d1:1d:68:41:3a:2e:2e:af:8e:57:54:
56:0c:15:3a:76:f8:28:06:9a:fa:ac:3c:b9:dc:66:
2e:d4:a3:5d:08:93:31:9b:9e:7f:86:94:fd:45:45:
58:0b:e5:bc:ac:37:19:2c:ce:00:e9:a9:34:0b:9c:
7b:0f:47:52:ca:76:f9:9e:03:23:1b:9a:f4:85:dc:
2b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:12:A0:B1:4A:CC:F1:FC:7C:0E:33:5E:0B:45:2C:39:87:2C:A6:B0
X509v3 Authority Key Identifier:
keyid:05:A0:8F:B9:AF:4D:6C:AF:CC:FA:E3:B2:8E:C6:ED:49:C4:23:EF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:75:31:49:f1:e5:37:f3:06:cc:42:d8:9b:90:58:e5:b5:a6:
bc:e0:c9:93:38:b0:b3:83:a4:bb:b2:8c:21:57:7f:74:6d:e3:
a3:6a:d2:6e:8d:7e:41:a8:64:15:ae:26:55:ce:38:5b:ca:cd:
7c:59:b6:df:fe:51:dc:77:48:3f:a8:0f:c3:12:30:ae:7b:9d:
6c:60:37:e7:44:35:af:7f:a2:94:8a:72:83:1e:54:b1:48:e2:
9d:c2:7e:00:7c:dd:0c:da:ae:5f:85:9c:4e:94:63:a7:f7:2a:
ab:02:b4:32:35:df:8d:53:91:cb:1d:91:16:28:ee:e8:15:83:
2b:c7:29:e5:9a:d1:aa:6f:33:d6:f0:a1:37:45:ba:66:91:e8:
be:85:e1:b5:a9:fb:e8:34:8b:05:03:f7:04:55:d1:6a:2b:d7:
6f:9a:4e:c6:39:44:49:c9:5f:8b:fa:76:d7:59:b6:88:dc:4c:
0a:a7:32:2a:b5:b3:3f:74:04:46:b3:3d:a7:34:92:06:5d:cb:
29:fa:46:c9:65:fd:cc:fe:18:d8:6b:d7:a2:5a:3e:87:47:a3:
df:70:47:d3:03:e7:aa:7a:43:1b:cb:cb:b5:21:7a:38:61:fb:
4d:9c:05:2d:98:86:c1:93:e8:44:ee:7f:e2:96:87:6f:21:64:
e0:98:d4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 12:11:52 2025 by rpki-client