Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
File: BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft (raw, json)
Hash identifier: FpUGh1XnFQn7NKPAstX36YVBa1DsYame1eXxlVABHvM=
Subject key identifier: BA:91:20:43:F7:CB:6E:AD:7E:2D:B1:6A:99:DB:15:DA:11:66:20:58
Authority key identifier: 04:90:43:47:A2:36:1A:CE:D7:C3:70:F7:44:6D:E7:08:27:7E:E6:D1
Certificate issuer: /CN=04904347a2361aced7c370f7446de708277ee6d1
Certificate serial: 0196B17C17F24DBD7E3CADF85384E14F5317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
Manifest number: 042D
Signing time: Thu 08 May 2025 20:00:21 +0000
Manifest this update: Thu 08 May 2025 20:00:21 +0000
Manifest next update: Fri 09 May 2025 20:00:21 +0000
Files and hashes: 1: BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl (hash: vCvqXoVSTQnx6pq2iIIKooimGwa2QQeHmMvLAholK8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:7c:17:f2:4d:bd:7e:3c:ad:f8:53:84:e1:4f:53:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04904347a2361aced7c370f7446de708277ee6d1
Validity
Not Before: May 8 20:00:21 2025 GMT
Not After : May 9 20:00:21 2025 GMT
Subject: CN=ba912043f7cb6ead7e2db16a99db15da11662058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a5:b9:0d:9e:5f:26:93:95:28:95:fb:37:4e:
97:bb:28:04:65:7d:33:24:42:c9:07:0d:eb:9a:92:
f2:3a:eb:6b:a2:93:bd:56:78:57:a5:9b:a3:50:f4:
84:99:3f:d5:40:ba:a2:03:0e:03:16:2a:f9:e9:ec:
3c:6c:f0:eb:a0:a5:53:6e:f7:b0:f6:93:61:85:c3:
f8:04:7b:90:af:62:a0:51:de:91:1f:1c:6c:f0:f2:
ee:ff:31:01:0b:61:ca:9e:a1:aa:d2:b4:b0:1d:8a:
f1:85:a2:16:a4:7e:e2:5b:24:1c:47:47:0f:2e:8c:
7d:24:da:2e:1e:c6:00:21:99:04:9e:6d:b0:04:22:
33:62:0f:0b:34:a9:c2:ad:47:87:96:c2:4e:59:a0:
87:b0:d7:62:fd:0d:84:a4:46:fa:e8:19:2b:98:35:
86:06:fb:db:9f:41:ff:79:4d:40:47:14:ca:2c:77:
51:7b:cd:44:cd:14:57:6b:98:13:e4:bb:78:11:91:
34:4d:c8:49:14:63:2f:7b:4f:89:9e:45:3a:e6:c6:
82:a8:49:96:36:43:19:3e:1b:92:68:04:3b:d6:0b:
5c:64:d7:10:e9:7e:70:5f:eb:5f:fa:2a:c9:18:2f:
02:ca:ae:f7:fd:e3:38:75:ea:c4:2c:8d:6a:b7:45:
d8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:91:20:43:F7:CB:6E:AD:7E:2D:B1:6A:99:DB:15:DA:11:66:20:58
X509v3 Authority Key Identifier:
keyid:04:90:43:47:A2:36:1A:CE:D7:C3:70:F7:44:6D:E7:08:27:7E:E6:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:25:a9:8f:9e:3d:1b:aa:ab:fc:9d:f7:9e:bf:ec:a1:6f:71:
1c:30:4d:20:59:62:5b:e1:95:af:bd:5f:ee:1b:d0:af:12:42:
94:5d:22:8d:43:c3:bf:85:aa:72:fe:8e:b4:81:87:4f:4f:b5:
4e:e1:7d:e2:06:9a:4a:20:18:ba:92:8e:a2:67:c8:7a:2b:8d:
54:f6:1b:da:77:46:8e:dc:a5:fd:d2:cf:66:f1:f3:29:81:20:
e8:a2:bb:7d:ad:bf:cd:6d:cd:73:aa:8a:8a:b9:51:b6:55:2b:
20:05:24:ea:ae:e5:7f:39:07:1a:e4:aa:81:34:21:e2:d2:e3:
16:a2:07:ec:0b:06:1a:a7:9e:ac:b1:07:d4:d2:7c:8c:46:b2:
5b:11:8c:8d:f0:87:92:f3:ae:e9:fe:09:84:55:4e:2f:9c:9b:
f7:b5:41:3b:8e:36:8c:b9:31:28:81:90:da:76:4e:ab:a0:27:
dd:17:02:e0:8c:b0:ee:bd:77:3d:b4:61:ca:2e:c6:93:45:6f:
f4:85:1b:62:2d:9f:db:0a:1c:72:c1:6a:7d:c4:8b:00:fa:39:
15:12:7e:d7:02:0e:8e:e8:47:78:c4:db:4d:68:20:eb:07:12:
0a:35:b3:7c:2e:12:1f:c4:a9:58:2d:5e:89:29:49:3c:87:04:
80:22:50:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:26:25 2025 by rpki-client