Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
File: BcCcQdI4lrLVQoGCYj-I-mdubJA.mft (raw, json)
Hash identifier: 26IiqzvDnHBpfZ1Tak/u0bL0O6AzmU4ggzm6MiJkBOc=
Subject key identifier: 68:94:A7:93:69:BB:E3:D0:C0:CD:70:EF:D7:22:27:12:23:97:36:59
Authority key identifier: 05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90
Certificate issuer: /CN=05c09c41d23896b2d5428182623f88fa676e6c90
Certificate serial: 0196BC6E020E858F70D8D23ABDB27FAAF214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
Manifest number: 1532
Signing time: Sat 10 May 2025 23:00:48 +0000
Manifest this update: Sat 10 May 2025 23:00:48 +0000
Manifest next update: Sun 11 May 2025 23:00:48 +0000
Files and hashes: 1: BcCcQdI4lrLVQoGCYj-I-mdubJA.crl (hash: FL+uct7qLgZ2H84QGBTrQ6ZdZb86KsHwTe8mFbaUK4M=)
2: LjpB0wqPDlAY2LkZEeFhm2QXKMA.roa (hash: 90iV42vsD6bXusmrjQ9UcKOk5lPPv2pkCMxcdhSqD2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6e:02:0e:85:8f:70:d8:d2:3a:bd:b2:7f:aa:f2:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05c09c41d23896b2d5428182623f88fa676e6c90
Validity
Not Before: May 10 23:00:48 2025 GMT
Not After : May 11 23:00:48 2025 GMT
Subject: CN=6894a79369bbe3d0c0cd70efd722271223973659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ef:39:ba:1e:3f:ed:7c:14:78:d1:a1:90:79:
d4:cf:ac:b1:ee:66:53:8f:08:df:5f:75:5e:11:d3:
ef:ee:af:b8:0b:e1:5d:6d:42:d4:f4:3c:fd:ba:eb:
cc:78:e7:dc:ed:c8:38:e0:96:9d:3b:05:02:ac:f2:
69:b3:53:88:db:30:a2:33:df:5d:6e:b4:b5:fd:55:
21:16:b6:29:9b:26:61:a4:4d:cb:c1:49:da:42:3b:
21:0d:b0:2b:8d:d3:7f:ce:fb:2e:29:16:ca:07:9c:
5b:03:ee:35:68:e4:af:58:18:83:4a:05:53:9e:10:
d4:c8:33:b1:15:51:58:20:d0:42:82:c0:95:f2:b1:
84:e7:be:26:bc:90:b6:48:3e:cf:4c:62:57:a7:40:
26:ca:94:85:55:89:1e:ac:ab:9a:86:44:07:7c:f5:
fa:42:80:f8:1d:ee:a4:d7:95:b8:08:60:67:68:da:
14:d5:42:0a:3c:bc:0f:5b:8b:f0:5f:3f:91:d2:07:
bc:ef:f4:ac:b1:f0:1e:ce:33:d4:83:84:66:ac:0d:
13:6e:06:72:33:e2:fc:50:7b:90:9f:56:1f:e9:52:
72:59:c5:d2:e3:7a:09:db:0f:94:23:08:49:66:e7:
c1:84:41:9b:5c:93:aa:81:51:3f:e4:10:f4:4b:e2:
1d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:94:A7:93:69:BB:E3:D0:C0:CD:70:EF:D7:22:27:12:23:97:36:59
X509v3 Authority Key Identifier:
keyid:05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:9a:b8:30:45:a7:33:41:76:c2:9c:44:99:9d:fc:61:1e:39:
e3:75:d6:b6:86:b6:c6:87:ad:f1:c0:cc:de:02:64:f7:d6:1d:
94:2e:da:f5:e3:92:16:e0:09:a9:f2:ca:ff:04:dc:88:9b:2f:
19:12:8c:ed:5c:f9:91:d4:a3:3e:54:65:55:df:6c:64:ff:51:
05:46:a8:a3:82:b0:42:ea:99:9f:0c:1b:7c:97:74:74:d2:6f:
99:8c:ca:ab:2b:44:6f:5d:e6:e5:c6:3d:f5:7a:59:10:26:55:
3f:3b:c2:18:14:dd:d9:c3:bf:e8:8a:d3:04:0d:38:09:f1:e2:
df:65:8d:3d:35:7f:60:5a:79:d1:3e:91:0c:f5:69:cc:ac:75:
33:70:38:7e:74:34:b0:4e:b4:2b:6a:c5:6b:eb:1a:98:48:8e:
4c:12:6e:28:37:b8:96:f3:76:06:6b:47:40:6d:46:c1:a5:a5:
db:50:8c:df:ae:d9:01:67:c5:f6:5d:8c:c8:12:f7:6c:a5:ab:
ce:5a:0c:1a:09:ff:ca:1a:d1:f0:c2:54:e6:e8:a0:60:24:c2:
c8:17:b9:cc:80:87:aa:df:a9:cf:b5:1d:21:6a:66:a6:e9:74:
2f:b7:9f:e7:be:a0:b5:4a:4a:3c:2c:a1:89:69:ae:f8:f7:8a:
f6:f7:46:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:22:42 2025 by rpki-client