Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
File: BKMSumXpC_is9PVzJKMMC2y9HC8.mft (raw, json)
Hash identifier: 9xGI5OLUMSRvuUIYEwrEUkpzxK32oGloFSfT5C3/O98=
Subject key identifier: 18:25:AC:1A:DB:AF:B9:3B:7A:38:44:18:1E:45:B2:2F:B5:0A:DA:11
Authority key identifier: 04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
Certificate issuer: /CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Certificate serial: 0196B333D351289EF8EFC3BE008B34DE7342
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
Manifest number: 1531
Signing time: Fri 09 May 2025 04:00:40 +0000
Manifest this update: Fri 09 May 2025 04:00:40 +0000
Manifest next update: Sat 10 May 2025 04:00:40 +0000
Files and hashes: 1: BKMSumXpC_is9PVzJKMMC2y9HC8.crl (hash: FtUfZUvF4/wefunj7IEmu/LZIxk425oJMiJNpInvfBI=)
2: dJFiVvdyRrc-N47GUy0rDR_3aS0.roa (hash: 0F0smXVvhLYj+9BCNow/krceI5xEmMfd4H+/Waw0oTE=)
3: muPUtRREeaPkLT6TOq-93dIjDcU.roa (hash: w+l36y5225njDbQNUe9USPk338011nfDzmjvCmLx+iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:33:d3:51:28:9e:f8:ef:c3:be:00:8b:34:de:73:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Validity
Not Before: May 9 04:00:40 2025 GMT
Not After : May 10 04:00:40 2025 GMT
Subject: CN=1825ac1adbafb93b7a3844181e45b22fb50ada11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1b:b9:34:d3:f0:11:b0:11:db:7d:21:b8:81:
a6:ea:ff:d2:f2:05:12:eb:24:80:89:4e:6a:1b:23:
70:95:c2:cd:b5:aa:c0:f6:a0:05:8c:81:36:25:fa:
b6:5a:4c:cc:b8:4d:bf:1c:26:46:6e:0a:fa:06:72:
e4:21:39:07:22:37:6e:db:b6:af:fe:1c:f0:4c:a0:
46:92:be:5a:14:02:37:eb:77:e6:15:82:7e:09:d6:
a1:a4:17:56:ee:44:82:b0:e7:e8:17:47:91:ab:51:
72:54:69:e1:8a:d3:27:fd:ac:04:62:35:0e:99:a7:
91:9b:49:73:31:9b:6d:de:7a:ae:99:1e:7e:09:fb:
31:1d:6c:00:4a:34:54:6d:f7:6d:d9:7b:27:95:10:
55:2a:3e:1b:81:ff:5a:bc:bb:5c:0a:49:b3:69:b1:
f1:aa:57:53:0f:46:e2:69:d5:4a:b3:2e:81:45:7f:
9a:8b:ab:09:db:0b:9b:ad:70:96:d6:2d:0d:c1:67:
08:ef:99:f6:15:8e:99:cb:be:66:7d:dc:a6:7c:82:
97:19:5c:78:0a:db:ba:40:e3:9e:0a:62:ce:df:cc:
6a:b2:d2:51:df:86:72:54:d1:5b:e2:18:b1:6d:81:
49:95:59:68:72:5c:b2:eb:af:d0:2b:be:60:61:86:
8d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:25:AC:1A:DB:AF:B9:3B:7A:38:44:18:1E:45:B2:2F:B5:0A:DA:11
X509v3 Authority Key Identifier:
keyid:04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:14:d5:fe:5d:09:fa:d1:22:24:04:8d:4c:be:76:03:2a:6c:
7e:71:d4:7a:15:1d:a2:22:3c:29:5e:56:ee:76:69:ff:fa:e3:
53:1f:d3:09:02:88:13:5e:b5:00:45:f9:fa:78:6c:90:67:b8:
ad:8f:13:c4:21:2a:f2:8a:85:9c:d7:6c:26:9e:8d:c8:2a:84:
a6:b9:60:44:ea:b3:4f:32:c3:ea:67:1d:61:97:f3:65:a5:4f:
27:fd:53:22:d3:71:a4:46:a4:dd:f3:76:36:6b:4b:d4:37:14:
78:83:eb:64:19:48:3b:58:d9:3e:69:31:8f:fc:5d:96:8e:43:
fe:6c:c0:12:5e:58:95:c0:66:c1:f1:18:3f:76:72:a9:e6:c1:
6c:97:e0:d4:9f:5c:db:91:22:ed:e0:ae:e0:6d:8d:73:1b:14:
28:dd:b7:a2:ab:1c:1c:71:41:e5:02:24:a6:27:58:6f:b9:d1:
db:ef:34:88:21:6d:bc:8d:b5:f2:21:a8:5b:da:17:c0:56:d5:
8b:81:77:03:90:17:9e:45:f3:c4:74:fc:fa:01:73:4d:03:60:
62:ec:eb:1b:29:0e:7e:d1:41:52:29:7e:6e:00:f8:9a:72:b0:
1a:a1:4d:3d:02:70:5d:24:ef:f8:cc:dd:3e:62:d3:f3:bc:a3:
e3:5c:e9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:38:35 2025 by rpki-client