Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft
File: BlpHDbq5wcM08PhfQXzRqkJenxM.mft (raw, json)
Hash identifier: IvqTLaEhot3Suw5O80JI5JfwxEWYhApIZnzQ/JNy0fg=
Subject key identifier: BD:16:8D:5D:44:7E:56:B0:60:C2:07:E2:5C:3A:52:E7:EA:85:B6:A2
Authority key identifier: 06:5A:47:0D:BA:B9:C1:C3:34:F0:F8:5F:41:7C:D1:AA:42:5E:9F:13
Certificate issuer: /CN=065a470dbab9c1c334f0f85f417cd1aa425e9f13
Certificate serial: 01969E9A8D5D118F34A08801FFD62BFA2F6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft
Manifest number: 042A
Signing time: Mon 05 May 2025 04:00:50 +0000
Manifest this update: Mon 05 May 2025 04:00:50 +0000
Manifest next update: Tue 06 May 2025 04:00:50 +0000
Files and hashes: 1: BlpHDbq5wcM08PhfQXzRqkJenxM.crl (hash: rqvJlgSYZxJIDjbO9CEAdzvHtgzPTjDNbPQec+DJ8Ng=)
2: nzavVYcJbw7wiHkfWugRkHLaUpY.roa (hash: 7Fywj4H77E3YoHsXLFEeeVcdvfLNHsgfNSvo5Wn1Yao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:8d:5d:11:8f:34:a0:88:01:ff:d6:2b:fa:2f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=065a470dbab9c1c334f0f85f417cd1aa425e9f13
Validity
Not Before: May 5 04:00:50 2025 GMT
Not After : May 6 04:00:50 2025 GMT
Subject: CN=bd168d5d447e56b060c207e25c3a52e7ea85b6a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ec:60:a2:fb:3c:a6:4f:90:53:1b:6d:ef:91:
e3:67:73:51:d6:8b:48:d3:b9:44:a0:ea:de:62:40:
5f:1a:de:46:79:31:35:64:06:ce:80:06:1c:42:8e:
c4:0b:5f:11:b1:29:e0:6c:5b:56:70:29:90:21:3f:
2c:be:7b:78:91:d0:6e:56:22:66:1d:1e:43:5e:ed:
0e:1c:8c:47:95:17:3a:26:74:d1:76:9a:ba:6f:9d:
2e:b5:4b:66:17:7d:62:7b:21:25:25:c6:d0:cc:a3:
78:5f:df:b1:58:3f:16:e4:1f:a9:16:0f:3e:75:43:
4b:aa:71:9b:2a:b8:5c:98:43:0c:56:a0:46:b6:ad:
8a:1b:6d:75:df:66:ba:83:dc:bf:34:f9:79:a9:d8:
09:4a:f5:4e:90:9a:1b:2e:c4:e8:8e:e7:61:61:eb:
b7:15:c0:b0:17:65:47:10:81:4f:6f:aa:cd:1a:a8:
90:11:2d:0c:f9:be:f6:49:6b:58:53:8a:e9:0a:e1:
cd:bd:8d:df:00:48:f6:98:f2:ff:3e:85:c9:c6:99:
e3:c3:77:d8:66:d8:42:52:fc:98:ca:d5:0d:4f:81:
39:6c:1d:8b:69:d3:40:a8:99:5e:df:86:93:54:64:
98:7a:2f:1b:7c:6e:dd:0e:2e:76:05:8f:a6:08:b0:
12:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:16:8D:5D:44:7E:56:B0:60:C2:07:E2:5C:3A:52:E7:EA:85:B6:A2
X509v3 Authority Key Identifier:
keyid:06:5A:47:0D:BA:B9:C1:C3:34:F0:F8:5F:41:7C:D1:AA:42:5E:9F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:a5:4d:4e:02:21:de:72:46:c2:cf:0f:72:47:38:e6:50:da:
c8:ce:70:38:8c:9a:0d:92:cb:4e:f1:34:cf:89:54:d3:87:8d:
b2:e5:d5:ae:2d:20:84:b9:b4:bb:6f:50:1c:e6:80:4d:92:1b:
27:ae:a5:22:ab:51:ba:b3:1d:7d:3f:7d:5e:e2:de:9f:af:2d:
9c:99:fb:71:8a:38:fc:d1:dd:cb:16:41:c5:e7:d0:a4:94:32:
77:fa:51:db:48:55:69:df:59:3b:fe:3a:da:e3:f0:cb:50:fb:
53:9b:c0:04:f4:9b:9e:9a:ba:de:a9:0a:90:a1:bd:29:a9:a2:
65:57:b1:28:e5:02:d4:d3:75:aa:6c:a6:61:47:b3:85:0d:ab:
1d:54:86:18:5b:43:2a:98:c2:95:db:74:99:8d:41:ee:21:3e:
f0:4e:72:ec:30:b8:ed:a1:4e:aa:ef:24:46:bb:4b:51:1d:50:
19:5e:71:7f:b6:f0:4a:c5:58:0d:b6:84:f7:e5:f6:db:e2:11:
46:d7:0e:fb:d9:a1:16:f0:b1:0d:38:df:24:f9:11:74:e0:30:
9e:69:44:cb:4e:b7:88:3b:3b:81:aa:60:e1:b6:c4:b6:1d:e5:
48:d9:bb:6f:f4:c0:9f:e0:5a:1d:6d:62:59:e0:aa:09:63:03:
f9:42:2d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:02:55 2025 by rpki-client