Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
File: BYgfNX6maA3eUqKpv7u27UOF2Nk.mft (raw, json)
Hash identifier: W8Tw0d+UgpNUfLsQcLAXLBPj8B1dDIKyZhBfG5Q1Pk8=
Subject key identifier: 97:5D:50:63:D4:06:D5:7B:04:76:47:50:6E:74:C0:D3:CE:96:FD:E7
Authority key identifier: 05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9
Certificate issuer: /CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9
Certificate serial: 0196B9DA632C4ABA616410B1CBDC2E019D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
Manifest number: 1467
Signing time: Sat 10 May 2025 11:00:19 +0000
Manifest this update: Sat 10 May 2025 11:00:19 +0000
Manifest next update: Sun 11 May 2025 11:00:19 +0000
Files and hashes: 1: BYgfNX6maA3eUqKpv7u27UOF2Nk.crl (hash: Rf55P9/OgfJA4YLw1hoT/RdESRdr1wgdc98P+06jHjY=)
2: J4NELhXbzsP0O-fo9Zwk6eyKSHs.roa (hash: PonpGKcr3QXOrmCtfTF4Hg7UZOzqXswPkTn+XjDFr7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:da:63:2c:4a:ba:61:64:10:b1:cb:dc:2e:01:9d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9
Validity
Not Before: May 10 11:00:19 2025 GMT
Not After : May 11 11:00:19 2025 GMT
Subject: CN=975d5063d406d57b047647506e74c0d3ce96fde7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:41:57:dc:7c:9a:9e:ce:c5:55:9e:97:2d:d2:
ce:26:be:64:63:34:52:92:43:10:db:e7:b4:24:37:
b8:66:17:8a:16:1f:fc:0b:31:2e:be:e3:63:97:64:
4a:dc:03:e7:29:f9:e6:53:e5:ea:a8:64:c7:8e:69:
64:b9:58:e5:0b:fa:c4:fa:ef:83:1d:46:3f:21:84:
78:39:80:7b:0b:e9:26:63:15:b2:2f:03:a2:d1:d3:
3a:18:eb:94:25:e0:ad:3c:45:fa:f8:27:f0:23:a6:
d3:57:ba:af:18:eb:b5:47:33:6e:5d:c5:3a:2f:70:
e8:0b:64:e5:8a:59:a8:84:04:5f:f2:bb:7f:2c:67:
ab:0a:85:1c:b4:d1:ec:04:df:0b:49:d3:3d:a6:2b:
69:47:26:78:dd:4e:7a:9f:8d:c6:ba:47:cd:09:81:
5c:2e:cc:2c:55:5e:59:93:ff:66:47:53:05:b3:22:
92:cf:ea:36:00:49:8c:2a:ec:96:e9:e6:56:02:ee:
81:53:8f:85:f6:a9:58:18:22:0e:29:f0:fc:10:c5:
be:34:5b:7d:9c:b4:1c:f5:24:0e:d8:53:a0:b5:e3:
c9:f0:c1:0a:b7:6f:ed:0a:50:21:9e:2e:e4:2e:96:
62:5d:f9:81:13:b0:64:8c:60:ec:6a:14:9f:fe:09:
40:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:5D:50:63:D4:06:D5:7B:04:76:47:50:6E:74:C0:D3:CE:96:FD:E7
X509v3 Authority Key Identifier:
keyid:05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:dc:eb:e0:b2:eb:52:7e:66:f3:ca:3b:08:f2:0d:58:b8:b0:
f2:c2:a1:4d:49:3b:88:d2:b1:ce:f9:08:27:81:ce:9f:38:5a:
03:24:7c:1d:6f:4e:3c:2d:bb:6b:2d:d2:8a:0a:4e:5f:29:dd:
5a:19:8d:24:8a:13:82:eb:e5:28:16:79:a1:08:a0:7e:db:c9:
2b:81:94:ae:48:71:e0:e2:68:df:5b:1d:bb:1b:53:ff:51:e5:
95:0b:9a:6f:b3:4b:f5:47:4f:85:5a:d4:0f:a1:a1:2f:6b:d8:
4f:8c:77:24:06:9f:3b:c5:f8:38:f8:89:6f:09:39:22:9d:b7:
5e:0f:ac:0a:fc:c7:83:06:2b:42:46:6e:50:d5:26:42:e5:9f:
f6:8f:d5:58:0e:93:3e:cd:0a:d2:0b:e7:ed:d4:0e:75:2c:45:
e0:90:3b:68:93:c1:2c:15:69:95:00:3e:1b:ef:88:d5:33:91:
de:43:fe:d1:db:2a:22:5f:3c:31:13:6f:16:9e:bd:f3:5c:a7:
3d:cb:2e:23:24:b7:8a:cc:a3:e0:98:0f:6b:ee:7b:a9:00:2d:
36:77:4e:96:8b:b4:3a:fa:24:43:b8:dc:7f:05:8f:41:08:a8:
47:9c:22:2f:38:19:55:e8:48:7b:aa:b5:7f:a1:62:51:7c:80:
ad:69:7f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:56:24 2025 by rpki-client