Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
File: BfxVV0h24Nb6voqXkcwNNmWv-OY.mft (raw, json)
Hash identifier: Y8gFItjW/WKlpCw/DrJaxHXwh6eaGIGPSO8vkiYsRy4=
Subject key identifier: B4:FB:93:A7:7A:6A:03:58:29:03:BA:B8:EC:CE:75:41:8F:16:95:3E
Authority key identifier: 05:FC:55:57:48:76:E0:D6:FA:BE:8A:97:91:CC:0D:36:65:AF:F8:E6
Certificate issuer: /CN=05fc55574876e0d6fabe8a9791cc0d3665aff8e6
Certificate serial: 0196C15D2B9EB6FE2565BE202EEB1838929F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
Manifest number: 0605
Signing time: Sun 11 May 2025 22:00:30 +0000
Manifest this update: Sun 11 May 2025 22:00:30 +0000
Manifest next update: Mon 12 May 2025 22:00:30 +0000
Files and hashes: 1: BfxVV0h24Nb6voqXkcwNNmWv-OY.crl (hash: PEA0fNvvo0Z4p+4Db+vQaAnAeaIUt41Tuot+kDX3VlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5d:2b:9e:b6:fe:25:65:be:20:2e:eb:18:38:92:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05fc55574876e0d6fabe8a9791cc0d3665aff8e6
Validity
Not Before: May 11 22:00:30 2025 GMT
Not After : May 12 22:00:30 2025 GMT
Subject: CN=b4fb93a77a6a03582903bab8ecce75418f16953e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7d:c4:89:7f:e7:84:21:be:0b:41:63:df:63:
95:b0:58:77:14:fb:b9:d9:47:a4:c1:96:77:fa:29:
78:68:20:f5:1c:3c:c3:35:52:ce:d5:a8:69:85:99:
c4:32:e3:ff:03:09:0b:b6:1f:70:f6:9d:8f:c3:34:
f8:13:70:40:c2:79:03:a1:2a:c5:cb:e8:7b:ec:e0:
ab:e1:a7:c6:89:02:e5:34:d8:11:66:0b:b9:27:39:
51:a4:ad:f6:4a:ef:22:86:f4:cc:2e:5e:2c:b4:64:
a6:8c:05:15:4f:9a:8e:4e:2f:96:5f:2c:7b:9c:41:
c1:04:f9:9d:b2:7e:5a:6c:45:69:5f:95:25:6e:c5:
13:3f:42:ff:28:f2:a7:02:4b:8c:f4:ae:31:4d:e9:
b6:2d:0c:d2:1a:fc:c4:cf:08:44:7d:2a:9e:e1:ab:
d6:ad:5e:93:25:71:ee:a9:c2:07:85:4d:13:f6:08:
e9:a7:35:08:3d:06:64:48:ab:48:9b:2c:b1:84:f9:
41:6e:92:50:6e:cc:09:fb:15:8f:4b:a9:94:77:fe:
31:46:2e:ac:5e:45:9b:d3:64:19:be:20:05:04:83:
38:c3:36:7e:e1:4e:d0:4e:bb:45:3f:35:44:0c:98:
43:86:77:f2:82:0c:8c:59:e6:f7:f0:79:aa:39:62:
87:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:FB:93:A7:7A:6A:03:58:29:03:BA:B8:EC:CE:75:41:8F:16:95:3E
X509v3 Authority Key Identifier:
keyid:05:FC:55:57:48:76:E0:D6:FA:BE:8A:97:91:CC:0D:36:65:AF:F8:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:6a:4a:ab:f8:8b:29:d1:30:7f:68:aa:96:ab:31:e1:be:ea:
ad:79:41:a2:7b:12:f6:6a:de:f9:c0:9c:a7:2e:6e:71:91:82:
ac:fa:bb:7b:ec:47:0b:ce:f1:7e:6f:12:d6:7d:03:50:6b:d8:
83:55:5a:cb:ab:cb:35:80:b7:b3:66:69:c6:f8:e4:86:88:45:
7e:2c:fb:d0:da:3a:15:c7:d6:f0:8f:0b:f5:c9:c3:a6:44:44:
45:69:8f:01:5b:15:a4:a2:0f:e0:06:62:01:cf:00:ca:bd:94:
5b:de:ae:f7:bb:b3:56:e3:7a:37:c6:60:78:75:db:20:51:c8:
40:0a:56:5a:f3:b8:e4:e5:c1:44:18:6d:b0:79:ff:81:1f:f2:
ca:f8:a1:f6:d0:fc:84:86:64:88:14:16:ae:db:cb:2d:27:c8:
3b:ea:ba:1e:3a:2a:39:2e:00:14:51:ac:38:0c:06:ec:68:79:
32:08:74:9d:53:6b:2e:b9:1a:69:ca:38:65:db:6c:97:a7:d2:
f3:c3:0d:db:f5:37:62:7e:75:7b:71:35:cd:1c:3e:e4:ac:15:
c1:29:14:8a:ac:1a:0d:8b:38:40:97:19:65:64:eb:51:69:64:
bd:5d:d2:b4:40:22:cb:57:a8:7f:1a:1c:f6:98:3c:7c:82:ae:
7e:a0:01:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:59:09 2025 by rpki-client