Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/BE2lt-Lb98dvzGbJb_5kj-rUsGA.mft
File: BE2lt-Lb98dvzGbJb_5kj-rUsGA.mft (raw, json)
Hash identifier: lYYtCUrdrkl2+CChtRk+0RQb2GApiETUNvQkGEIAKzE=
Subject key identifier: 99:06:E6:DC:68:C5:51:1D:3D:20:81:BB:0E:2B:1A:44:AD:8B:CE:27
Authority key identifier: 04:4D:A5:B7:E2:DB:F7:C7:6F:CC:66:C9:6F:FE:64:8F:EA:D4:B0:60
Certificate issuer: /CN=044da5b7e2dbf7c76fcc66c96ffe648fead4b060
Certificate serial: 0196C15D75D1A7F51E0F15C403A20DCD9A1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE2lt-Lb98dvzGbJb_5kj-rUsGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/BE2lt-Lb98dvzGbJb_5kj-rUsGA.mft
Manifest number: 05FA
Signing time: Sun 11 May 2025 22:00:49 +0000
Manifest this update: Sun 11 May 2025 22:00:49 +0000
Manifest next update: Mon 12 May 2025 22:00:49 +0000
Files and hashes: 1: BE2lt-Lb98dvzGbJb_5kj-rUsGA.crl (hash: J6slwjNVSDJXQE/rMzyyOjEbibkf6SngiS9is7JHvrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/BE2lt-Lb98dvzGbJb_5kj-rUsGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/BE2lt-Lb98dvzGbJb_5kj-rUsGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE2lt-Lb98dvzGbJb_5kj-rUsGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5d:75:d1:a7:f5:1e:0f:15:c4:03:a2:0d:cd:9a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044da5b7e2dbf7c76fcc66c96ffe648fead4b060
Validity
Not Before: May 11 22:00:49 2025 GMT
Not After : May 12 22:00:49 2025 GMT
Subject: CN=9906e6dc68c5511d3d2081bb0e2b1a44ad8bce27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:91:6d:da:c1:29:0c:81:09:02:a2:b4:26:72:
ff:3d:24:ee:dc:c7:e7:5c:69:01:5c:ed:01:8a:89:
18:3d:f7:42:41:83:95:5f:81:f4:ee:ee:2c:fc:35:
69:f1:c7:6b:b0:0c:30:95:fb:13:ec:5b:7d:bc:87:
e5:62:67:80:c3:95:d8:41:c0:b7:b9:29:98:a7:9e:
0c:26:da:7c:70:fc:3e:b3:41:73:df:60:46:95:f8:
5c:c3:f9:0e:f6:61:81:54:24:0d:21:ce:d0:b1:10:
4d:25:5c:c3:ed:c1:20:15:15:1e:a4:fe:c7:7c:d6:
c4:67:80:32:4d:20:1e:7f:a4:37:6f:b5:37:f1:bf:
79:89:18:a5:95:8b:19:4f:e9:d7:3c:f4:76:61:8b:
88:ec:1e:2d:2f:27:62:9a:86:b1:a6:5e:5b:a6:52:
d6:9d:b2:db:53:41:80:d3:6b:f9:75:90:59:48:85:
0f:ca:78:37:78:cd:46:df:63:b1:72:96:7b:dd:0b:
cc:60:20:e9:54:42:aa:ea:96:ac:f0:27:e7:6e:c8:
6f:86:87:9d:b0:cf:ab:4e:d4:5e:f5:39:4e:d0:72:
f2:d9:6b:5f:7a:19:af:52:1e:eb:9d:56:bd:79:21:
a3:f8:5a:0d:02:1e:fd:a2:a4:d0:d8:d4:a1:3e:cb:
45:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:06:E6:DC:68:C5:51:1D:3D:20:81:BB:0E:2B:1A:44:AD:8B:CE:27
X509v3 Authority Key Identifier:
keyid:04:4D:A5:B7:E2:DB:F7:C7:6F:CC:66:C9:6F:FE:64:8F:EA:D4:B0:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE2lt-Lb98dvzGbJb_5kj-rUsGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/BE2lt-Lb98dvzGbJb_5kj-rUsGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/BE2lt-Lb98dvzGbJb_5kj-rUsGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:29:d3:23:e8:66:d2:aa:3b:49:08:7a:2b:15:14:e2:79:80:
9c:77:e8:5a:35:42:4c:f2:49:30:9a:dd:eb:23:66:5f:a8:a4:
64:31:76:14:45:71:67:c6:6e:fe:d2:15:bb:33:33:c9:2f:85:
01:d9:33:a2:2e:ae:e2:5f:bb:b1:eb:32:bf:f6:f9:80:2a:85:
12:3a:53:0f:61:b9:a4:ed:8e:27:54:21:38:0c:97:73:f4:66:
ca:55:be:77:76:79:da:ea:9a:bc:5f:40:93:cc:ce:5b:cb:ac:
d7:00:cd:70:24:4d:58:9f:18:ad:bf:9b:7a:61:77:3c:45:86:
2f:0d:b2:e8:5e:50:6b:93:cc:75:e8:91:d0:e8:9a:70:ac:20:
8e:e9:cd:30:d6:bb:5e:e4:26:ee:1f:8c:93:2b:c0:97:66:5f:
7d:61:91:23:4c:cd:bf:dc:5d:d6:d9:ec:81:51:0d:d1:82:ce:
ce:d7:8f:d0:81:1d:7c:4d:f6:69:7e:0d:3d:f2:d0:10:94:80:
b3:fc:ca:4a:45:8b:2c:85:b4:c9:83:e9:86:55:8e:c0:5c:69:
5c:a1:d0:bd:7d:6f:5d:88:99:a4:a7:91:b0:e6:8a:bb:d6:7b:
04:1f:69:1b:7d:48:bf:13:36:3d:eb:f6:ca:7d:56:83:62:24:
f9:fc:df:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:33:39 2025 by rpki-client