Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
File: BKSudHHI82IdUyVtdfEQt0iZeJg.mft (raw, json)
Hash identifier: gATpgGbTL7J8+FiFFuI898Z9HpHlC4ADF7zuA1SMmYA=
Subject key identifier: D4:A0:86:CE:8C:6A:63:3C:0E:AF:C7:DF:9E:AB:D4:E4:4C:F2:0F:D5
Authority key identifier: 04:A4:AE:74:71:C8:F3:62:1D:53:25:6D:75:F1:10:B7:48:99:78:98
Certificate issuer: /CN=04a4ae7471c8f3621d53256d75f110b748997898
Certificate serial: 0196C3827514DD056D1EF560E223C54E2B1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 08:00:28 +0000
Manifest this update: Mon 12 May 2025 08:00:28 +0000
Manifest next update: Tue 13 May 2025 08:00:28 +0000
Files and hashes: 1: BKSudHHI82IdUyVtdfEQt0iZeJg.crl (hash: 9Lpun3CMYFcKQD3Oiqhn3mxY3ClpSHdws/Gap0rSAaU=)
2: N70Yb5HDAX3BIJy8UjKLLCNEous.roa (hash: qShtm2mEB1c+KG+KsBd4fYZEqu1nYfeAzh76OdmZs60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:82:75:14:dd:05:6d:1e:f5:60:e2:23:c5:4e:2b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a4ae7471c8f3621d53256d75f110b748997898
Validity
Not Before: May 12 08:00:28 2025 GMT
Not After : May 13 08:00:28 2025 GMT
Subject: CN=d4a086ce8c6a633c0eafc7df9eabd4e44cf20fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fb:95:1e:77:4d:b2:fe:2d:92:5e:97:11:c6:
bd:78:6e:7f:70:6f:2a:70:00:c2:6a:fd:f9:8d:9e:
f6:fc:37:45:7c:8b:8a:a1:bf:f4:f0:73:f7:3c:75:
5c:31:9e:53:81:73:e0:72:71:7c:02:10:c0:1d:63:
57:30:87:a5:6a:1d:f6:77:e5:b2:71:30:5b:af:4c:
b8:b4:66:b9:cf:99:f1:6f:84:34:77:5c:4f:0c:ca:
cb:ee:9b:c9:ea:de:16:57:48:8b:ae:66:73:0d:79:
9c:b2:8d:93:17:47:f4:f5:53:ef:2f:db:5e:96:f6:
d9:16:b4:b1:d5:36:f4:61:ec:de:5d:d5:2c:96:b1:
a7:f7:fb:72:17:c4:90:17:75:fc:a0:65:25:d8:da:
f3:27:c3:7a:f8:97:50:24:29:bf:4a:e2:14:e9:24:
58:2f:d1:5b:c6:c9:fd:c7:c3:43:84:c0:6b:fa:06:
a7:a7:78:bd:c8:c3:b5:c3:3d:48:ee:f8:19:47:47:
b8:5b:a0:a8:fa:d5:3a:70:8f:75:21:fc:4c:0a:65:
25:3e:cc:0a:52:9e:29:73:98:21:c0:17:89:94:7f:
de:ca:d8:b9:e0:84:c8:7c:89:ef:68:db:95:31:25:
63:46:28:49:e7:0c:d1:11:34:9b:30:b5:c9:ed:dc:
3b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A0:86:CE:8C:6A:63:3C:0E:AF:C7:DF:9E:AB:D4:E4:4C:F2:0F:D5
X509v3 Authority Key Identifier:
keyid:04:A4:AE:74:71:C8:F3:62:1D:53:25:6D:75:F1:10:B7:48:99:78:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:60:2f:69:b3:21:99:b5:3a:00:81:32:cf:de:a1:98:b5:29:
eb:83:a1:b2:78:4f:e3:74:e3:4b:3f:29:42:06:e8:8d:90:53:
0d:ad:03:2d:54:5f:62:c7:c6:7b:a2:e8:22:3c:44:37:c1:22:
19:9f:6e:39:e6:5d:6d:a0:46:26:57:6b:85:74:09:7f:71:0e:
94:75:1d:03:ae:82:fe:80:64:c6:be:b5:d8:3b:6e:58:c1:58:
e5:a7:c1:eb:9f:93:f0:4c:d5:f1:a7:55:e1:e9:43:85:fa:16:
b0:be:33:17:a6:51:ad:01:33:7a:af:f7:26:58:2b:d7:26:10:
21:40:a2:97:5e:60:58:3b:b8:38:88:1c:17:17:9a:f6:41:cd:
0c:00:a5:9f:5f:cb:cf:a4:65:4e:2a:33:b3:57:9b:aa:58:af:
5c:50:a8:d4:53:f4:70:66:65:09:7a:34:9d:a4:75:9a:ac:b9:
03:0e:04:9f:ee:f1:75:c8:5d:52:52:eb:4d:e3:78:15:ef:41:
b8:22:61:95:df:c4:10:45:15:31:2e:5c:ab:04:04:18:59:32:
74:1e:46:72:c0:b7:7b:f2:6e:47:d7:1c:a4:0c:75:ea:9d:ee:
0c:97:20:41:a6:a0:7a:4c:12:0f:7d:af:36:c4:f1:c9:b6:34:
84:89:9b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:10:08 2025 by rpki-client