Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.mft
File: Bjc-uCHJZromeoONlS_EpBjLoQc.mft (raw, json)
Hash identifier: p0uncvwGR9gEhXDcvWg3zZjarStKgY7H1cw1VweNJlI=
Subject key identifier: FB:BA:F4:60:E4:FC:87:03:CA:D4:53:F7:23:0E:AC:6E:93:7D:49:FE
Authority key identifier: 06:37:3E:B8:21:C9:66:BA:26:7A:83:8D:95:2F:C4:A4:18:CB:A1:07
Certificate issuer: /CN=06373eb821c966ba267a838d952fc4a418cba107
Certificate serial: 0196C26FCD8075C9A3B598AB8DD45CF88878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bjc-uCHJZromeoONlS_EpBjLoQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.mft
Manifest number: 1535
Signing time: Mon 12 May 2025 03:00:29 +0000
Manifest this update: Mon 12 May 2025 03:00:29 +0000
Manifest next update: Tue 13 May 2025 03:00:29 +0000
Files and hashes: 1: Bjc-uCHJZromeoONlS_EpBjLoQc.crl (hash: fRLK320KNjn9TQTRXUr5KPgYQf9q1oeSwHY9pIJLUlU=)
2: hzUgKoXbBv3CJRIA7Xas-eVKMjQ.roa (hash: RO7C6LUDj1R9ksySlerfgqbCZKiIyzwGTWcyFyoo2K4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bjc-uCHJZromeoONlS_EpBjLoQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:6f:cd:80:75:c9:a3:b5:98:ab:8d:d4:5c:f8:88:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06373eb821c966ba267a838d952fc4a418cba107
Validity
Not Before: May 12 03:00:29 2025 GMT
Not After : May 13 03:00:29 2025 GMT
Subject: CN=fbbaf460e4fc8703cad453f7230eac6e937d49fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:30:d0:64:5b:c3:93:dc:44:ab:da:c3:12:96:
ae:97:22:e5:e2:c6:a2:ef:eb:9e:3b:a6:0e:91:3a:
39:43:b6:bb:8a:e9:50:f4:b5:9b:93:0b:7e:c5:82:
35:9b:8a:11:82:10:b4:66:c9:eb:94:10:c4:97:a4:
c3:f0:1f:80:3d:c4:c1:e3:72:26:c8:b3:e3:ea:0e:
1b:35:1a:0b:80:97:59:5d:92:86:0a:db:27:9f:f0:
5a:80:07:ed:97:27:72:c3:08:ae:89:8e:4d:30:d2:
78:94:57:cc:cc:b1:8e:b2:2d:01:dc:b9:bc:d6:42:
57:43:9b:73:9d:09:00:c1:78:ff:82:ad:0f:23:b3:
30:d8:6f:8e:5b:13:47:1c:5c:be:43:1a:56:c3:2a:
3b:19:7f:45:2f:6d:18:d4:62:f6:c4:cf:e2:1a:b7:
84:c3:c0:1b:71:21:41:78:77:21:cd:f0:27:a8:76:
42:99:c3:0f:55:d4:39:22:1b:62:4d:24:95:d3:23:
4f:41:ff:85:59:dc:e7:20:51:d8:08:63:d2:50:57:
f6:0f:a7:55:49:59:de:b7:b3:0b:97:93:77:1e:92:
58:f3:0b:12:00:b7:cc:fe:c7:3c:e4:9e:3d:db:3b:
65:b1:2c:38:fb:b3:6d:1f:c2:99:ed:10:83:87:79:
b0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BA:F4:60:E4:FC:87:03:CA:D4:53:F7:23:0E:AC:6E:93:7D:49:FE
X509v3 Authority Key Identifier:
keyid:06:37:3E:B8:21:C9:66:BA:26:7A:83:8D:95:2F:C4:A4:18:CB:A1:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bjc-uCHJZromeoONlS_EpBjLoQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c9:e8:6b:9a:05:34:1b:76:49:b0:6e:17:9b:07:fe:13:d9:
52:03:5b:71:4b:fc:13:62:7a:b7:72:12:c8:ab:42:2c:fe:4d:
13:1f:83:1c:dd:55:49:5e:0e:5b:7d:73:5e:73:60:06:cb:eb:
c3:c4:50:b1:95:9a:06:b8:f8:bc:e6:84:2f:61:72:9b:a3:01:
0f:67:d4:19:94:59:aa:f7:4d:7b:54:f2:86:b6:34:a0:82:13:
06:78:e9:e2:c6:7b:a8:29:c2:01:42:7f:18:92:33:d4:1f:9f:
15:4a:78:79:12:e5:3f:f5:eb:7d:70:51:82:84:35:c0:2b:a0:
45:1f:12:f3:6c:a1:af:85:ce:ba:a2:d5:0e:82:40:f4:de:1d:
cc:4f:15:33:d0:37:9f:57:f3:34:ab:d1:48:41:f9:83:27:16:
8d:5b:11:52:73:7d:52:db:83:27:e0:eb:e6:e9:0f:c3:e6:32:
f9:9e:88:7b:57:7f:5a:1b:91:41:27:63:44:e4:4d:06:05:72:
0b:5a:1d:58:6b:ca:b5:03:97:2a:20:bc:d7:f7:fa:e0:f2:b9:
84:73:78:f6:34:42:22:93:de:91:a1:a3:b1:25:f6:a6:98:47:
4d:b3:70:d6:9d:be:8b:40:d6:d4:7b:0e:6d:8b:8b:9e:86:77:
9d:6f:e9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:53:58 2025 by rpki-client