Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.mft
File: BbiIxzyL2SyrKy9GX-Z17h9unWA.mft (raw, json)
Hash identifier: RzTskfCFAagWqH1PqXUBcvIdrK3C/vM0Y8V32bWf6Bk=
Subject key identifier: 17:39:12:A3:4B:F4:9A:D1:76:D3:DF:EA:00:F6:32:E1:5B:21:75:34
Authority key identifier: 05:B8:88:C7:3C:8B:D9:2C:AB:2B:2F:46:5F:E6:75:EE:1F:6E:9D:60
Certificate issuer: /CN=05b888c73c8bd92cab2b2f465fe675ee1f6e9d60
Certificate serial: 0196CBE0CF33F9311F4882947518BCF87CDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbiIxzyL2SyrKy9GX-Z17h9unWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.mft
Manifest number: 1538
Signing time: Tue 13 May 2025 23:00:29 +0000
Manifest this update: Tue 13 May 2025 23:00:29 +0000
Manifest next update: Wed 14 May 2025 23:00:29 +0000
Files and hashes: 1: BbiIxzyL2SyrKy9GX-Z17h9unWA.crl (hash: 0lNHZ6u0QtSoMHVIPWBYtt/1ecG+j6hqvPMaMCrRTcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbiIxzyL2SyrKy9GX-Z17h9unWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:e0:cf:33:f9:31:1f:48:82:94:75:18:bc:f8:7c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b888c73c8bd92cab2b2f465fe675ee1f6e9d60
Validity
Not Before: May 13 23:00:29 2025 GMT
Not After : May 14 23:00:29 2025 GMT
Subject: CN=173912a34bf49ad176d3dfea00f632e15b217534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a0:89:1a:ee:e8:08:3f:8b:06:93:1e:0a:c3:
63:78:bb:c7:61:38:f3:dc:c7:28:7d:dd:2d:65:d0:
01:c6:49:2a:ed:dc:3a:61:8f:6d:48:02:5b:30:c9:
0e:14:b1:b0:70:33:07:47:43:2b:db:88:f0:57:08:
0d:04:33:b0:67:33:ac:aa:58:67:ec:38:1f:86:2a:
00:00:3f:c7:0d:14:bd:a2:ba:67:21:ae:93:a9:fd:
33:d2:de:e9:74:71:e3:fe:1e:d9:8b:f0:6e:3f:ff:
22:fe:ad:ec:26:d0:d2:a7:05:2d:76:cd:0f:42:e0:
91:b4:2c:e8:e6:5a:9e:99:06:af:9f:b9:1a:53:c2:
24:92:84:ec:e2:2f:23:29:7d:db:47:62:df:ce:83:
b8:16:7c:7c:9b:18:7e:f5:d6:5e:83:2d:8c:b1:18:
90:b9:61:40:df:4e:65:56:2d:fc:3e:d7:d9:ab:2c:
4f:44:04:3a:60:3b:1b:cc:35:99:49:e0:83:00:45:
95:3f:c5:7a:74:65:09:1a:4b:13:c3:c0:46:78:83:
13:dc:d2:3c:ae:bb:20:a5:3e:e6:ef:2f:af:d0:4e:
b9:84:cc:8a:96:04:8d:b2:56:b3:93:91:cb:1e:85:
d5:4c:9e:8e:cf:15:3e:17:7a:b1:59:e5:2a:f8:2c:
79:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:39:12:A3:4B:F4:9A:D1:76:D3:DF:EA:00:F6:32:E1:5B:21:75:34
X509v3 Authority Key Identifier:
keyid:05:B8:88:C7:3C:8B:D9:2C:AB:2B:2F:46:5F:E6:75:EE:1F:6E:9D:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbiIxzyL2SyrKy9GX-Z17h9unWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:37:70:b3:a2:e5:87:90:3d:de:4c:c4:00:74:f1:a5:1e:90:
6d:cd:40:df:8c:26:46:20:f5:85:21:2b:33:0d:eb:26:84:da:
65:5c:ac:4a:f1:d5:4f:c8:71:af:36:04:4d:8d:07:87:1d:50:
3d:fd:45:1d:ee:1e:b9:07:a3:0a:92:58:f0:4d:c2:ed:64:61:
ab:dd:42:94:ef:59:83:bb:20:40:5e:c4:00:2f:81:80:f0:0a:
58:4a:f8:e2:67:24:82:c4:0d:62:54:c9:7c:df:76:17:14:20:
50:27:e4:84:bc:06:55:7f:56:97:ad:b4:ba:c1:43:bb:5c:e0:
05:83:86:cb:c1:cf:9d:fc:99:a7:ce:0c:2a:54:10:52:cc:59:
12:37:ec:61:2d:07:c3:51:6c:64:cd:fb:47:12:59:5a:f4:ed:
bf:0f:4c:6a:ca:4b:f9:dd:3a:1f:4c:06:f9:30:91:4d:09:f4:
4a:37:1e:33:2a:43:f0:5c:4a:d3:1a:ba:aa:e1:a8:56:17:7f:
72:b9:ba:3b:86:a0:d4:23:52:b0:26:9b:f4:6f:fd:ff:64:b5:
6e:54:90:56:45:03:7c:31:5b:a4:89:c3:5a:f1:3a:1a:a2:71:
53:6e:20:f3:8c:b0:64:df:cc:b3:79:6f:63:e4:dc:0f:46:1f:
91:f1:cd:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:39:53 2025 by rpki-client