Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
File: BesSFXMXvsWP1B2S_xBbNhhkpvI.mft (raw, json)
Hash identifier: 8pmJRZ7Uf52tiOYFatuz0sIbGuRi5ErnAQl516jpNgI=
Subject key identifier: F0:83:BB:B2:1E:90:B6:D3:AC:89:64:85:A9:6B:0F:65:BB:B1:F6:32
Authority key identifier: 05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2
Certificate issuer: /CN=05eb12157317bec58fd41d92ff105b361864a6f2
Certificate serial: 0196B257E75598B17C9A825B57DA6473F6E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
Manifest number: 080D
Signing time: Fri 09 May 2025 00:00:27 +0000
Manifest this update: Fri 09 May 2025 00:00:27 +0000
Manifest next update: Sat 10 May 2025 00:00:27 +0000
Files and hashes: 1: BesSFXMXvsWP1B2S_xBbNhhkpvI.crl (hash: J99E9H5L6owlFhtQJsq2c+Kc8i+IiIaYn24wUgQBrm4=)
2: GmOEGytdPBI0M6M4F6yAHlQDNk4.roa (hash: rCxXhyimVf47IInvL9Aht6Onq89mIZd51JHlO7lZEGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:57:e7:55:98:b1:7c:9a:82:5b:57:da:64:73:f6:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05eb12157317bec58fd41d92ff105b361864a6f2
Validity
Not Before: May 9 00:00:27 2025 GMT
Not After : May 10 00:00:27 2025 GMT
Subject: CN=f083bbb21e90b6d3ac896485a96b0f65bbb1f632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c0:d4:0f:c1:8f:0e:e9:e9:16:e1:62:11:47:
91:a9:e6:63:0f:4f:08:6b:fc:cb:ea:1c:55:11:d5:
8e:56:ba:dc:fc:f2:f8:fe:9f:76:79:e6:ae:eb:53:
02:e0:fc:ad:ec:d3:ea:6a:f2:c1:e2:fe:de:ff:5f:
1d:e7:9d:b9:65:70:ec:74:0b:0e:6b:4b:66:d1:52:
6a:01:f7:d9:a1:e7:2c:97:29:1d:4b:e7:5a:2e:65:
80:dd:82:5c:e4:35:ef:8b:a9:a7:ad:7d:58:c8:f3:
3c:e2:a8:65:07:a6:51:1c:f0:7d:ab:59:88:53:68:
29:54:96:46:73:18:76:a0:cd:1d:1c:e9:25:83:b5:
29:70:9d:e2:72:76:36:ff:46:9e:63:7b:0a:b2:88:
1c:bb:e2:aa:ba:f2:e8:6d:bd:d4:09:82:ed:af:e6:
72:a9:f3:1a:ef:ce:aa:e2:6b:43:90:3e:57:82:e1:
9f:26:6a:ad:e0:e7:e1:5c:04:17:b5:01:67:10:cd:
93:42:c4:46:6d:fc:54:f4:f1:77:f3:45:fd:d2:e1:
f7:3d:12:73:8a:78:fa:c7:ce:a3:95:81:78:74:3d:
f0:3b:b0:0f:6e:a3:83:28:55:28:c0:2a:73:71:00:
b4:59:d2:df:d0:4d:52:7b:3f:2d:1a:70:5a:d7:f4:
1d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:83:BB:B2:1E:90:B6:D3:AC:89:64:85:A9:6B:0F:65:BB:B1:F6:32
X509v3 Authority Key Identifier:
keyid:05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:99:fa:c7:80:a3:26:07:4d:08:d3:16:d8:03:19:39:1c:a5:
89:ff:5b:24:66:af:65:7b:94:c1:9c:ce:5e:81:8c:a7:d9:15:
99:23:e4:70:0b:de:75:80:61:e0:06:6e:fd:a0:74:a5:ce:19:
83:9d:ba:82:4f:94:70:be:65:21:61:43:59:36:1d:b6:ba:2c:
a0:ad:f1:01:1f:21:26:98:f3:ce:7b:bc:ff:61:fa:02:33:53:
a0:5c:5c:a2:43:86:3a:0f:a5:f1:39:96:89:f4:52:43:9e:06:
72:94:d1:fe:18:d0:9a:a3:cd:e5:08:f8:6f:62:6b:4a:0e:ce:
2c:3d:c4:7a:b2:10:37:97:bb:ba:0e:24:a7:70:ee:47:71:a7:
cc:ec:e1:2f:42:59:ff:13:8d:a9:26:01:eb:28:d2:a1:2e:1e:
d9:19:1e:38:43:4e:ae:3f:e5:7a:78:25:da:a3:bd:10:b2:f6:
dc:72:87:64:61:ad:1a:c1:db:89:a6:96:a1:fc:86:68:03:0e:
ae:44:71:1f:6f:8e:af:8d:d9:8c:73:f7:bd:93:0a:ce:52:41:
34:63:54:a5:21:c0:c7:c9:62:5a:a2:d0:ee:21:6a:ce:e2:b3:
8f:3f:f3:8e:07:18:e2:17:47:57:f5:4b:78:20:43:c2:e8:ab:
a9:aa:2d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 09:54:57 2025 by rpki-client