Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft
File: BUHqG_Ktqt02piLrPqg13Ju2gZs.mft (raw, json)
Hash identifier: VY/Lv/yujKDlUyI1ampFmtxqfW9QucOJ9IrogaADe9M=
Subject key identifier: E9:DF:B9:2C:F7:D8:69:18:88:1D:AA:4B:3D:0C:5C:04:86:29:9B:36
Authority key identifier: 05:41:EA:1B:F2:AD:AA:DD:36:A6:22:EB:3E:A8:35:DC:9B:B6:81:9B
Certificate issuer: /CN=0541ea1bf2adaadd36a622eb3ea835dc9bb6819b
Certificate serial: 0196C0140742B5A117662AAFC7C6376C20DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft
Manifest number: 13EA
Signing time: Sun 11 May 2025 16:01:00 +0000
Manifest this update: Sun 11 May 2025 16:01:00 +0000
Manifest next update: Mon 12 May 2025 16:01:00 +0000
Files and hashes: 1: BUHqG_Ktqt02piLrPqg13Ju2gZs.crl (hash: HbwIoBD+ahKE8TtQq6cdaF2BuWkmx4Ka6IbqMxGr14o=)
2: GIPybF1nvDpVQajMG8DWoYzoWhc.roa (hash: o+zoF0xKL9l55iOY2y1WPp4gwlsjSDH8TktFrJp4Gm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:14:07:42:b5:a1:17:66:2a:af:c7:c6:37:6c:20:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0541ea1bf2adaadd36a622eb3ea835dc9bb6819b
Validity
Not Before: May 11 16:01:00 2025 GMT
Not After : May 12 16:01:00 2025 GMT
Subject: CN=e9dfb92cf7d86918881daa4b3d0c5c0486299b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:63:8c:e0:41:c5:a6:07:c0:da:3c:67:95:9c:
4b:2a:21:90:e9:cc:ac:84:e0:01:d1:23:6d:a3:fe:
80:ab:6c:19:1e:cb:97:2a:bd:07:da:b4:e7:d2:2a:
67:e4:01:f3:f4:19:e3:16:c8:8f:3c:a8:1a:40:73:
d2:34:8a:56:b2:f8:e6:f7:ab:56:d5:e7:e6:ec:45:
9c:fe:32:6a:e5:ad:0d:e5:58:57:70:da:23:fb:00:
b6:c5:44:eb:bf:ec:a1:53:4f:5b:83:36:2f:41:a6:
55:00:2f:d6:9b:d1:a6:9d:fa:e9:2f:b3:d6:1a:02:
f6:38:2f:f3:40:f5:ba:39:b8:06:b5:71:61:cf:e6:
9f:30:91:6e:79:ef:6e:72:64:99:7a:e6:11:e5:2a:
fe:9b:0b:d7:eb:f9:d5:e1:6a:7e:f1:ab:91:1f:fd:
5b:5c:a3:9b:6f:29:b5:7a:6f:46:0e:2d:63:bd:d1:
01:0e:56:45:b9:5e:ca:fd:7e:fb:ff:5c:d6:52:c1:
74:aa:56:d9:18:3a:79:7a:8d:3e:b0:70:06:fe:c1:
0a:6c:e3:03:3e:f5:ac:1c:ff:c6:a6:bf:18:62:c2:
32:38:97:1d:ea:33:35:91:01:73:9b:84:4f:b8:4f:
ec:28:08:e7:67:ae:80:21:7c:6f:81:aa:36:93:1b:
60:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:DF:B9:2C:F7:D8:69:18:88:1D:AA:4B:3D:0C:5C:04:86:29:9B:36
X509v3 Authority Key Identifier:
keyid:05:41:EA:1B:F2:AD:AA:DD:36:A6:22:EB:3E:A8:35:DC:9B:B6:81:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:3b:50:bb:7c:b6:73:dd:82:0a:f4:bb:1a:df:51:d3:bd:6d:
03:27:31:e0:07:84:02:be:62:a0:be:66:7d:d7:57:4e:64:30:
ce:2d:e2:88:07:bc:b6:63:b5:e9:10:aa:3f:f2:8d:3d:ab:6e:
94:27:83:43:8a:78:b5:8e:9e:95:85:ce:02:8a:31:f9:d9:76:
11:e2:38:9e:ba:dc:26:87:79:e6:0f:97:f1:69:92:f6:d2:40:
e6:1d:6e:cf:56:d3:5c:3e:5d:31:43:37:3d:f3:bd:bd:e5:18:
3f:3d:ec:cf:e1:a8:d5:af:41:52:d3:3e:94:b4:af:62:a2:96:
36:6a:01:b8:2d:34:2d:89:ce:43:b8:1f:15:69:d9:61:9c:40:
0f:d9:9c:31:91:78:7c:b2:45:7b:88:46:bd:38:e4:18:ca:ae:
26:cf:c2:a9:5a:b1:57:05:65:17:4e:c3:7b:28:0b:d9:e0:a2:
99:45:72:0d:3d:08:8b:87:62:9c:3a:c0:d3:d3:1d:a4:20:84:
5a:08:19:e4:7b:02:2a:71:ba:3f:d5:3e:9d:06:d6:21:51:e3:
e8:fe:f9:c0:24:16:db:c6:5e:b6:eb:d2:f3:9d:64:1e:a8:3a:
b1:83:00:54:5c:bb:22:64:34:b6:48:d2:64:57:31:5d:16:28:
8c:5a:7c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:04:08 2025 by rpki-client