Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
File: BQNlyK9IgTpbq5ft41VTnxFHTcc.mft (raw, json)
Hash identifier: 0eWQ+UDiiHmWA+5xAediZHE5LPy+ByH7XEf14UdWsLw=
Subject key identifier: 38:68:61:19:F6:33:3F:5B:77:E5:E9:0E:FC:18:80:7F:9B:3F:4E:A5
Authority key identifier: 05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
Certificate issuer: /CN=050365c8af48813a5bab97ede355539f11474dc7
Certificate serial: 0196A389A6E7D0A2DE8AE7176F94F1F8647C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
Manifest number: 1525
Signing time: Tue 06 May 2025 03:00:29 +0000
Manifest this update: Tue 06 May 2025 03:00:29 +0000
Manifest next update: Wed 07 May 2025 03:00:29 +0000
Files and hashes: 1: BQNlyK9IgTpbq5ft41VTnxFHTcc.crl (hash: SbldX1JYxE9ZLj4RZdqtpvflxOr640lJBf/oUjHAeFo=)
2: oxM6mR0m9rOLSyak3ORyqAg0XsI.roa (hash: mea+PwbnpZFhyRm88cF7gUeBjEiQVDq413u5vrlmXG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:89:a6:e7:d0:a2:de:8a:e7:17:6f:94:f1:f8:64:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050365c8af48813a5bab97ede355539f11474dc7
Validity
Not Before: May 6 03:00:29 2025 GMT
Not After : May 7 03:00:29 2025 GMT
Subject: CN=38686119f6333f5b77e5e90efc18807f9b3f4ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:27:c8:7c:f0:65:f6:42:27:ab:7a:77:f9:f4:
af:ff:a0:f4:f0:a6:22:c9:89:c1:82:ca:a6:03:60:
46:d4:ce:0c:49:f5:ac:fc:d3:45:f3:92:db:32:b8:
11:1e:45:66:8d:47:01:3a:6e:b3:a9:ba:eb:9a:ed:
9e:80:30:e9:8e:8c:3a:44:58:10:5f:72:ae:57:95:
9b:cb:d3:21:8a:c3:e4:14:63:e2:5e:f5:fc:b7:1f:
aa:09:89:f0:59:7a:24:65:6a:3d:6e:87:fe:57:ce:
b3:d6:79:95:8e:1e:a3:c1:6a:96:20:2c:2e:59:36:
51:73:7d:c7:01:cb:55:c4:b0:5f:79:e3:b8:29:c7:
b8:96:24:8e:67:c2:1e:d5:ad:c1:3b:49:e0:ec:7a:
18:9b:bd:48:43:13:6d:b5:fe:a9:61:5f:20:11:e9:
c1:f6:2f:ac:18:ee:2b:33:6b:10:28:1c:40:b4:e4:
f2:b5:97:b1:d1:84:4a:6e:2f:c4:9f:74:74:0d:a9:
93:1f:6c:9c:24:5b:48:cb:a1:35:3a:d0:2e:26:50:
30:51:ac:99:48:cc:3b:ad:4b:c4:fa:c9:da:bc:5d:
78:97:1e:fe:94:01:52:2d:14:c9:4b:e3:24:51:4c:
b5:e7:dd:2c:44:9e:73:60:5d:a1:00:88:3b:96:79:
1d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:68:61:19:F6:33:3F:5B:77:E5:E9:0E:FC:18:80:7F:9B:3F:4E:A5
X509v3 Authority Key Identifier:
keyid:05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e1:52:1c:a0:1c:04:ab:0a:a9:33:4a:36:68:e1:26:72:93:
35:a4:c9:75:00:c1:2e:11:ce:73:6f:8f:d9:94:6a:b0:17:eb:
30:e3:73:e0:51:fe:79:71:b4:a3:1e:1a:da:0e:f1:54:76:5e:
ef:1f:f5:7e:82:79:c3:f4:e4:c9:a8:23:85:ac:6b:b1:d7:79:
43:8e:e3:b4:69:11:40:47:cd:9e:e3:60:e6:a8:74:ae:b2:d9:
51:6c:9a:dd:21:f0:be:f4:24:1a:fe:50:25:47:48:af:20:23:
09:ca:dc:24:64:ed:b5:b3:2b:c3:69:48:ef:47:97:69:15:f6:
66:41:26:51:6e:73:fc:2b:5d:f4:01:11:56:4f:45:c3:7d:c2:
f8:44:e6:0f:59:a9:47:0e:8a:76:43:31:36:6c:b2:f9:e3:0e:
57:cb:c6:80:fc:1e:17:0c:ce:25:b7:5e:21:46:92:f4:c3:00:
b8:88:65:ce:89:65:b7:ba:e4:c2:3d:65:6b:3b:75:c4:95:9d:
d6:da:7b:b3:8f:43:57:98:06:32:dd:b2:7b:dc:0b:9e:76:aa:
77:12:ff:d0:d3:98:a3:dc:5c:43:10:0e:5f:41:66:3d:fb:90:
80:db:6e:60:5e:85:ad:23:3d:a9:ac:1b:5b:a3:fe:69:2b:47:
61:6a:27:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 06:48:50 2025 by rpki-client