Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
File: BuS72riW5mET81G02cgt9Q5mpxI.mft (raw, json)
Hash identifier: MTdMK2hjU7c77QXg4XBmUF1uxXdGy0K2lTn34fhG4w8=
Subject key identifier: 2C:94:4A:C3:CD:B7:B7:D1:A3:A1:25:18:85:FB:A0:CC:13:84:D8:3E
Authority key identifier: 06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12
Certificate issuer: /CN=06e4bbdab896e66113f351b4d9c82df50e66a712
Certificate serial: 0196C4CC48D8A0E155A776F5C3D05DA1F02C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
Manifest number: 04C1
Signing time: Mon 12 May 2025 14:00:44 +0000
Manifest this update: Mon 12 May 2025 14:00:44 +0000
Manifest next update: Tue 13 May 2025 14:00:44 +0000
Files and hashes: 1: BuS72riW5mET81G02cgt9Q5mpxI.crl (hash: 7ssKH9U0xqiqBEyKkMUoenj2GhI3HS/Jw6qChvZcE4E=)
2: YmfxS-GgNftFlff0Z2MZRV7dFdg.roa (hash: udDDnBYDprQnDTUgHyUZUopukV2qllWtt5uqI+VT1iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:cc:48:d8:a0:e1:55:a7:76:f5:c3:d0:5d:a1:f0:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06e4bbdab896e66113f351b4d9c82df50e66a712
Validity
Not Before: May 12 14:00:44 2025 GMT
Not After : May 13 14:00:44 2025 GMT
Subject: CN=2c944ac3cdb7b7d1a3a1251885fba0cc1384d83e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6e:aa:70:bf:41:5c:a9:d0:71:05:2b:ed:b9:
0f:32:68:49:a2:c3:df:ea:13:26:58:02:a9:8d:9c:
c5:fd:ba:d3:94:8b:33:2a:e2:35:9a:3b:81:8b:22:
37:d1:97:67:f4:c8:2c:4f:ec:46:80:4f:49:4f:98:
85:ca:95:31:9e:b6:e9:31:a8:46:f3:b1:dd:80:e2:
ce:11:c0:2e:3f:4f:eb:3d:b7:5c:59:e5:07:15:1c:
48:5c:3e:87:d0:c4:de:b3:f8:cf:18:1b:f6:74:34:
59:d0:be:49:2f:cc:75:87:5a:ad:da:23:49:db:af:
16:82:90:6a:c5:81:e4:5a:26:58:8c:87:c9:09:df:
9d:a1:dd:a0:0e:bc:da:ee:c4:47:8f:81:84:4f:c7:
c6:97:58:1f:c8:4a:d0:32:a0:09:ab:59:b2:5f:79:
86:5a:61:b8:cf:a5:db:d1:e0:55:ec:84:cc:87:3c:
b7:41:ab:c7:a4:56:cf:c3:26:cf:fc:98:6e:fa:0d:
8d:90:97:e8:21:ad:3e:1d:97:3b:22:cf:00:2d:f0:
00:fd:51:d0:f7:5e:b1:cd:b2:3d:bc:e5:8d:8b:07:
c0:34:61:bb:b6:6f:25:69:7e:74:71:a5:ab:7f:09:
c8:f2:da:8f:77:9d:a9:63:23:80:0c:39:a3:35:70:
9b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:94:4A:C3:CD:B7:B7:D1:A3:A1:25:18:85:FB:A0:CC:13:84:D8:3E
X509v3 Authority Key Identifier:
keyid:06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:69:65:8c:e4:3c:49:05:cf:bd:e6:b0:00:c3:8c:57:fb:5f:
21:38:35:90:67:2c:65:e6:0e:e3:0e:69:0f:3c:f5:4e:4b:01:
88:99:45:89:8f:15:41:df:bd:07:2f:8d:34:2b:13:e2:d0:b1:
bf:2a:e2:58:61:e2:ce:1b:91:7f:6c:ef:64:46:af:04:6e:e3:
3f:86:13:ca:f2:ab:c4:84:ac:35:a8:74:e1:b4:39:9c:27:a5:
e9:6d:ca:a1:f5:3e:fb:62:eb:25:99:4b:59:6c:b1:29:b6:9f:
49:36:44:b6:de:54:2d:8c:eb:50:ec:56:5f:ff:37:a3:ba:d1:
97:09:23:ee:70:4a:5c:92:72:48:4c:94:6a:9a:48:6c:23:06:
12:5d:d0:c7:47:7a:92:51:e3:57:cb:3b:72:15:20:9a:eb:86:
90:3f:94:32:87:00:bd:74:fc:95:9a:3d:88:02:5d:c3:f3:c9:
31:5c:a9:a6:71:00:3c:05:df:30:42:a1:34:09:2d:05:70:84:
b9:07:a7:73:a7:c7:ec:51:3d:b5:ef:63:59:03:1a:76:ab:a1:
b4:91:34:e1:fa:d8:66:cc:36:a7:da:73:3c:b9:e3:fa:80:f0:
c2:87:4f:e1:e6:1e:2b:37:09:ce:f0:ea:7b:8c:e5:55:59:53:
e7:5c:a0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:09:43 2025 by rpki-client