Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
File: Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft (raw, json)
Hash identifier: rflCmd1mws7v4fC1zSBioQ41Yf0l93dilwNx/xVZQZk=
Subject key identifier: 0F:14:37:4C:4F:73:B4:BF:61:9B:28:94:F3:A8:10:0D:D7:7B:09:D1
Authority key identifier: 07:1D:63:9C:1E:02:ED:A2:53:8D:34:B0:C8:B4:52:13:C6:4D:6A:3C
Certificate issuer: /CN=071d639c1e02eda2538d34b0c8b45213c64d6a3c
Certificate serial: 0196C871C8CDD09B188F0CE5796C6F1F0EC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
Manifest number: 1185
Signing time: Tue 13 May 2025 07:00:22 +0000
Manifest this update: Tue 13 May 2025 07:00:22 +0000
Manifest next update: Wed 14 May 2025 07:00:22 +0000
Files and hashes: 1: Bx1jnB4C7aJTjTSwyLRSE8ZNajw.crl (hash: bSCnSUIB4PTPl6OOHJ6snjIc0/HvWR+/ectDU31Y6Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 07:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:71:c8:cd:d0:9b:18:8f:0c:e5:79:6c:6f:1f:0e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=071d639c1e02eda2538d34b0c8b45213c64d6a3c
Validity
Not Before: May 13 07:00:22 2025 GMT
Not After : May 14 07:00:22 2025 GMT
Subject: CN=0f14374c4f73b4bf619b2894f3a8100dd77b09d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:06:06:85:73:3b:bb:8b:a8:04:ad:6e:08:14:
30:36:5a:40:79:bf:db:f3:15:ab:8d:b9:bf:fd:00:
c0:64:0c:b9:03:ed:0e:8d:0e:8d:d9:2c:47:d8:05:
69:92:08:a6:63:38:43:d2:c5:84:10:59:23:06:72:
a2:22:4c:ee:f3:3a:5c:9c:3a:0f:30:22:f7:c0:04:
61:ef:01:d6:d7:37:42:3f:59:f2:80:f2:b2:2f:4b:
4f:a5:50:ca:34:ed:6c:60:7b:d9:d7:2c:56:f8:14:
80:d6:b8:56:f1:09:cd:28:aa:76:71:f9:1e:c3:0f:
f5:67:0e:66:9b:e9:da:03:e0:6a:c9:2c:9f:31:7d:
ac:5e:e5:02:d1:5c:35:cf:e9:80:22:91:d6:e0:2f:
0c:47:4d:2e:da:ec:21:86:c2:ec:c8:d7:36:c2:ca:
9f:40:04:d3:eb:d7:2c:bd:6f:b3:af:c0:b7:8d:15:
95:d1:09:2a:2a:01:89:ce:b5:57:da:d6:db:4a:94:
26:68:04:56:ba:83:a4:32:ef:da:da:8b:58:39:68:
98:c9:e9:6d:ca:2c:29:5e:19:6a:63:08:e5:f7:e4:
04:db:21:0a:ef:28:b3:b9:b8:9f:92:9f:9e:29:41:
48:97:08:4e:cc:99:9c:8a:b8:11:8a:b1:5d:c9:fb:
8e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:14:37:4C:4F:73:B4:BF:61:9B:28:94:F3:A8:10:0D:D7:7B:09:D1
X509v3 Authority Key Identifier:
keyid:07:1D:63:9C:1E:02:ED:A2:53:8D:34:B0:C8:B4:52:13:C6:4D:6A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:26:6e:eb:e4:f3:ef:5a:64:fe:13:00:f0:c6:7e:f5:01:a7:
a1:e6:95:d4:4a:11:b0:d8:c4:f9:78:92:db:48:f4:10:54:a7:
a1:2e:8a:09:b1:66:d5:50:c0:98:c9:93:b5:6e:b5:8f:08:c5:
6c:a7:7f:15:19:11:03:b1:f5:2d:43:bc:e4:8a:f4:89:e4:5b:
64:fe:f1:ff:00:0c:05:fc:48:d8:8a:8f:da:cd:0f:6a:71:71:
c9:71:b4:d7:59:cf:0a:fc:18:38:4b:2f:0f:81:08:a8:01:91:
a3:b5:4d:53:8e:34:f4:f7:da:05:68:d8:1e:53:3c:bc:ab:22:
db:1e:95:a9:50:cd:fe:47:e1:ca:36:0c:97:69:bd:26:3c:56:
24:6b:14:44:b5:62:10:c7:89:78:37:5b:61:bb:2d:6a:d7:96:
69:d3:27:6e:93:12:32:9a:da:23:40:b7:f4:05:e8:7e:56:27:
53:1b:00:5e:b8:39:6f:38:6e:72:c3:ed:79:ed:3d:0d:f0:af:
e5:45:7e:cd:4a:17:af:14:d7:6c:15:ae:ab:6e:6a:b7:b6:0c:
a7:c3:c3:6f:94:02:fa:5b:a8:b0:2b:f3:c9:f3:b1:9f:3e:35:
49:75:de:c8:a8:dd:8c:b9:fe:d7:5b:f0:96:e2:f2:37:4b:44:
26:27:11:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:28:07 2025 by rpki-client