Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
File: BqTXfcLhnm-WAydMCSOmGordtJY.mft (raw, json)
Hash identifier: cQWw/M8hfWuL+4vS/QkvVrdOp0bHJiyrBnIPpxdYQ8k=
Subject key identifier: 77:5E:53:1B:8A:C6:9B:EF:C9:B2:B5:2C:34:FF:15:AF:B8:9C:E7:B2
Authority key identifier: 06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96
Certificate issuer: /CN=06a4d77dc2e19e6f9603274c0923a61a8addb496
Certificate serial: 0196C08163889A11D8111E86B995C8525F55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
Manifest number: 09C3
Signing time: Sun 11 May 2025 18:00:27 +0000
Manifest this update: Sun 11 May 2025 18:00:27 +0000
Manifest next update: Mon 12 May 2025 18:00:27 +0000
Files and hashes: 1: BqTXfcLhnm-WAydMCSOmGordtJY.crl (hash: 8HFRqogCpLg+dZv9VPiHqQYYDI0vjXFqMoiGanikk3c=)
2: cZHYHiGd6PIrfuySObNNa9cF_qc.roa (hash: uKrwrqOr4nsQ7JI8tFB0iH3uyz/0QpuKeozXQRhmsYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:81:63:88:9a:11:d8:11:1e:86:b9:95:c8:52:5f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a4d77dc2e19e6f9603274c0923a61a8addb496
Validity
Not Before: May 11 18:00:27 2025 GMT
Not After : May 12 18:00:27 2025 GMT
Subject: CN=775e531b8ac69befc9b2b52c34ff15afb89ce7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0b:4c:63:e8:33:76:16:78:c9:1a:ca:69:3a:
7e:23:fc:05:c8:3a:d4:3b:36:9c:58:69:91:38:6f:
b4:49:57:ae:2f:ee:40:1e:fa:62:b5:f6:7f:1d:ea:
be:86:47:6f:c8:30:07:81:a0:af:c7:bb:31:dd:21:
48:31:74:f0:cd:52:c0:04:ed:dc:82:e9:08:64:41:
c9:0b:f5:1c:43:ea:b5:52:85:7a:40:e3:a9:b2:0b:
80:b3:dc:9c:a7:13:cf:99:b4:18:49:60:a3:51:48:
da:72:f0:37:4d:b3:16:5e:68:d5:ac:1e:e3:d6:24:
73:d5:bd:b6:89:ad:17:5e:84:69:c8:49:b3:d2:06:
19:e1:eb:02:91:1a:89:c8:21:b0:9d:8a:6b:19:db:
2e:56:47:78:35:54:14:9c:e1:7d:d3:54:2c:0e:aa:
63:9a:5f:ed:7b:8e:76:b1:42:2a:7f:9d:0c:9b:8f:
89:d0:12:9f:42:c2:72:31:76:94:61:b4:c8:e3:c3:
0c:b8:dc:4d:dc:9b:f9:71:0d:b5:29:48:7c:93:50:
76:ce:9e:56:f0:c1:45:94:ff:18:7e:bb:df:ec:d4:
68:ac:5c:03:4e:24:21:ba:45:b5:d1:f1:53:5c:63:
d0:69:fc:99:bc:45:be:b8:9c:86:60:63:ad:4d:65:
4c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5E:53:1B:8A:C6:9B:EF:C9:B2:B5:2C:34:FF:15:AF:B8:9C:E7:B2
X509v3 Authority Key Identifier:
keyid:06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:2f:99:22:fb:a6:e6:b8:37:53:6e:23:64:fb:3d:3f:28:57:
fb:fd:f4:0f:11:3f:d6:97:5b:69:f9:7f:35:25:a5:fd:a9:19:
b1:71:a5:97:3d:2e:dc:78:44:f7:0e:f9:a5:7e:de:72:3f:d8:
2c:b8:48:b7:ff:6b:98:92:8e:f4:d2:ac:d9:1e:be:ee:40:66:
5b:8d:f5:bb:99:12:b3:68:da:21:b7:fd:4a:3f:11:40:17:f0:
94:18:33:f5:50:11:ff:26:16:84:77:b2:94:0b:ba:1c:f7:16:
2e:e8:54:b5:b1:6c:69:a4:cf:20:e3:f7:38:75:98:25:13:84:
11:6c:42:2d:e3:2d:27:4d:68:40:8f:86:27:40:a2:13:cd:8c:
35:d5:aa:0a:f6:dd:bc:18:76:15:b8:93:62:6d:f8:c1:4b:00:
e1:5a:44:6f:34:1f:b4:5e:45:40:ce:08:fb:6a:71:63:33:b2:
8c:d6:40:59:b7:45:a7:00:91:6a:6b:56:fd:c4:d3:5d:f0:bd:
64:04:8a:a8:09:c8:7a:db:dc:09:da:40:0a:c2:bf:dc:1c:d9:
e5:0d:e4:76:18:1a:71:cb:cb:e6:5c:76:04:f4:34:01:64:0f:
ec:ad:92:88:63:4f:1d:c9:4a:9c:4b:06:d7:eb:bc:b2:1a:1c:
8b:84:c1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 00:15:39 2025 by rpki-client