Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
File: BBnxl_FzEXt1MfrLmmOJainZqaA.mft (raw, json)
Hash identifier: Oh2OFZcM2Z2zoUzCw+bmWrjzrcQOi6fhfgV7RdyhNwk=
Subject key identifier: 1E:6E:7A:80:1C:C0:94:CF:49:14:B6:34:DC:82:80:67:E0:7F:D3:B8
Authority key identifier: 04:19:F1:97:F1:73:11:7B:75:31:FA:CB:9A:63:89:6A:29:D9:A9:A0
Certificate issuer: /CN=0419f197f173117b7531facb9a63896a29d9a9a0
Certificate serial: 0196ABB11FA70B135E20F05CE4372F3F3C48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
Manifest number: 0C52
Signing time: Wed 07 May 2025 17:00:33 +0000
Manifest this update: Wed 07 May 2025 17:00:33 +0000
Manifest next update: Thu 08 May 2025 17:00:33 +0000
Files and hashes: 1: 7nvwMdfL4Uh8JLIW4K1RfoR3-vw.roa (hash: CcK4SjzWgLuNPuqtdp0Teo6txyqnY3Mzipf8+pbRh/M=)
2: BBnxl_FzEXt1MfrLmmOJainZqaA.crl (hash: Vl6Bq27D7HF6XpOakxb6mewEKkSC36T0sT8EQ3yFDDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:b1:1f:a7:0b:13:5e:20:f0:5c:e4:37:2f:3f:3c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0419f197f173117b7531facb9a63896a29d9a9a0
Validity
Not Before: May 7 17:00:33 2025 GMT
Not After : May 8 17:00:33 2025 GMT
Subject: CN=1e6e7a801cc094cf4914b634dc828067e07fd3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bb:f1:d5:f2:77:8f:92:72:a4:33:a8:d9:66:
c2:15:fc:6f:ab:33:c8:03:e2:d2:19:4c:96:ca:b0:
b4:cb:f3:0f:d4:89:8c:82:37:44:34:6f:c7:2c:e6:
76:b5:dd:dd:02:9d:d7:26:6d:99:0c:6e:07:1c:f3:
d7:bb:66:15:3b:37:89:3d:40:b3:d0:fb:55:2c:22:
2f:5a:e0:f9:60:a9:e5:06:00:87:86:ac:5e:9f:c4:
72:58:b3:9b:ce:b2:9b:af:6b:ca:1b:ac:74:8e:3e:
89:fd:92:a4:52:5e:41:96:e6:b7:8e:c3:29:20:de:
65:65:61:a5:76:32:dc:12:a0:1d:2d:84:3a:2b:e6:
72:33:cb:f1:21:61:8a:c6:cc:9a:67:45:c6:3a:39:
5f:1e:8b:56:71:05:ab:cf:94:8d:00:fd:6f:8b:38:
19:0e:a7:26:05:7a:06:23:e1:89:f5:7a:98:94:20:
97:ca:82:07:99:ed:a8:99:d0:06:77:6e:87:e3:95:
92:0f:68:76:2a:18:ef:ac:0f:99:9d:aa:0a:c9:4a:
59:f8:9b:37:85:34:a5:5e:24:41:a8:a0:74:71:2e:
48:ee:70:5a:a6:67:a2:e4:a5:a5:b7:e2:68:23:96:
85:4b:f7:48:4a:1c:b8:d7:d5:b8:9c:27:d1:2f:bf:
14:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6E:7A:80:1C:C0:94:CF:49:14:B6:34:DC:82:80:67:E0:7F:D3:B8
X509v3 Authority Key Identifier:
keyid:04:19:F1:97:F1:73:11:7B:75:31:FA:CB:9A:63:89:6A:29:D9:A9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a9:b5:14:8e:4e:a0:f4:e3:1a:6b:16:b0:5c:ef:5b:a9:d7:
de:f9:69:93:67:7b:a7:8e:3a:ef:b1:73:d6:12:db:4b:a6:62:
38:02:c0:04:7a:77:a2:6d:7c:47:16:d4:fd:b1:d2:5f:9d:e5:
dc:48:45:22:74:94:08:ef:17:86:c2:8b:0c:3f:00:e1:f7:d5:
41:3e:7d:37:10:49:83:55:e7:9d:66:0c:ac:7d:71:8c:5b:86:
8d:e4:e3:5a:42:b6:a8:b8:43:f5:d2:b3:e4:a8:5e:f2:5b:cc:
f8:da:24:5b:a3:6d:61:b2:a3:34:1e:ec:e6:c1:e5:b2:c3:09:
97:bf:11:e6:19:41:79:b1:29:4d:13:d7:8e:63:2c:6d:ce:4e:
e5:11:82:34:79:36:14:53:42:cd:af:8b:bf:4e:27:5d:73:01:
a7:44:bb:83:de:c4:29:d5:05:f7:bd:ce:b3:98:a0:88:50:a8:
fd:e0:82:7a:d5:3c:a8:7d:13:92:a9:5e:62:51:83:89:71:3e:
d5:a9:8e:9f:4f:b6:29:a8:e4:1e:85:ac:88:e7:f2:81:a6:19:
96:fd:26:b9:1b:16:08:ad:e7:02:3f:3c:55:85:5d:78:b2:80:
0a:f4:9b:2e:d1:af:30:65:21:a2:15:b1:d5:77:df:36:7b:21:
19:9b:a1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 22:35:34 2025 by rpki-client