Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
File: BjJUIiHK72RIzFRSFOAABxvVa4Y.mft (raw, json)
Hash identifier: +7a/xBU0+jew+KpY5yI99MsHoPn7c/r6VzzBNOB+E34=
Subject key identifier: EB:77:C5:9A:76:07:62:DD:F6:F9:FC:34:CD:26:A6:69:D5:A7:85:30
Authority key identifier: 06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
Certificate issuer: /CN=0632542221caef6448cc545214e000071bd56b86
Certificate serial: 0196C683B2E64F7F58B426B103B4DC9F198C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
Manifest number: 0F6F
Signing time: Mon 12 May 2025 22:00:41 +0000
Manifest this update: Mon 12 May 2025 22:00:41 +0000
Manifest next update: Tue 13 May 2025 22:00:41 +0000
Files and hashes: 1: BjJUIiHK72RIzFRSFOAABxvVa4Y.crl (hash: 6QFSm3i3OmIiakipd5SVti2g+xmck9MpIh/SRxMYyXQ=)
2: GI2JqYrwfOB4H4-WFfI5AvlAgXw.roa (hash: wx2kzfl5/eKVV8cW/FCB0zPSR7qqCq5F0M1Y8hdHGxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:83:b2:e6:4f:7f:58:b4:26:b1:03:b4:dc:9f:19:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0632542221caef6448cc545214e000071bd56b86
Validity
Not Before: May 12 22:00:41 2025 GMT
Not After : May 13 22:00:41 2025 GMT
Subject: CN=eb77c59a760762ddf6f9fc34cd26a669d5a78530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:67:8c:58:70:8e:ce:bb:ad:97:b7:a7:90:bc:
fd:31:44:5c:2f:2f:15:44:e3:9e:a8:b5:15:7a:4a:
4a:95:51:37:ac:8a:16:df:08:2d:b4:17:16:df:d1:
54:c2:1b:bb:d9:22:2e:34:e6:56:67:1d:af:b5:e3:
e8:ce:ec:6e:91:82:7d:89:d8:cd:ed:a4:bd:5c:cb:
59:0c:3a:48:8a:ed:dc:f1:ac:ad:53:14:13:34:87:
57:d1:b5:59:7b:ec:f1:39:d4:85:45:98:31:7a:02:
19:37:af:77:2f:74:3b:fc:da:8b:74:01:87:d5:07:
84:03:0a:f9:38:20:a4:2a:6e:82:b2:21:fc:13:04:
e5:8d:02:c1:0b:d4:14:90:ef:ec:e9:e9:86:f7:37:
1e:65:67:52:83:cb:1e:55:30:24:54:f3:b2:89:0e:
b4:c7:cd:36:5b:b3:b9:6d:56:c1:f1:19:52:2b:8d:
63:f5:f0:36:e3:3f:ff:f0:d6:d8:57:a7:f2:b2:4d:
0e:84:1e:98:dd:fb:76:08:51:97:3d:1f:78:f5:31:
f2:9e:59:b3:36:2a:30:81:70:e9:67:da:cb:55:57:
91:0e:82:48:63:da:df:57:34:20:cc:99:f1:a5:c8:
27:fc:4a:35:5d:02:18:b8:07:db:d3:06:a4:3c:96:
03:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:77:C5:9A:76:07:62:DD:F6:F9:FC:34:CD:26:A6:69:D5:A7:85:30
X509v3 Authority Key Identifier:
keyid:06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:60:29:fa:b4:04:bc:5e:19:6a:91:ab:cf:08:d0:1b:e3:ce:
f3:e8:e9:a7:4a:e8:3c:4b:ab:52:8d:dc:78:a8:0d:94:b6:35:
f2:3f:b0:46:e1:8b:e6:54:31:98:74:db:05:a9:da:ec:8d:d8:
c2:5b:49:b3:d6:be:3d:8d:30:37:c3:35:e4:99:d6:0a:7f:99:
47:bc:b3:2a:35:a7:7e:40:57:af:a4:c9:38:96:70:20:a7:64:
a9:6d:80:63:41:a4:8a:a1:6b:08:f2:7f:df:27:2a:28:f9:f6:
d8:a3:1e:56:9e:29:2c:fb:49:49:6b:92:ea:88:53:8c:e1:b5:
c0:3c:bb:f0:6e:a6:97:c3:15:3b:45:59:7e:f7:52:b7:7b:e9:
e2:43:64:6b:34:5e:fd:b1:6c:e5:5e:4d:85:f9:2a:23:8b:1f:
37:f7:05:b0:a7:c0:0a:5c:33:b7:5b:68:7c:93:c4:e4:b6:e6:
f4:a6:42:fd:20:2d:63:2d:fc:fc:a2:fa:fc:08:1b:5a:d4:55:
ae:c8:9c:3e:a8:71:ff:47:96:f6:92:d0:43:82:d3:9d:66:69:
b3:49:93:8b:25:3f:91:b4:df:6d:95:84:41:ba:64:c3:a3:db:
23:7e:2d:8c:8b:13:aa:2e:fa:b5:20:e7:0d:26:c0:0b:37:b6:
f9:94:61:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:30:37 2025 by rpki-client