Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
File: BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft (raw, json)
Hash identifier: qIbFT6QgnMSQuTVFPc3man9sMyyRvlT7ovncv90bVsw=
Subject key identifier: E2:02:8F:B1:1B:06:47:62:76:D6:91:F1:09:24:21:1C:E9:1A:92:78
Authority key identifier: 05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95
Certificate issuer: /CN=05712e88949d5a435a33e7040c9fb7e7a8244395
Certificate serial: 0196A208DA258AE26759D58CBBDD32107490
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
Manifest number: 1228
Signing time: Mon 05 May 2025 20:00:11 +0000
Manifest this update: Mon 05 May 2025 20:00:11 +0000
Manifest next update: Tue 06 May 2025 20:00:11 +0000
Files and hashes: 1: BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl (hash: BC09cXPF53jYpc4+k+maMstOumIASmED7Vxii7r/pUY=)
2: Sj4J_mFP2lQkR8Pqu4-vUWhntlo.roa (hash: OyHUO8zUzkjWGYsEn0Hm1G4SAQZ+8DrBTjWOD/M90zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:08:da:25:8a:e2:67:59:d5:8c:bb:dd:32:10:74:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05712e88949d5a435a33e7040c9fb7e7a8244395
Validity
Not Before: May 5 20:00:11 2025 GMT
Not After : May 6 20:00:11 2025 GMT
Subject: CN=e2028fb11b06476276d691f10924211ce91a9278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:01:fb:d1:4c:f9:07:c0:49:6d:43:11:88:81:
f8:cf:99:ef:71:33:3e:37:77:d2:d5:44:6a:a7:3f:
c8:93:61:fb:a3:e7:75:db:68:4f:b9:d1:ec:5b:da:
5d:8c:5d:1d:01:09:f2:3e:3a:8a:7a:80:88:c0:41:
fe:a9:d0:29:81:bb:77:40:5c:b9:60:f1:c3:84:09:
af:6a:e5:56:8c:6f:58:18:67:21:40:73:25:d6:27:
3d:4c:cd:55:54:65:83:12:34:6a:21:a7:48:66:80:
37:42:5f:0e:56:59:fd:e8:2d:f6:cf:8b:b6:9e:3a:
ce:29:49:02:f6:ff:a9:27:2f:b7:a5:54:6c:84:fa:
1c:2a:7e:72:50:b7:21:7f:2c:0d:1a:87:38:2b:cb:
57:05:b6:2e:8f:2b:1e:8e:fd:48:b7:76:ba:a3:69:
11:c9:d7:29:ea:a4:60:02:03:16:06:9f:9a:71:70:
7d:68:2b:41:d3:b0:09:f1:6e:d7:9e:23:ab:66:4d:
f2:6c:88:44:88:33:06:77:6c:6a:dd:18:97:00:34:
97:54:c0:78:f2:61:7d:2c:7e:a7:f5:75:d7:15:0f:
c9:60:1e:3d:aa:53:cf:19:f5:67:f7:62:84:6b:b5:
db:51:f4:99:27:f2:1a:97:d4:22:99:95:00:33:54:
6a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:02:8F:B1:1B:06:47:62:76:D6:91:F1:09:24:21:1C:E9:1A:92:78
X509v3 Authority Key Identifier:
keyid:05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:27:02:2c:38:50:18:e2:99:de:9e:0c:79:77:e3:21:f9:5a:
7a:82:56:d8:21:8e:6c:40:c3:18:10:0d:52:1a:0f:6a:00:b0:
aa:ea:86:c5:04:c4:8a:ce:bc:58:ad:bb:4d:c9:c5:fc:08:00:
68:e8:58:46:b2:45:1c:cb:4c:3e:57:6f:b8:00:3e:ff:c0:ad:
dd:5e:82:11:01:bd:68:69:09:75:60:11:22:e0:22:7c:16:5a:
18:d6:a3:94:dc:1f:28:11:f7:c9:8b:df:12:c8:6e:c8:f4:6e:
32:8b:41:05:f7:7f:0d:4c:6c:cf:dc:03:b9:0e:74:81:ac:cb:
af:18:ce:a5:b7:ed:d3:ff:c1:75:d2:c4:3e:c1:2c:19:b9:96:
e5:31:c6:ad:80:b9:a1:ff:3f:28:de:71:03:57:41:57:50:47:
f4:f7:44:89:56:85:e6:18:aa:51:4a:a5:10:28:5c:b3:56:c6:
8c:59:29:fb:09:2e:92:3a:8f:8c:19:60:1a:c4:3a:55:b5:ce:
2e:77:47:96:ee:72:6f:01:8a:ca:c0:50:42:72:18:47:7a:16:
50:00:5d:4c:65:71:a6:a2:31:33:fb:9e:66:32:31:d2:03:28:
a3:25:f9:7f:74:3a:d3:e9:09:41:2a:84:28:e4:68:76:ee:9e:
33:60:ef:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 22:38:16 2025 by rpki-client