Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
File: BKnP8kmB1yY9G31jd59dZz3ivbw.mft (raw, json)
Hash identifier: ZqYGW2Pssmo+RVOnFk6aMTNc+QJ+48IjLYFdGyoP9qE=
Subject key identifier: 1F:58:66:9C:47:63:D2:6C:E6:8F:61:A7:A7:06:F7:8B:02:81:CF:EE
Authority key identifier: 04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC
Certificate issuer: /CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc
Certificate serial: 0196C5A7E6BF1371130F691534074006E603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
Manifest number: 153B
Signing time: Mon 12 May 2025 18:00:37 +0000
Manifest this update: Mon 12 May 2025 18:00:37 +0000
Manifest next update: Tue 13 May 2025 18:00:37 +0000
Files and hashes: 1: BKnP8kmB1yY9G31jd59dZz3ivbw.crl (hash: 42XmEepexzoaRbqxu1LCTZg2V2bvJFalsXW3kL6lz18=)
2: zx1XMXhbE28ZMTwu9AxINedJc60.roa (hash: 4bo9B0lLSnpXpzHGQAUAoXEmUUE4IbZbuOepJknUA+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a7:e6:bf:13:71:13:0f:69:15:34:07:40:06:e6:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc
Validity
Not Before: May 12 18:00:37 2025 GMT
Not After : May 13 18:00:37 2025 GMT
Subject: CN=1f58669c4763d26ce68f61a7a706f78b0281cfee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:58:cb:73:3b:e7:fd:65:ff:b0:e6:43:e0:de:
a7:dc:25:0c:4e:9b:8c:25:ad:08:0d:82:84:f6:c1:
5b:54:78:47:c3:0d:df:13:d7:dc:36:57:08:cc:fd:
02:f9:21:42:ab:f2:3d:28:20:1b:75:77:6c:f5:e8:
87:d3:58:ec:f8:13:48:33:98:33:00:9d:df:a7:ea:
eb:4b:54:93:f7:12:6a:4b:c3:c2:d9:fa:b8:6a:cb:
a2:a9:36:1e:b3:8b:f8:f1:8d:9a:2d:ea:ff:63:a0:
e0:8e:7e:a1:c7:98:0e:bb:6b:b1:2f:92:0b:71:2f:
d1:ac:12:c3:0d:38:bd:b9:06:f0:b8:9d:43:35:23:
10:fa:dc:1e:bd:5c:08:f1:a0:9e:a6:91:43:b9:4f:
b9:df:95:29:16:30:09:3f:78:56:d7:c8:1e:04:9c:
b4:9f:0d:4a:74:bb:1e:ee:c1:4d:d3:4d:ce:f8:18:
cf:2e:71:9d:0b:93:78:23:fb:f9:f5:35:cc:b4:70:
6c:ab:2b:03:95:1c:8e:fb:02:2d:fd:8a:fd:e9:52:
f9:44:2b:41:02:2f:11:c0:b8:00:e1:5e:00:59:d8:
4d:8c:b0:da:7b:81:4a:1d:d2:f9:7d:10:f8:1a:e0:
45:c2:9e:f8:9d:97:7f:e1:71:99:aa:cb:79:da:77:
63:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:58:66:9C:47:63:D2:6C:E6:8F:61:A7:A7:06:F7:8B:02:81:CF:EE
X509v3 Authority Key Identifier:
keyid:04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:de:83:45:bf:28:bd:74:70:d4:87:6c:1a:9a:41:8a:f7:8e:
e7:50:89:53:37:d2:5c:6f:7d:f0:cc:fc:62:7f:c3:f3:a5:e8:
90:d1:98:04:a9:be:20:c5:45:2b:83:3b:3d:88:b8:5e:32:5a:
5d:dd:84:d6:5c:78:f3:08:1e:2d:c6:90:d8:0b:d9:af:d7:d7:
5a:3f:a7:9e:fc:e2:f3:2c:2f:6e:e8:0c:a7:ec:f0:24:f0:7a:
f1:07:d2:05:7b:03:c2:09:23:b1:ae:31:2d:a0:52:78:e2:24:
c2:39:97:b6:bc:7a:c4:99:09:a0:44:52:af:76:88:a8:f5:95:
33:e4:25:95:2a:df:80:e2:71:05:08:37:61:89:34:20:1b:43:
23:60:18:55:10:1b:ee:ba:4d:66:dc:c8:56:fb:dc:d3:4f:d9:
d4:c6:84:4a:ef:55:9c:ff:37:c1:e1:47:85:23:dc:7f:59:68:
7a:1b:74:21:f3:b0:a4:79:96:d8:54:12:b5:90:20:0c:4a:61:
51:9a:4f:f3:03:10:80:c2:81:15:26:72:52:dd:7e:5e:97:07:
27:5a:ba:c0:32:c5:0f:45:b2:0a:05:e2:cb:34:a7:b1:5e:5c:
60:38:5e:a6:e7:0b:e3:0d:42:21:ac:2e:10:b4:e8:ee:03:e2:
17:42:14:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:43:06 2025 by rpki-client