
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft
File: RBme-tyIgD3BoGVhD2R8_c4w9UE.mft (raw, json)
Hash identifier: EFVy4y8y4Kkytpg5tLXdY/PGXgfzUasm51m8Mo0jKxk=
Subject key identifier: B9:3A:20:53:0A:FD:20:02:44:17:05:2C:50:ED:E6:A0:40:A6:4C:02
Authority key identifier: 44:19:9E:FA:DC:88:80:3D:C1:A0:65:61:0F:64:7C:FD:CE:30:F5:41
Certificate issuer: /CN=44199efadc88803dc1a065610f647cfdce30f541
Certificate serial: 0196BA1144FA6EB0D1F1E6645D444E33BDED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBme-tyIgD3BoGVhD2R8_c4w9UE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft
Manifest number: 152F
Signing time: Sat 10 May 2025 12:00:16 +0000
Manifest this update: Sat 10 May 2025 12:00:16 +0000
Manifest next update: Sun 11 May 2025 12:00:16 +0000
Files and hashes: 1: RBme-tyIgD3BoGVhD2R8_c4w9UE.crl (hash: tyZEyu+avi6ZcP+Xy5M1+o+WWag+LwWq/ZSYSlRBwxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RBme-tyIgD3BoGVhD2R8_c4w9UE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 12:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:11:44:fa:6e:b0:d1:f1:e6:64:5d:44:4e:33:bd:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44199efadc88803dc1a065610f647cfdce30f541
Validity
Not Before: May 10 12:00:16 2025 GMT
Not After : May 11 12:00:16 2025 GMT
Subject: CN=b93a20530afd20024417052c50ede6a040a64c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ed:8b:d8:30:da:73:87:1f:50:1c:c2:e7:f2:
32:af:06:cf:77:c0:a8:ea:7b:be:ba:2b:55:a8:9b:
69:c0:c0:e2:ab:ef:68:ba:95:f6:0c:4b:e8:49:65:
2e:73:ff:1a:05:2a:25:ec:f4:68:ab:b6:75:a4:2a:
1f:06:c3:e0:8a:ae:ab:5b:19:a8:7e:43:da:00:a3:
b3:87:93:12:8f:0c:7c:40:ed:e4:dd:f1:81:db:3f:
14:5d:79:35:b4:57:72:3a:f1:f2:16:c1:21:d6:6c:
c1:3c:b7:f5:1b:9e:de:7e:95:e7:41:d4:eb:3b:13:
a2:81:98:e0:49:b7:81:d6:81:58:30:d0:61:95:af:
59:b9:07:40:e5:4e:43:be:0d:2a:da:20:24:1c:fd:
1d:8e:17:b3:6b:3b:71:91:19:a0:34:37:bb:1d:bb:
ce:d3:ee:79:29:20:74:c4:38:c3:0b:7d:af:51:ef:
89:4e:42:86:ac:3b:aa:45:a0:0d:7b:9e:c4:00:ef:
12:10:9f:2b:3a:65:a3:da:92:b3:dc:af:0d:db:b8:
ba:fa:6b:b6:05:2c:1c:cd:40:52:78:26:c3:bd:3b:
37:95:4e:a8:f9:d0:86:2d:80:f5:06:5f:72:26:9e:
c4:2b:26:9d:55:d6:c5:2e:76:b9:b1:e8:39:b4:e4:
49:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3A:20:53:0A:FD:20:02:44:17:05:2C:50:ED:E6:A0:40:A6:4C:02
X509v3 Authority Key Identifier:
keyid:44:19:9E:FA:DC:88:80:3D:C1:A0:65:61:0F:64:7C:FD:CE:30:F5:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBme-tyIgD3BoGVhD2R8_c4w9UE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ee:b9:6e:35:72:1a:6d:c2:30:08:82:c1:79:df:32:84:0d:
e6:e2:2a:2b:65:ff:76:f7:d3:72:41:fa:65:be:e8:02:7f:04:
12:8c:9e:23:1e:42:54:70:ae:14:94:e9:92:42:b8:e4:cd:27:
39:be:71:d0:37:b2:7e:3e:ec:66:9d:85:a7:37:53:3d:6b:20:
84:d2:79:79:38:45:b4:3d:fb:66:1b:bb:5a:05:fe:60:06:fa:
3d:d0:e9:cc:80:5d:a3:1f:d3:ea:cc:5b:97:44:4f:13:d2:da:
3d:8c:d5:d5:e6:f7:56:9e:26:a2:f8:eb:b0:39:7a:9a:93:99:
07:77:90:a7:05:69:f4:c2:48:57:c5:79:8b:95:af:33:94:a7:
90:ef:eb:c0:b7:9b:6f:3d:04:30:d5:79:22:b1:e6:89:bf:b3:
ae:5d:a9:14:13:a2:63:2d:ad:c2:96:78:11:e2:e9:09:11:27:
7b:0f:88:b8:22:1d:8f:d5:2d:3b:73:e9:37:cf:3c:35:ac:27:
f9:38:2e:9b:f5:3b:c0:d4:a2:8b:94:2c:9f:55:64:a5:ec:26:
c5:42:70:fa:72:98:ed:dc:7b:09:bc:32:58:4d:44:7d:57:5e:
5a:02:ee:48:71:5f:d1:f9:0e:34:ca:48:b7:18:1b:2d:b5:d4:
b5:fd:03:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:06:19 2025 by rpki-client