Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
File: B-4HmfCK-P5SD5SCzdBejqZeYag.mft (raw, json)
Hash identifier: Lnh9zFPs1On12WBgSIh04eEHTuaoTuYNia3c7MY0ZEA=
Subject key identifier: 00:15:92:08:70:70:14:7A:82:C6:D6:9F:32:16:F8:99:5F:DC:52:6C
Authority key identifier: 07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
Certificate issuer: /CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Certificate serial: 0196B0D7E507F7872813B76FBE6CFFEBA4C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
Manifest number: 14BC
Signing time: Thu 08 May 2025 17:01:00 +0000
Manifest this update: Thu 08 May 2025 17:01:00 +0000
Manifest next update: Fri 09 May 2025 17:01:00 +0000
Files and hashes: 1: B-4HmfCK-P5SD5SCzdBejqZeYag.crl (hash: CrOgTemvLZ+XyoT1jayaAGBPMy6kqADAHrbm4zY/d3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:d7:e5:07:f7:87:28:13:b7:6f:be:6c:ff:eb:a4:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Validity
Not Before: May 8 17:01:00 2025 GMT
Not After : May 9 17:01:00 2025 GMT
Subject: CN=001592087070147a82c6d69f3216f8995fdc526c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:22:0f:1c:1e:68:54:ec:84:4b:3d:fd:c7:0f:
c9:e9:5e:fc:9f:c7:2a:9a:58:28:73:fa:9b:95:4b:
05:21:47:47:16:87:2a:42:c1:c3:d7:22:5b:36:2f:
4f:78:86:fe:5d:99:8b:73:54:a7:65:ac:4f:0c:ab:
ab:d9:6c:56:f6:e9:c2:d7:d7:94:7a:e7:60:f7:02:
6c:fe:cf:23:11:75:db:a4:06:56:c3:10:7c:74:9c:
ee:06:ab:94:51:93:f0:04:66:48:c5:ba:5c:5e:78:
4d:56:44:3a:1b:30:1d:82:8a:74:30:0e:92:af:7a:
82:49:92:d9:2f:e3:3b:be:fb:27:c9:d7:ba:e7:b4:
bb:44:02:5b:bf:6d:ef:a8:3c:3e:d4:28:52:08:8b:
1a:f6:41:a5:af:2d:3e:c5:81:4c:c0:32:3a:4c:c4:
cb:49:dc:c0:81:dc:05:91:27:05:a0:43:86:38:cf:
ce:5e:5e:5e:d4:ea:05:4b:12:b0:e4:59:f9:9b:ea:
cf:f5:bb:1b:d5:1d:5a:dc:a3:1d:aa:d0:69:cd:bb:
9c:ec:3d:59:f3:28:21:01:cd:02:84:62:38:e1:89:
a3:be:b8:bb:0f:0e:46:93:04:01:87:5e:48:14:ac:
a3:97:04:a4:d1:3a:2f:b2:7c:ba:88:fd:cf:25:97:
7b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:15:92:08:70:70:14:7A:82:C6:D6:9F:32:16:F8:99:5F:DC:52:6C
X509v3 Authority Key Identifier:
keyid:07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:65:22:e1:b9:0a:83:3f:bb:4a:8c:a0:f4:6f:af:28:14:b1:
b9:2a:e1:f5:d9:5b:40:e5:96:33:b1:1a:9f:8e:9b:de:60:ce:
a4:79:ed:d7:0d:70:51:16:52:77:0f:2b:43:a2:34:ad:77:d7:
98:ae:b7:9a:4e:01:fc:da:b9:8c:f5:55:d5:a4:69:e0:68:44:
2a:7d:41:30:79:57:c9:98:ef:44:1b:c6:f9:6e:ca:e0:0e:8e:
de:70:32:32:cc:7b:a0:7e:01:f0:75:a5:b0:b5:2c:94:c3:45:
ee:fc:dd:ab:40:7d:9d:c8:31:33:41:f4:14:01:2e:f0:22:f6:
90:65:a6:5c:b9:d9:2f:2b:ce:82:e7:e6:e4:46:41:e5:92:67:
20:a2:a7:5f:ab:8a:1c:66:44:8d:9b:1d:ff:82:75:aa:ad:79:
88:6b:2b:45:5c:e4:97:5c:05:41:78:7b:16:e5:a9:e3:bb:1f:
ed:79:05:65:2b:d1:c2:2f:ff:8d:79:34:d4:3c:75:03:4d:68:
7d:d6:2e:c6:80:57:9b:9c:8a:93:6a:85:75:82:3b:ac:f7:ee:
81:b0:e9:0d:8a:9e:e5:7b:38:4a:cb:59:66:9c:5a:fe:ee:7f:
e8:8b:18:1f:d6:6f:ea:64:bd:d0:43:74:26:d9:ec:2f:e2:a5:
af:a1:39:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:01:03 2025 by rpki-client