Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
File: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft (raw, json)
Hash identifier: yeWHYt6UDwWFAl1XIjzf4H9LVleGmqSpGQNr06DmYZg=
Subject key identifier: 16:B0:20:5B:F9:C2:CD:18:E9:F4:F7:6F:9A:B7:8A:4D:E3:E4:ED:16
Authority key identifier: 04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
Certificate issuer: /CN=049d4f66598668079353721c21935a00319f6759
Certificate serial: 0196BCDBCB02C62FC44F43462CCAB562C309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
Manifest number: 1479
Signing time: Sun 11 May 2025 01:00:42 +0000
Manifest this update: Sun 11 May 2025 01:00:42 +0000
Manifest next update: Mon 12 May 2025 01:00:42 +0000
Files and hashes: 1: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl (hash: W+dof2COyOJtPAh1Yj1B1vfQCbVkALoJjdP1FT2lCUM=)
2: SBmVAlodI7xnOy2vKS8iSbQ2L-c.roa (hash: Qjp3sgcgeheRs3EPb5cqh07Ww165sSq1F+/13L3R5T4=)
3: g0VLR4dmZuTUcMAH8lFP9-35SEQ.roa (hash: VJzmNAtUkQtzYlHT74BgFDK6+FNteK79SAvoZ6OtMvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:db:cb:02:c6:2f:c4:4f:43:46:2c:ca:b5:62:c3:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049d4f66598668079353721c21935a00319f6759
Validity
Not Before: May 11 01:00:42 2025 GMT
Not After : May 12 01:00:42 2025 GMT
Subject: CN=16b0205bf9c2cd18e9f4f76f9ab78a4de3e4ed16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a4:83:30:f9:a7:4b:f7:c5:c7:e8:b9:a1:c3:
30:ba:6c:e3:f3:87:e0:49:dc:a1:17:62:6f:ad:9c:
b7:62:4a:41:73:4d:62:54:0d:71:d3:97:84:99:f7:
08:59:bb:6e:41:af:12:0b:ac:af:36:f4:64:49:9a:
fa:72:b5:b3:d4:dd:6d:84:b7:c8:a9:2e:08:e1:0b:
95:b6:71:28:ea:1f:4f:00:5c:03:49:4c:c7:8f:fa:
26:11:c7:f5:30:40:de:19:e1:a3:47:3d:6a:be:be:
c7:f2:bd:f9:65:6b:84:86:33:21:6e:8d:c0:cf:38:
f6:9f:e3:48:ad:94:0e:7f:fd:4b:64:42:12:e2:5c:
67:76:1f:74:66:0a:5c:08:80:80:b6:ac:53:42:cf:
bc:89:0c:58:1f:5c:fc:af:f0:dd:73:6a:e1:e5:36:
73:a8:69:a5:87:9e:8b:62:04:6e:b4:be:08:ef:50:
ab:c2:5e:5d:d9:60:cd:1f:6b:d5:09:18:b3:07:c0:
b3:68:10:b7:27:fb:57:bf:d2:50:e7:99:6e:42:a9:
bb:aa:4b:a7:89:26:41:36:a3:34:e8:cb:8e:36:9e:
1b:93:e1:3b:6e:84:9a:29:4c:70:bb:52:4e:09:9f:
53:b2:50:d2:a3:c9:aa:d6:aa:40:e1:36:bc:af:df:
ed:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B0:20:5B:F9:C2:CD:18:E9:F4:F7:6F:9A:B7:8A:4D:E3:E4:ED:16
X509v3 Authority Key Identifier:
keyid:04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:96:33:52:1a:69:c3:3e:4f:bd:bf:d3:fa:fc:e9:ce:23:86:
e3:41:4e:f2:23:ae:af:78:dc:14:1e:f6:3f:e2:ac:12:13:b8:
87:48:2b:4b:0e:a8:5a:92:6f:ca:5e:6d:bd:5c:36:d5:b0:bc:
49:51:aa:db:8d:e4:95:87:57:80:aa:4c:c0:5a:9d:74:df:95:
2f:28:d5:50:c7:04:78:8f:7b:bf:02:04:93:9d:71:14:c4:9f:
1d:00:76:31:30:3a:b2:b2:cf:0a:1a:b9:5e:a4:42:b6:23:5f:
79:50:0d:db:bd:2f:a1:c8:b1:ae:07:b7:22:e9:58:6a:d8:c2:
3c:74:fe:ce:5d:7f:d7:f6:c3:6f:71:b8:b2:da:be:84:17:e0:
4d:13:55:ee:5c:6e:0c:46:cc:67:2f:4d:c0:19:c1:74:3d:36:
bd:15:2a:09:2c:9e:73:2f:d8:86:95:da:84:87:9f:b0:00:f2:
89:73:78:de:63:b4:9c:e6:8d:a1:ee:df:3f:93:a2:1f:60:d9:
16:ee:03:6a:6e:b2:bf:32:8f:ab:f8:2e:f4:a6:d1:8c:62:7c:
b9:c3:80:8b:49:13:05:2f:2a:15:26:4b:06:87:1a:ad:2e:bf:
f5:a4:b8:99:2b:6f:04:21:00:e4:a8:ef:05:69:e2:ea:a1:e5:
bc:70:ef:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:52:05 2025 by rpki-client