Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
File: BZ-mprHseubqi0STTPfD1PpQjvI.mft (raw, json)
Hash identifier: eQDLPBySBlKhCxlq4Pw18Y5U382JqB/hgl6IR3BuwgA=
Subject key identifier: 66:D4:17:C4:A2:CF:81:44:11:AC:D7:E1:2B:93:DD:6C:7B:EB:3A:1B
Authority key identifier: 05:9F:A6:A6:B1:EC:7A:E6:EA:8B:44:93:4C:F7:C3:D4:FA:50:8E:F2
Certificate issuer: /CN=059fa6a6b1ec7ae6ea8b44934cf7c3d4fa508ef2
Certificate serial: 0196A2400ADE18435885DB85418F5191562B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
Manifest number: 1526
Signing time: Mon 05 May 2025 21:00:28 +0000
Manifest this update: Mon 05 May 2025 21:00:28 +0000
Manifest next update: Tue 06 May 2025 21:00:28 +0000
Files and hashes: 1: BZ-mprHseubqi0STTPfD1PpQjvI.crl (hash: obc7QxWnTlrUsAxu/QAJONoWUOOZ8lkTL2PcrEQf4hY=)
2: cnEEcGLvR_2Aq8VpuBpZTx9kU6E.roa (hash: 881SyJrTyGqfbqUTNOmejK/mEUBUWzl98I4Gk2XXIK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:40:0a:de:18:43:58:85:db:85:41:8f:51:91:56:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059fa6a6b1ec7ae6ea8b44934cf7c3d4fa508ef2
Validity
Not Before: May 5 21:00:28 2025 GMT
Not After : May 6 21:00:28 2025 GMT
Subject: CN=66d417c4a2cf814411acd7e12b93dd6c7beb3a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f8:08:05:70:51:f4:6d:6f:38:5a:e9:68:89:
f4:16:7f:0b:43:1a:bd:ac:de:1e:d5:1d:e7:a4:05:
83:84:5b:b1:c3:e9:18:fd:76:5c:ed:16:26:e4:43:
20:28:30:de:e2:95:11:91:d2:49:35:e5:32:ac:ec:
ad:78:79:c1:c9:54:5b:df:6e:0e:cd:50:64:c2:e7:
e0:ac:1a:d9:5c:0e:94:17:d4:f9:77:0c:93:9b:39:
82:85:22:de:61:5a:4e:72:fe:ee:84:4c:ca:dd:84:
93:04:e2:90:93:63:73:fe:00:0a:e6:c1:28:33:63:
db:d3:65:b4:17:86:f5:af:44:9e:ed:7e:ce:1a:92:
ff:85:db:d2:4c:b3:74:69:3b:d6:46:e2:e6:86:1a:
44:45:7e:e9:c3:24:34:6c:04:cd:57:29:5c:7d:52:
8c:6b:6a:0d:c6:8c:98:cf:f1:77:e8:30:97:cf:e2:
c1:14:6a:4b:b9:61:34:0d:49:2b:97:0b:8e:bc:56:
f3:d3:9b:d4:2b:ac:e9:d7:8e:ec:2c:68:4a:50:3e:
1a:a7:67:df:62:8c:d0:b0:51:01:24:d6:61:eb:29:
c1:73:5a:75:5d:79:a7:3e:93:e6:f2:10:2b:de:04:
1e:8f:f9:82:83:c5:ac:52:22:4c:a3:84:6b:00:8c:
59:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D4:17:C4:A2:CF:81:44:11:AC:D7:E1:2B:93:DD:6C:7B:EB:3A:1B
X509v3 Authority Key Identifier:
keyid:05:9F:A6:A6:B1:EC:7A:E6:EA:8B:44:93:4C:F7:C3:D4:FA:50:8E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e6:41:96:72:23:a8:da:0a:67:ec:e4:84:82:52:cf:d9:b2:
00:20:c9:8e:bb:41:59:b3:9e:a7:08:4b:74:de:07:68:c3:55:
f7:e8:3d:33:a9:66:4b:56:05:29:65:68:1d:e9:b5:9e:81:c7:
09:39:16:81:31:18:48:9c:59:8c:06:9a:96:81:2e:db:de:80:
83:9f:e7:86:fa:50:7e:5d:65:df:00:d7:67:5c:4b:ca:8e:18:
50:d4:d4:69:1f:d6:bc:f0:6c:b5:c6:93:e0:64:6e:ab:98:2a:
3c:a7:d2:2e:35:a5:44:b7:45:9b:d1:0d:0c:25:67:d7:87:77:
af:ee:26:27:2a:b8:59:7f:de:64:ce:1a:a4:7b:19:4b:8e:59:
7d:4d:55:9c:a4:75:d0:bf:42:01:52:19:80:44:4d:6c:b5:f6:
d2:ce:2d:1d:9b:2a:7e:67:5b:dd:62:0b:21:9d:97:04:90:d9:
af:ad:1d:6d:fc:06:97:47:49:69:f3:4f:a4:4d:ff:0f:b0:cc:
fc:f8:ae:8d:c1:9e:ab:07:a5:7e:64:62:3c:dc:03:ee:be:e6:
a2:07:6a:70:e8:49:dd:ae:4c:a1:58:18:b1:70:28:da:e1:cb:
e9:71:08:6e:d3:10:a2:b3:94:2e:32:05:18:70:c0:c2:73:bb:
82:de:b9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 00:24:28 2025 by rpki-client