Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
File: BZZLbVGQL9wapoQbs9PGIqV5glo.mft (raw, json)
Hash identifier: 4iuXqPFFFscAHukKS8uaVEcQvKOknStQvtKGzFCyyVU=
Subject key identifier: E8:02:C7:78:3A:3C:AD:2B:0F:59:FB:28:44:FD:86:54:02:40:E1:8D
Authority key identifier: 05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A
Certificate issuer: /CN=05964b6d51902fdc1aa6841bb3d3c622a579825a
Certificate serial: 0196B7B545C9F27B89EB3209B01448B825F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
Manifest number: 091E
Signing time: Sat 10 May 2025 01:00:32 +0000
Manifest this update: Sat 10 May 2025 01:00:32 +0000
Manifest next update: Sun 11 May 2025 01:00:32 +0000
Files and hashes: 1: BZZLbVGQL9wapoQbs9PGIqV5glo.crl (hash: MJszJlbKWucjbLUUb5TiSlSt/eiUUkOnFvBbiXlTKTk=)
2: inNKkDFxcUNq5FXZVVy7-DSSYCQ.roa (hash: k4FJ7ff3nr4506kIqSUj3qTtLfz2+PJT75ZSUSvS0y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:45:c9:f2:7b:89:eb:32:09:b0:14:48:b8:25:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05964b6d51902fdc1aa6841bb3d3c622a579825a
Validity
Not Before: May 10 01:00:32 2025 GMT
Not After : May 11 01:00:32 2025 GMT
Subject: CN=e802c7783a3cad2b0f59fb2844fd86540240e18d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:0f:22:78:cb:a8:d4:11:54:99:4a:27:89:af:
f7:ea:c8:e6:17:d2:c5:d7:01:02:25:e6:fc:de:2a:
d5:19:06:fb:14:a3:27:e5:b8:5e:df:00:20:f0:d5:
e7:b5:89:c4:02:8d:21:32:11:88:d5:ce:86:14:42:
ad:8d:50:c0:22:c1:cc:00:3d:69:dc:8f:ab:38:d2:
fa:b4:2e:5c:c3:10:ad:ed:b5:ab:00:b9:65:18:4b:
eb:24:a3:5c:14:10:c0:2c:ff:c2:f4:03:95:f0:d8:
38:d3:8b:8b:14:42:2f:23:e8:cb:ff:10:40:2b:17:
4f:58:c7:02:ac:57:5f:8c:3c:00:e2:f9:5c:fc:5b:
f3:9f:4e:3c:aa:7e:0f:a8:9d:06:ac:7a:2c:e0:78:
38:36:1b:9e:79:dd:33:d7:e3:73:0e:cd:77:bf:b6:
43:0e:a7:aa:57:04:98:e4:db:23:31:db:72:63:8b:
28:4d:ef:e3:7b:22:2c:ef:7c:97:e8:31:16:fc:fc:
b4:05:92:f7:92:f5:2a:f8:ef:b5:e8:c7:72:fb:09:
53:c1:8a:dd:79:2f:4b:9b:4c:d2:11:b4:59:b8:55:
f9:70:75:57:bb:bd:0b:4a:78:5e:9c:fe:64:8b:d3:
32:d0:e3:a4:c0:aa:5c:49:a1:76:e0:74:13:30:2d:
16:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:02:C7:78:3A:3C:AD:2B:0F:59:FB:28:44:FD:86:54:02:40:E1:8D
X509v3 Authority Key Identifier:
keyid:05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:92:4f:e6:ec:ee:77:6c:15:aa:16:51:70:e2:5d:98:9d:73:
eb:7f:40:a9:e2:d3:ba:cd:0f:26:c0:8d:5c:13:37:6e:e7:b1:
92:7e:11:cd:e4:d6:4d:5e:ea:8f:6d:7e:a1:ad:77:ab:91:77:
1f:46:76:0b:3b:fb:da:dd:57:74:a9:ff:27:02:86:da:0f:0d:
ed:a2:bf:5c:a1:98:c9:58:48:57:7f:70:52:8d:83:4d:8c:40:
6b:59:8e:0e:e6:75:57:7c:3c:ad:fc:ed:d8:2d:fb:95:8b:aa:
09:40:69:a1:2b:e8:9b:8f:87:9d:c7:61:29:91:22:d4:ad:e2:
2b:39:ec:14:7c:87:d5:ea:61:b8:5a:95:52:ac:7e:d4:4f:29:
b8:e3:29:bd:fa:d8:58:ab:5d:d7:57:0a:b1:b8:0e:80:c9:f0:
57:ea:0f:55:be:ee:7d:29:1d:0e:bc:9e:2c:e6:b3:36:f2:1c:
7f:03:14:e3:91:ad:22:7a:70:af:67:3e:78:6c:01:91:4e:5c:
a2:ed:b7:f5:72:06:f8:ee:cd:c3:e3:74:dc:52:c4:0d:10:0d:
2d:a2:b0:e4:40:5e:02:93:46:2b:9a:d6:2c:9e:d8:a8:6a:18:
09:d5:98:22:1b:39:a5:6f:04:46:33:8e:11:8e:90:6d:ca:b4:
9c:61:10:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:44:30 2025 by rpki-client