Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
File: BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft (raw, json)
Hash identifier: 3dv49qNecXVwYAeTv3PPuaOvABqZO9UWIsHMSxSopGc=
Subject key identifier: A5:99:34:F9:28:A2:BF:EF:6D:85:96:CD:07:4A:04:4C:BB:26:08:F7
Authority key identifier: 05:5D:6E:82:34:94:72:CC:AF:D0:A0:69:F5:78:F6:47:C3:0A:98:46
Certificate issuer: /CN=055d6e82349472ccafd0a069f578f647c30a9846
Certificate serial: 0196A842AC083486E319E246A78240FEEB9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
Manifest number: 085B
Signing time: Wed 07 May 2025 01:01:03 +0000
Manifest this update: Wed 07 May 2025 01:01:03 +0000
Manifest next update: Thu 08 May 2025 01:01:03 +0000
Files and hashes: 1: BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl (hash: FHjkHiYWdGgdi4YFfrN52Hn32jr/UyO9tNX/YgZB4qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:42:ac:08:34:86:e3:19:e2:46:a7:82:40:fe:eb:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=055d6e82349472ccafd0a069f578f647c30a9846
Validity
Not Before: May 7 01:01:03 2025 GMT
Not After : May 8 01:01:03 2025 GMT
Subject: CN=a59934f928a2bfef6d8596cd074a044cbb2608f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5b:98:49:13:46:c9:e8:2f:10:41:49:e3:52:
6b:c3:7f:e8:d6:ef:19:30:c3:5a:e6:39:20:e2:bc:
bc:1f:0c:c7:be:5a:69:17:43:c7:72:55:84:90:08:
ba:63:94:79:06:31:3c:32:0e:a7:7b:6a:b7:9c:46:
40:88:65:a9:b9:23:e1:44:ea:37:8e:09:bb:3a:2e:
03:10:be:75:6d:9b:9f:b9:a9:7b:5b:d9:72:35:c8:
d9:3c:af:ef:26:26:3a:c0:be:15:e3:60:d3:8a:94:
ea:bf:fd:b7:c6:57:55:35:dd:36:44:2d:f1:20:00:
ea:57:8b:83:30:b9:c7:8d:5d:e9:c6:dd:e7:41:1c:
3f:3d:a3:73:9f:5c:28:57:a2:40:6a:ea:28:75:9c:
45:03:69:b7:45:94:1c:f4:eb:d5:ad:d4:49:a9:de:
54:1e:17:5c:b9:94:6c:d5:3a:21:c5:ed:67:25:dc:
c8:76:2d:8b:fc:ad:9b:0e:26:d6:bf:e7:f5:3b:87:
c3:a1:23:6c:e4:c3:c0:f1:9c:a5:a7:76:f1:80:76:
a6:08:d9:08:cd:04:4c:77:a8:c0:10:be:b7:a9:f4:
f0:18:c8:03:c7:ea:59:fc:23:82:57:db:35:30:0b:
27:5e:5e:81:54:80:ac:09:4e:d0:88:4c:21:00:8d:
8a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:99:34:F9:28:A2:BF:EF:6D:85:96:CD:07:4A:04:4C:BB:26:08:F7
X509v3 Authority Key Identifier:
keyid:05:5D:6E:82:34:94:72:CC:AF:D0:A0:69:F5:78:F6:47:C3:0A:98:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:4c:b4:40:b0:94:64:94:8b:2e:30:9b:4b:1b:cc:86:68:36:
37:1a:1f:1a:c1:22:92:91:b8:d9:b9:86:84:ce:33:e1:2e:dc:
ff:36:57:58:4f:14:fd:1e:95:7b:96:b5:11:97:94:17:5a:e1:
42:29:0e:06:89:d5:6f:29:86:54:dc:45:58:c4:9c:cd:94:ed:
8c:6d:97:a3:ec:cf:20:26:09:02:3a:c4:c6:67:89:41:a8:f4:
e7:2a:57:1e:d2:68:df:8d:f7:d6:8c:05:2d:23:56:92:c9:e1:
09:ff:6b:5a:8c:88:df:68:ba:dd:83:5e:ef:6b:05:37:e5:b8:
3f:61:b0:4d:5d:9f:f7:56:4b:b1:5a:e9:8a:f0:02:a1:8d:43:
be:bf:4f:18:df:82:51:12:1b:35:32:4c:6a:52:1a:09:f9:96:
ed:80:13:e7:73:42:4a:37:1c:b2:56:90:c4:79:a4:e9:f0:8f:
19:a4:39:ee:66:75:3a:24:9d:b1:fd:d8:72:fb:4e:b1:95:c3:
b8:02:10:04:8b:ec:b4:f0:96:94:da:63:bb:63:eb:bc:2c:12:
e8:c1:bf:b4:c2:c2:e3:51:a8:5f:3a:f1:20:f7:0a:e6:be:b6:
a7:1a:08:fa:ac:c4:ce:4c:40:74:98:84:4b:ca:c7:04:5a:a7:
f6:ba:11:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 08:54:59 2025 by rpki-client