Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/642ab3-9c72-4b6f-8772-d52f4228f8b3/1/BAxkI-mAsol2Wq2SQjX0bS4gwBw.mft
File: BAxkI-mAsol2Wq2SQjX0bS4gwBw.mft (raw, json)
Hash identifier: oAFxyoixghAosQW1QGnKYOMEfxdbF9kz0Awflq33LIg=
Subject key identifier: 59:BA:2B:3B:9C:7B:07:5A:C6:2E:97:43:36:4C:31:8E:9B:F1:5F:2E
Authority key identifier: 04:0C:64:23:E9:80:B2:89:76:5A:AD:92:42:35:F4:6D:2E:20:C0:1C
Certificate issuer: /CN=040c6423e980b289765aad924235f46d2e20c01c
Certificate serial: 0196CE743268B2AA5F3C2F9DA1CD2A5B6134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BAxkI-mAsol2Wq2SQjX0bS4gwBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/642ab3-9c72-4b6f-8772-d52f4228f8b3/1/BAxkI-mAsol2Wq2SQjX0bS4gwBw.mft
Manifest number: 05C7
Signing time: Wed 14 May 2025 11:00:43 +0000
Manifest this update: Wed 14 May 2025 11:00:43 +0000
Manifest next update: Thu 15 May 2025 11:00:43 +0000
Files and hashes: 1: BAxkI-mAsol2Wq2SQjX0bS4gwBw.crl (hash: PW0HjxK9FCKDQLfxYLIymGWIvGIOqdG5vmrKRjCKtew=)
2: M8AiCxgMSSUgBuVdFRu7pkvGtCo.roa (hash: pnvkZHQqProNXp2Y06uxspQQFP7772iRU8HPzD5Li1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/642ab3-9c72-4b6f-8772-d52f4228f8b3/1/BAxkI-mAsol2Wq2SQjX0bS4gwBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/642ab3-9c72-4b6f-8772-d52f4228f8b3/1/BAxkI-mAsol2Wq2SQjX0bS4gwBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BAxkI-mAsol2Wq2SQjX0bS4gwBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:74:32:68:b2:aa:5f:3c:2f:9d:a1:cd:2a:5b:61:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=040c6423e980b289765aad924235f46d2e20c01c
Validity
Not Before: May 14 11:00:43 2025 GMT
Not After : May 15 11:00:43 2025 GMT
Subject: CN=59ba2b3b9c7b075ac62e9743364c318e9bf15f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7c:64:c0:9c:59:b8:99:d5:be:18:ba:5c:29:
05:04:a1:1a:fa:bb:ba:8c:2d:00:cb:c7:88:2c:69:
96:bf:81:2f:fa:0c:be:74:13:f2:5b:1f:9c:80:37:
38:97:a3:b3:bd:d4:d7:de:ff:f8:7d:60:5a:41:eb:
0d:36:fe:e3:80:f7:1b:ee:28:79:b2:3f:af:f2:89:
2d:f6:5a:2e:60:2d:ec:c1:39:92:58:1c:16:ae:d7:
77:8c:49:1f:b0:02:73:d5:71:30:27:0c:86:c2:7b:
fd:7b:76:0e:45:cf:97:8a:7d:7a:57:77:1e:48:5a:
fa:fd:74:fc:75:ef:b2:9f:24:67:c2:a6:01:e2:c5:
6b:59:c6:0c:f9:bf:4b:ad:dc:41:25:ec:dc:25:ca:
e8:ea:3e:9f:3d:4a:59:d2:20:99:bc:da:ea:a5:91:
8c:59:8f:4c:f4:ed:ad:af:e4:0c:b3:1b:e5:9d:6c:
76:92:7c:4d:bb:3d:15:05:e4:0b:3a:df:f8:df:b6:
c6:1a:a7:79:98:36:07:46:6b:9c:89:2f:67:0b:28:
64:c4:53:1e:07:d5:d5:b4:6e:19:ec:dc:de:63:30:
0c:27:8a:b2:8d:b5:1e:ce:17:5e:4b:e5:8a:e3:fd:
f1:62:38:ea:94:eb:27:5f:bb:ca:10:6d:44:6f:bd:
3b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BA:2B:3B:9C:7B:07:5A:C6:2E:97:43:36:4C:31:8E:9B:F1:5F:2E
X509v3 Authority Key Identifier:
keyid:04:0C:64:23:E9:80:B2:89:76:5A:AD:92:42:35:F4:6D:2E:20:C0:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BAxkI-mAsol2Wq2SQjX0bS4gwBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/642ab3-9c72-4b6f-8772-d52f4228f8b3/1/BAxkI-mAsol2Wq2SQjX0bS4gwBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/642ab3-9c72-4b6f-8772-d52f4228f8b3/1/BAxkI-mAsol2Wq2SQjX0bS4gwBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:14:2f:2a:a3:f6:b4:b9:bf:c1:5b:0a:4a:b1:ea:17:b1:3b:
91:dc:27:59:4a:a0:5d:6b:8f:e2:5c:f7:3e:99:95:01:48:51:
8c:83:26:50:e2:b4:62:6b:06:d1:7d:8c:e4:52:56:ee:53:6b:
4d:33:ac:1b:83:51:2a:46:4a:6f:7c:9a:15:5d:d3:86:8e:71:
16:c5:56:93:81:79:34:98:e1:8f:71:e0:4a:9b:f2:2f:da:6c:
7b:e2:53:43:b7:8a:ff:a8:4b:a7:af:4b:eb:71:16:42:dc:61:
74:8c:3a:87:23:fc:6a:e5:db:22:d5:da:9a:a0:7f:64:9c:4a:
1b:9f:04:f5:43:93:97:d1:ec:4f:d8:67:b8:6a:c7:13:3a:27:
6e:5a:a5:b4:e4:39:18:d5:58:d8:f6:c8:7d:3e:d3:06:71:a1:
6f:c3:3f:7d:ef:44:1f:31:d2:a9:86:f8:9b:ce:fc:eb:9a:f8:
fb:92:b3:1d:44:de:cf:1a:07:36:31:28:e9:2e:db:00:00:60:
58:34:ae:5a:0e:64:6b:1b:a6:d9:68:5c:34:6a:ba:bf:a1:fa:
8d:a2:37:d9:54:3e:8c:89:3a:40:89:9d:7b:e7:18:f7:1a:79:
38:7d:4d:28:51:3b:fd:63:be:89:07:5f:52:60:97:4c:15:dd:
94:06:2c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 13:07:07 2025 by rpki-client