Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
File: BLw664svC0huXIwMec6djWixj5Y.mft (raw, json)
Hash identifier: PGm94y2Wzskk+/XIWLCpLialrkyJMep9LtQ0gPvDmJA=
Subject key identifier: 4D:04:F0:A0:F9:91:99:AE:DD:AF:F0:28:C8:60:5A:13:B5:EC:07:BD
Authority key identifier: 04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96
Certificate issuer: /CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96
Certificate serial: 0196A2ADC654D59FE6A62DFA9225020D4F67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
Manifest number: 04D1
Signing time: Mon 05 May 2025 23:00:19 +0000
Manifest this update: Mon 05 May 2025 23:00:19 +0000
Manifest next update: Tue 06 May 2025 23:00:19 +0000
Files and hashes: 1: BLw664svC0huXIwMec6djWixj5Y.crl (hash: Me/1eafkpyunofZ6rkXR7s+tngeSDHu4P8VHTxe10Wc=)
2: RLDEvA5lT3OJsuLbbmV0pyamz6M.roa (hash: 08l04RNVeM6otYs3DB4mk2Ka+Bd48a32zNdlW+piPQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:ad:c6:54:d5:9f:e6:a6:2d:fa:92:25:02:0d:4f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96
Validity
Not Before: May 5 23:00:19 2025 GMT
Not After : May 6 23:00:19 2025 GMT
Subject: CN=4d04f0a0f99199aeddaff028c8605a13b5ec07bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bd:1a:80:82:a4:8c:f9:7d:c6:8c:17:5a:be:
bb:ed:6e:b0:5a:c3:4c:45:31:c1:4f:bb:af:b1:b0:
cf:ac:11:1e:35:6c:cc:fe:c0:4a:d4:52:5d:bb:41:
ea:7e:55:e9:06:d0:9c:3e:a2:2b:e3:11:c8:92:9c:
6d:8e:d9:5c:3c:80:00:e1:ca:e6:4c:d9:dc:25:4e:
e9:e8:10:3e:3f:dc:b2:7d:c8:e4:27:2a:81:87:83:
bc:15:83:ff:ea:e5:fe:1b:5a:ba:bf:2e:8e:bc:ce:
08:71:48:fd:20:6f:bf:da:c2:22:08:86:7d:07:4d:
78:d6:75:43:d1:88:33:ad:2c:de:31:71:18:8a:f0:
02:bf:73:e6:21:0f:dc:62:c3:f9:e5:57:ed:12:7d:
a8:e1:2b:4b:a5:9c:61:dd:31:4b:2c:4e:3c:c6:81:
69:c9:36:ff:fa:85:ac:58:c3:81:08:37:1b:52:ab:
fe:2b:4d:02:ea:bc:ad:a1:1f:15:8a:c0:80:ae:58:
a4:d6:87:87:f9:2e:49:e1:72:cc:f7:a4:f8:26:27:
f4:79:8e:88:9f:58:66:ae:10:47:40:f8:ea:03:23:
b7:be:4c:00:5f:02:81:36:ec:4f:04:ac:c7:b5:7e:
09:13:62:27:d2:31:11:e1:ae:5b:a7:29:ca:39:0d:
3d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:04:F0:A0:F9:91:99:AE:DD:AF:F0:28:C8:60:5A:13:B5:EC:07:BD
X509v3 Authority Key Identifier:
keyid:04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:dc:30:b1:71:82:35:21:d9:88:67:41:57:54:7b:6a:d6:96:
87:b5:f7:57:4d:36:28:6d:2f:0c:2e:24:f8:0b:06:ec:05:54:
7b:de:36:e8:f0:13:52:b1:35:ca:ab:3b:d2:94:a6:b3:64:e3:
a4:52:24:1c:a0:da:18:c9:df:8e:3b:ab:02:39:8a:27:f1:16:
42:39:b7:9c:5f:d6:f8:9c:6b:9a:e4:d4:d1:c7:60:e5:14:47:
39:fc:79:60:23:bb:7b:fe:c5:e3:62:0e:34:57:fd:3a:a6:c0:
ac:42:dd:dc:e2:77:b1:b9:38:77:87:cb:7c:0d:e5:32:31:11:
75:b0:e1:51:4b:15:50:a5:0e:ec:9f:fc:e7:bb:21:8a:00:c2:
b7:c5:a4:f6:30:cf:f4:97:e4:98:2b:d1:f2:db:f0:b9:74:fe:
58:ce:7e:a3:79:c7:d4:46:c8:9a:3a:f2:27:5c:d9:e7:4d:43:
11:92:7f:7c:22:37:3e:be:bb:97:5f:f9:89:71:78:f1:45:24:
f7:56:7d:bf:35:69:46:84:76:f7:20:d7:d3:69:e5:88:03:0c:
8b:da:c4:8a:e1:db:c6:d1:8d:3a:84:91:f4:99:c9:4a:53:c0:
22:53:ce:b5:86:a0:a9:df:c8:c4:7a:b1:35:97:3e:94:8f:21:
63:a5:53:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 02:32:43 2025 by rpki-client