Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
File: BGaUC2ukf4zBCntHjkBWPLuKt_A.mft (raw, json)
Hash identifier: xdSvuUeQqrcWaM6SwT6ckieamS4/rvuY5uNmKS5h+jo=
Subject key identifier: 61:10:90:30:B0:F5:BC:C4:BD:B7:4C:4E:BD:B9:9E:E1:9E:23:51:21
Authority key identifier: 04:66:94:0B:6B:A4:7F:8C:C1:0A:7B:47:8E:40:56:3C:BB:8A:B7:F0
Certificate issuer: /CN=0466940b6ba47f8cc10a7b478e40563cbb8ab7f0
Certificate serial: 0196A3535FC6FB9DD531563A57953824C675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
Manifest number: 09DD
Signing time: Tue 06 May 2025 02:01:12 +0000
Manifest this update: Tue 06 May 2025 02:01:12 +0000
Manifest next update: Wed 07 May 2025 02:01:12 +0000
Files and hashes: 1: BGaUC2ukf4zBCntHjkBWPLuKt_A.crl (hash: BjSOmgnKHxQdproR9AwqLbeuhAb1cU/Ynb4vIsrXcc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:53:5f:c6:fb:9d:d5:31:56:3a:57:95:38:24:c6:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0466940b6ba47f8cc10a7b478e40563cbb8ab7f0
Validity
Not Before: May 6 02:01:12 2025 GMT
Not After : May 7 02:01:12 2025 GMT
Subject: CN=61109030b0f5bcc4bdb74c4ebdb99ee19e235121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:97:8e:8b:f8:59:93:f3:42:b4:ef:2a:7a:2d:
f6:49:df:fd:d5:71:02:06:02:d8:90:98:60:ab:af:
25:10:ba:e4:33:54:8a:5e:6e:47:59:86:28:8c:ef:
23:12:66:96:34:65:2e:f7:08:57:29:ec:48:ca:63:
fa:cc:95:40:5f:4f:95:aa:0f:d8:93:93:ad:41:4d:
17:b1:13:e1:ab:b4:4e:75:e4:26:75:36:ea:05:de:
42:96:06:ec:ba:33:2b:05:b7:22:f2:15:6d:7a:77:
21:10:d0:74:fd:b3:a7:90:b2:c9:36:9e:92:41:80:
23:41:06:b9:3a:d7:b3:b3:1a:c5:db:ba:de:d4:57:
71:32:24:ea:83:97:3b:52:4a:e0:a3:6b:f1:4b:5f:
3d:a2:99:91:1c:dc:cb:8b:b2:a2:40:7c:29:43:e6:
a7:72:65:eb:e0:38:86:4c:12:43:52:82:03:99:ae:
2b:dc:18:c2:71:59:ee:82:a4:2b:76:bf:1e:4f:13:
ba:b6:d1:59:7d:af:e0:2e:f7:b1:db:a5:23:92:ae:
39:47:49:50:06:2e:3e:93:f7:3c:cf:85:be:6e:e2:
46:c6:08:c8:5d:18:a9:b2:dc:dc:f9:05:63:ef:b9:
f5:cc:d6:7b:8b:f1:04:70:29:44:7b:13:0f:f0:eb:
7e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:10:90:30:B0:F5:BC:C4:BD:B7:4C:4E:BD:B9:9E:E1:9E:23:51:21
X509v3 Authority Key Identifier:
keyid:04:66:94:0B:6B:A4:7F:8C:C1:0A:7B:47:8E:40:56:3C:BB:8A:B7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:7e:ec:12:9d:3a:02:47:47:48:c4:e5:76:90:7d:1b:ed:31:
b5:21:e2:f0:d9:ea:7e:e8:20:c2:a4:79:9f:ad:99:f7:b3:2b:
41:a5:50:fb:77:10:b6:6f:37:bc:69:c2:73:2d:e1:02:35:84:
a1:aa:16:2a:31:8d:5c:d6:32:67:0a:6f:9a:ca:2b:18:9a:33:
49:81:bd:df:70:0b:12:86:a0:84:fc:b8:44:38:fd:02:4c:0c:
9c:ba:98:c8:ed:03:a9:44:51:c3:d7:e0:71:48:59:b8:7b:d9:
fb:c9:0c:75:98:a8:8c:28:27:c7:e1:07:4a:70:05:c0:ab:6a:
57:1c:b9:a0:b0:30:29:71:78:95:56:8b:7b:e5:d0:d4:c5:23:
24:8a:4e:ec:56:e3:83:ce:d1:17:0e:f5:6f:f0:a6:63:34:bd:
00:8e:af:ca:cc:f4:c7:ea:87:99:9f:4d:b2:93:6c:db:b9:9b:
f5:07:89:42:d6:ef:ad:c5:2e:9a:af:73:a3:c4:c9:4d:ba:49:
ba:77:aa:f6:d9:d7:84:af:86:72:22:5c:0b:f4:f2:67:53:45:
97:42:7f:04:af:ea:6c:ec:a2:4f:4f:0c:36:26:3e:c6:be:fe:
16:eb:2e:1b:85:26:f1:64:9e:b9:cd:29:9d:93:1f:79:4d:72:
6c:d2:65:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 07:42:46 2025 by rpki-client