Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
File: BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft (raw, json)
Hash identifier: cPzsi1+ICNn4VIxL7XWCHn6Z1m0GpDypvp9X7pXpxfI=
Subject key identifier: 83:6A:A9:A3:9C:C2:11:38:B1:71:2E:7C:F4:EF:C3:F0:71:86:6B:03
Authority key identifier: BC:09:F1:50:8E:1B:C1:1B:EE:CB:80:8E:5B:01:E6:F5:DB:8D:81:68
Certificate issuer: /CN=bc09f1508e1bc11beecb808e5b01e6f5db8d8168
Certificate serial: 1903100CE69F15E3EB485A3498373A72C2E26A32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
Manifest number: 02A8
Signing time: Sat 28 Jun 2025 04:06:00 +0000
Manifest this update: Sat 28 Jun 2025 04:01:00 +0000
Manifest next update: Sun 29 Jun 2025 07:10:00 +0000
Files and hashes: 1: BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl (hash: ast2QleC/dDEJm30r8RKDbS+QsNX/COeF87Sk4Kfi+Y=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl
rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 07:10:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:03:10:0c:e6:9f:15:e3:eb:48:5a:34:98:37:3a:72:c2:e2:6a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc09f1508e1bc11beecb808e5b01e6f5db8d8168
Validity
Not Before: Jun 28 04:01:00 2025 GMT
Not After : Jun 29 07:10:00 2025 GMT
Subject: CN=836AA9A39CC21138B1712E7CF4EFC3F071866B03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4f:9c:fb:19:fe:86:13:1f:1e:97:59:1a:c5:
82:ae:8c:53:e9:63:2b:e6:fe:12:c6:50:08:56:0e:
33:af:c3:58:fd:e0:95:5b:3b:a3:71:c1:71:5c:1c:
25:fd:0c:97:37:9d:24:a2:7d:e9:47:70:dc:e5:86:
fc:7a:c2:ca:a4:15:50:3c:89:5e:18:3b:09:06:0d:
7d:9b:d4:47:f5:35:e4:6e:b1:a4:f9:aa:ca:d9:da:
75:72:8f:84:2f:10:3a:ba:6e:77:c3:63:d7:1e:33:
68:13:e4:60:3b:1f:6f:c6:be:94:e6:25:e2:cd:38:
b5:ca:78:46:ff:c9:c1:e7:65:56:0e:3b:ce:44:2b:
9b:44:cb:3f:b7:0a:ba:4a:99:93:31:34:b9:88:5d:
a3:86:01:ac:90:3c:c9:c3:49:e3:09:e1:30:6d:ae:
c2:fd:12:b2:66:d1:56:51:5c:40:cc:3c:ff:25:ff:
4d:7f:02:57:8d:d7:31:ce:48:ab:f0:ec:04:cf:12:
96:10:73:4d:14:02:1a:10:85:f6:40:bb:24:00:ac:
c1:30:c6:64:fc:0a:d2:83:bd:0d:52:ea:d5:07:04:
59:ba:ca:2e:63:99:20:64:e9:5a:d1:02:3b:33:eb:
f0:ab:15:3c:96:c9:fb:b1:c8:1a:e1:1b:85:29:3f:
37:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:6A:A9:A3:9C:C2:11:38:B1:71:2E:7C:F4:EF:C3:F0:71:86:6B:03
X509v3 Authority Key Identifier:
keyid:BC:09:F1:50:8E:1B:C1:1B:EE:CB:80:8E:5B:01:E6:F5:DB:8D:81:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:63:b8:53:c1:14:25:0e:ca:bf:64:df:ec:cd:93:f0:59:2a:
bb:e7:09:f1:4b:86:4f:e4:b2:18:e3:b2:13:dd:0f:0e:cd:c8:
f3:28:b6:43:81:0a:92:2a:17:1e:12:1f:9b:9b:64:a2:0f:fe:
f7:1e:e2:36:68:d4:d3:43:be:e1:96:4f:d1:ce:aa:aa:c2:01:
d4:cf:fe:c8:0d:eb:a0:d8:d5:e7:ff:34:9f:12:3a:fd:e7:ec:
a2:38:5f:88:5e:2a:cd:d6:33:5f:08:ab:40:4d:ca:2e:84:b1:
70:ed:4a:7f:7a:c6:ba:21:ed:2a:04:77:6d:13:61:99:35:ac:
5d:a5:d6:ed:19:de:ef:1c:f7:ef:a3:91:77:2a:23:78:79:f3:
83:39:c8:c5:85:7a:0b:1a:85:35:77:9d:dd:f8:ab:09:8d:7a:
05:d6:ba:f0:2e:e5:e0:e1:f4:2e:be:c3:1b:06:25:05:f3:5f:
75:56:5a:c8:cd:80:d3:7a:4d:ec:f0:92:5d:29:2a:d6:4b:70:
a5:d5:96:39:ce:16:f6:7a:45:c5:66:f2:fc:ae:da:46:06:70:
98:03:22:8b:7a:39:bf:ba:9c:56:15:c2:a6:b7:7d:ab:3e:66:
82:39:32:3b:7b:ad:8e:d3:da:84:bd:65:59:89:af:0c:0a:83:
0c:d3:b5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:31 2025 by rpki-client