Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
File: BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft (raw, json)
Hash identifier: QelDwqqiWXY476BdEcP62n92EjiflTPhzYM4HyhgUzc=
Subject key identifier: 00:76:99:10:4C:13:CD:D8:4F:1A:55:C6:02:33:B1:42:8B:62:9B:07
Authority key identifier: BC:09:F1:50:8E:1B:C1:1B:EE:CB:80:8E:5B:01:E6:F5:DB:8D:81:68
Certificate issuer: /CN=bc09f1508e1bc11beecb808e5b01e6f5db8d8168
Certificate serial: 4E2911CE4086929BF8ECC0C0DC3FEB75E1CC7033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
Manifest number: 0268
Signing time: Sun 11 May 2025 03:47:59 +0000
Manifest this update: Sun 11 May 2025 03:42:59 +0000
Manifest next update: Mon 12 May 2025 06:30:59 +0000
Files and hashes: 1: BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl (hash: 9/f8rThrqR4sLuY3HLL9jSiYsyyyl8jfkFXOpVggoz4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl
rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:30:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:29:11:ce:40:86:92:9b:f8:ec:c0:c0:dc:3f:eb:75:e1:cc:70:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc09f1508e1bc11beecb808e5b01e6f5db8d8168
Validity
Not Before: May 11 03:42:59 2025 GMT
Not After : May 12 06:30:59 2025 GMT
Subject: CN=007699104C13CDD84F1A55C60233B1428B629B07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:55:a5:dd:bc:d5:01:12:4c:b9:d4:9d:8b:4c:
f0:49:ec:f8:f6:ac:d8:b0:f9:aa:25:61:25:b2:60:
17:f9:34:f6:c9:94:e8:d3:41:16:72:52:f8:41:48:
6c:39:96:98:93:f8:bb:f0:92:d3:43:40:33:0b:53:
d9:85:ad:a8:7b:6d:a3:6b:a6:73:d2:f7:a7:0b:be:
89:7b:3e:8b:f4:e2:49:45:23:bc:00:a8:31:cd:f9:
e0:5d:50:75:63:57:9a:e4:27:9f:d9:48:5e:09:56:
87:b2:76:ac:6f:01:b6:19:0c:2b:98:5f:7b:41:7a:
f1:ea:a0:0c:bf:ed:0b:8d:eb:05:9b:6b:d9:82:01:
af:dd:76:9d:38:61:c9:00:41:67:38:56:ef:e2:f4:
1a:fc:27:a8:c9:e1:cf:8a:83:9c:7b:10:0c:27:80:
5e:70:19:51:86:d7:9c:55:1b:84:ae:a4:1b:3a:23:
91:f7:77:cf:fd:1b:f2:e3:99:2d:33:10:8f:0b:91:
7d:66:cf:ba:9c:7c:49:ed:4d:d0:d7:ab:b7:ff:b3:
f6:6e:1c:e3:74:1c:a2:23:a2:a1:08:7c:80:8d:60:
a3:a1:96:5e:1f:9d:54:42:c3:b3:34:d1:20:c5:1f:
6d:3b:94:76:0d:18:59:f4:fa:2e:20:1b:fa:b5:1c:
a8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:76:99:10:4C:13:CD:D8:4F:1A:55:C6:02:33:B1:42:8B:62:9B:07
X509v3 Authority Key Identifier:
keyid:BC:09:F1:50:8E:1B:C1:1B:EE:CB:80:8E:5B:01:E6:F5:DB:8D:81:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:a0:c4:74:68:aa:6f:f3:f0:7e:4c:45:f5:84:b4:dd:b6:2e:
2d:1e:d2:95:8a:12:b7:9c:a6:b9:88:0d:89:7c:c1:df:ca:d0:
f4:fa:9a:a9:2e:07:e0:22:ae:f0:47:eb:51:69:64:50:89:13:
a1:25:25:3f:61:98:de:d6:1d:a3:aa:8e:4f:96:b4:ac:ac:0f:
ed:e2:8c:4c:99:87:a2:3e:8d:76:a8:d3:e4:04:d8:9f:19:7b:
f7:8b:b8:b0:e4:b2:53:ae:08:e3:50:94:c0:12:61:cb:59:c6:
20:3b:5f:28:b9:08:78:fe:82:44:c5:63:bf:89:5c:cc:25:06:
58:04:52:65:40:9d:8f:61:57:4a:8a:da:87:b5:cf:27:60:2a:
3b:24:19:6c:ef:6c:bd:39:6e:db:8a:f0:13:b0:c0:6e:8d:61:
03:87:79:45:9d:c7:c4:0e:f7:49:18:1a:01:a5:ec:93:75:eb:
78:99:a2:d3:8e:ae:b1:98:5d:2f:09:17:4a:cb:28:6c:79:da:
15:a3:63:58:aa:10:dc:aa:06:81:6e:f8:15:df:42:cd:f7:25:
2a:2e:a3:a3:d7:bc:71:63:2a:1d:74:83:68:52:bc:fd:cf:d7:
00:d9:43:bc:90:90:ad:e7:8a:18:e2:a5:e0:e1:39:2b:75:1e:
83:98:99:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:44:12 2025 by rpki-client