
Manifest
$ rpki-client -vvf rpki.leitecastro.com/repo/CASTRO-INTERNET/0/BC5BDB97E9476F50638158886D4D97026A5B7AA6.mft
File: BC5BDB97E9476F50638158886D4D97026A5B7AA6.mft (raw, json)
Hash identifier: 9lTg3bkXigIPz97CPw93cODvT5ldbLVxpPH/lBKDL/4=
Subject key identifier: CF:75:40:38:A9:0F:0B:54:E2:8A:26:78:2B:70:7D:2D:55:91:7A:3C
Authority key identifier: BC:5B:DB:97:E9:47:6F:50:63:81:58:88:6D:4D:97:02:6A:5B:7A:A6
Certificate issuer: /CN=bc5bdb97e9476f50638158886d4d97026a5b7aa6
Certificate serial: 266243BA0BE49C6A0469AF703C10B1639921F812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFvbl-lHb1BjgViIbU2XAmpbeqY.cer
Subject info access: rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/0/BC5BDB97E9476F50638158886D4D97026A5B7AA6.mft
Manifest number: D4
Signing time: Fri 13 Jun 2025 02:04:11 +0000
Manifest this update: Fri 13 Jun 2025 01:59:11 +0000
Manifest next update: Sat 14 Jun 2025 04:56:11 +0000
Files and hashes: 1: BC5BDB97E9476F50638158886D4D97026A5B7AA6.crl (hash: 4Y3TZmcsdVCR0kcdXpSIOQdatowHxQ+A588Q1iwwBh8=)
2: AS200454.asa (hash: 5ierbdftTasYYliO8P+/cOpYHUCY6FUT2qUaoszJWOo=)
Validation: OK
Signature path: rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/0/BC5BDB97E9476F50638158886D4D97026A5B7AA6.crl
rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/0/BC5BDB97E9476F50638158886D4D97026A5B7AA6.mft
rsync://rpki.ripe.net/repository/DEFAULT/vFvbl-lHb1BjgViIbU2XAmpbeqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 04:56:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:62:43:ba:0b:e4:9c:6a:04:69:af:70:3c:10:b1:63:99:21:f8:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc5bdb97e9476f50638158886d4d97026a5b7aa6
Validity
Not Before: Jun 13 01:59:11 2025 GMT
Not After : Jun 14 04:56:11 2025 GMT
Subject: CN=CF754038A90F0B54E28A26782B707D2D55917A3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d1:65:98:09:57:50:bc:76:2e:13:3a:09:31:
66:bd:ef:87:29:d8:63:43:e6:fc:d2:e6:25:ec:6f:
c0:1d:3f:93:b4:0f:77:df:f9:c4:68:2b:a3:a3:d8:
18:3b:e9:b4:84:eb:0d:0d:ec:5e:30:c1:3c:3a:72:
7d:c4:de:13:c7:50:21:ab:0e:4e:1f:62:9d:ac:1a:
7a:69:10:06:aa:7f:92:01:3b:97:6f:1c:04:21:3c:
b9:41:61:8c:af:15:89:54:8c:26:4e:ef:8b:65:0a:
30:5d:64:98:b2:50:7e:3e:59:f1:df:70:18:5c:7e:
32:3e:dc:42:73:34:16:e3:24:4c:71:ec:54:35:b8:
e9:44:ef:7c:59:d4:10:42:2a:0f:53:43:05:ec:ba:
b0:70:69:da:0c:b7:fd:85:1f:0c:4d:7c:17:55:af:
c6:28:d3:c3:87:99:1c:29:fd:a2:ef:31:9e:78:d3:
dc:b7:1c:8e:23:21:bf:bf:9b:d7:93:4c:10:75:d2:
d3:f2:c3:ee:98:f6:e6:1d:fe:81:76:58:7c:10:af:
d4:74:c4:b1:3d:2f:9a:12:f7:5f:44:75:c0:06:87:
34:56:bb:0a:c9:29:c0:5f:a1:2b:b6:80:52:f5:70:
60:f2:af:ca:68:3a:fa:cc:85:20:6c:c6:ac:11:90:
d6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:75:40:38:A9:0F:0B:54:E2:8A:26:78:2B:70:7D:2D:55:91:7A:3C
X509v3 Authority Key Identifier:
keyid:BC:5B:DB:97:E9:47:6F:50:63:81:58:88:6D:4D:97:02:6A:5B:7A:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/0/BC5BDB97E9476F50638158886D4D97026A5B7AA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFvbl-lHb1BjgViIbU2XAmpbeqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/0/BC5BDB97E9476F50638158886D4D97026A5B7AA6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:16:0d:72:26:e1:b0:63:64:08:98:52:69:d6:f4:d9:6c:c7:
14:b7:a5:5a:e5:37:af:46:d2:e0:cc:4e:54:1f:03:b5:41:03:
7f:d3:45:f0:7c:f8:20:c8:26:e9:c2:ff:56:dd:ed:df:93:10:
ed:aa:f7:56:9e:bf:c2:e6:82:ba:cc:b3:2a:c6:8e:f3:b4:b9:
11:36:c5:34:34:57:e9:f0:50:08:b9:83:12:87:66:12:9b:47:
38:77:28:c7:27:ff:9c:dc:6f:05:b4:9b:b3:3b:8a:f8:26:7f:
39:e3:74:f6:ec:d0:cb:91:04:f8:d1:0d:93:24:d6:5b:f0:f0:
60:fc:e6:60:c1:ca:32:ad:06:a0:a7:09:9b:d2:f2:bf:a6:77:
6b:10:32:af:83:b6:6d:9e:69:51:81:7b:e1:dc:04:03:23:f4:
2c:bf:18:6b:dc:24:e1:4c:6b:0a:0e:30:a1:66:19:87:91:1e:
9a:6d:48:db:ac:0e:72:d5:5e:c1:5d:90:78:f4:8f:91:72:c1:
a9:8c:08:d4:a5:b4:da:a0:f8:0a:fa:99:aa:93:21:69:dc:ce:
2a:1a:5f:13:99:cd:d4:2e:2e:02:0a:60:15:f9:97:5d:6b:7f:
25:56:0c:ab:83:04:b3:92:0d:7d:79:ce:b4:72:05:d8:f1:b8:
2b:2f:7c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:04:07 2025 by rpki-client