Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft
File: BlpHDbq5wcM08PhfQXzRqkJenxM.mft (raw, json)
Hash identifier: m1Wz0Oi0XwsNyqY3ES5bb4oFYYDYZYY4ZNGXeRI0HV8=
Subject key identifier: C7:94:A3:2C:6D:02:ED:70:97:36:57:F3:62:3A:B9:89:EA:0C:E3:AC
Authority key identifier: 06:5A:47:0D:BA:B9:C1:C3:34:F0:F8:5F:41:7C:D1:AA:42:5E:9F:13
Certificate issuer: /CN=065a470dbab9c1c334f0f85f417cd1aa425e9f13
Certificate serial: 01967FB426F8BFD993E85C0EDD1F9FE4433E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft
Manifest number: 041A
Signing time: Tue 29 Apr 2025 04:00:34 +0000
Manifest this update: Tue 29 Apr 2025 04:00:34 +0000
Manifest next update: Wed 30 Apr 2025 04:00:34 +0000
Files and hashes: 1: BlpHDbq5wcM08PhfQXzRqkJenxM.crl (hash: qBMynR0CHKMRDireSr4sKpqjBPbhDky+ckqYnq0tbjM=)
2: nzavVYcJbw7wiHkfWugRkHLaUpY.roa (hash: 7Fywj4H77E3YoHsXLFEeeVcdvfLNHsgfNSvo5Wn1Yao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:26:f8:bf:d9:93:e8:5c:0e:dd:1f:9f:e4:43:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=065a470dbab9c1c334f0f85f417cd1aa425e9f13
Validity
Not Before: Apr 29 04:00:34 2025 GMT
Not After : Apr 30 04:00:34 2025 GMT
Subject: CN=c794a32c6d02ed70973657f3623ab989ea0ce3ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d8:76:81:67:32:0d:c2:7e:0b:76:61:c7:a1:
45:42:24:64:b7:e8:f1:55:eb:f9:61:55:0c:91:bc:
18:32:75:9b:65:17:4e:ca:80:cf:66:8b:c8:e8:88:
db:b9:91:d5:93:31:e0:e1:bf:0f:84:5d:f7:52:fb:
1a:58:7e:5e:3d:40:c9:1a:7d:f9:f1:1a:76:b9:f3:
65:fd:a2:0f:c6:4f:bf:e6:df:e5:a3:7a:ce:ab:72:
de:e8:b4:d9:84:bc:77:fa:9e:e1:f1:e7:6f:c2:1e:
97:ba:d0:3c:b8:ba:a8:f9:b2:f7:c7:75:b0:25:17:
2a:b8:b7:a1:04:a1:db:eb:4a:98:2b:a4:4f:cd:2b:
f2:c6:9a:7b:a2:2f:c1:f4:50:0e:38:f1:07:67:be:
8d:74:8f:b2:9a:a4:3b:94:f1:a2:5b:61:f3:b6:f0:
88:00:c1:7b:41:6f:65:64:85:83:0e:18:b0:39:aa:
fa:e3:31:f5:80:01:44:ea:a4:4c:d1:79:2f:97:6d:
c1:59:39:c5:dd:e0:ba:be:18:a7:84:cc:ae:ff:1f:
9e:8a:6d:3a:b8:11:74:9d:77:70:d8:cc:ff:32:5e:
f5:fc:16:13:cb:8b:98:95:59:ab:c6:d2:c0:c5:f2:
58:05:dd:93:57:4a:26:a2:9c:56:1f:e7:b8:8b:88:
6a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:94:A3:2C:6D:02:ED:70:97:36:57:F3:62:3A:B9:89:EA:0C:E3:AC
X509v3 Authority Key Identifier:
keyid:06:5A:47:0D:BA:B9:C1:C3:34:F0:F8:5F:41:7C:D1:AA:42:5E:9F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:49:a9:19:5a:14:0e:e7:a5:52:31:65:f4:0c:ba:59:0c:6d:
9b:a7:a9:e6:df:2f:b6:84:de:f0:ab:88:89:ee:eb:75:78:8b:
47:dd:97:0b:0b:28:e8:5b:aa:15:fa:92:fe:2f:eb:85:11:42:
4d:bd:26:9b:85:da:42:5d:91:4c:bd:05:21:52:53:3c:5d:d0:
1d:b8:81:07:b2:d9:cc:56:26:b0:7d:bb:c0:f8:cd:a6:eb:af:
08:d7:00:de:80:28:a6:68:4a:48:62:06:7e:b3:69:e3:45:7b:
c7:0d:2e:69:d4:3a:e2:f8:55:f3:2e:b7:a2:81:64:23:86:57:
cb:2d:49:9a:46:ec:61:ed:28:f0:13:8d:7b:00:22:b6:94:37:
f1:f0:f6:a1:64:f9:11:59:04:b6:2f:4c:22:f5:41:8e:44:8d:
bd:d8:c5:d7:82:fa:8b:9f:57:b2:7e:77:09:99:97:4f:e1:ec:
f3:c4:cb:97:91:dc:46:cc:5b:88:6c:e6:f6:f6:3f:c5:61:b0:
cf:ad:03:ae:3b:a6:11:39:2b:3d:ec:17:0c:33:0e:8e:89:68:
94:a5:f9:cf:48:15:c2:b2:5b:5c:8e:f4:b9:4f:d8:13:78:07:
96:b8:7d:d6:1f:7b:97:73:bc:62:98:ae:9d:1e:32:a5:8e:85:
2d:29:3e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:56:51 2025 by rpki-client