Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
File: BjyTAb89LhVgz69-3EGnw-yKFqY.mft (raw, json)
Hash identifier: YN4aG7yZrQ0WgNIGzDnHfHzUQBa4IMbN780m8W7w3CQ=
Subject key identifier: 64:78:37:0E:62:D0:1E:5A:97:8A:DC:20:08:A6:82:08:3D:07:7D:DF
Authority key identifier: 06:3C:93:01:BF:3D:2E:15:60:CF:AF:7E:DC:41:A7:C3:EC:8A:16:A6
Certificate issuer: /CN=063c9301bf3d2e1560cfaf7edc41a7c3ec8a16a6
Certificate serial: 01967D210430B293A8E82CBD8F4678111A1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
Manifest number: 1510
Signing time: Mon 28 Apr 2025 16:00:37 +0000
Manifest this update: Mon 28 Apr 2025 16:00:37 +0000
Manifest next update: Tue 29 Apr 2025 16:00:37 +0000
Files and hashes: 1: BjyTAb89LhVgz69-3EGnw-yKFqY.crl (hash: ZYx3NroEI2kJgY6AEKHUyJa82tvZILY9ivdeN3aidio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:21:04:30:b2:93:a8:e8:2c:bd:8f:46:78:11:1a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=063c9301bf3d2e1560cfaf7edc41a7c3ec8a16a6
Validity
Not Before: Apr 28 16:00:37 2025 GMT
Not After : Apr 29 16:00:37 2025 GMT
Subject: CN=6478370e62d01e5a978adc2008a682083d077ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:40:6f:bb:01:39:b6:2e:2f:7e:9f:04:31:a6:
83:27:ac:47:21:54:f9:86:b6:ba:ab:95:b0:8e:74:
cd:7c:cc:77:24:b8:59:45:16:c5:13:16:5d:0e:9b:
f7:f8:b4:8c:bd:05:28:5c:fa:88:82:ff:de:fa:56:
5f:13:60:9e:52:9f:c7:3d:0c:2c:2b:60:13:8e:05:
44:7c:ff:59:bb:57:2c:b1:a8:49:bb:1c:fb:c2:fe:
53:25:a1:ef:e0:de:9a:04:1d:04:eb:c2:46:30:73:
84:4e:22:c6:63:9f:99:31:6e:23:9a:93:0e:29:b5:
03:1d:b0:4e:05:57:7b:2f:91:59:5a:29:8a:74:f0:
98:7b:af:20:52:f0:6a:6d:4e:c8:69:28:7c:e1:34:
c0:a7:db:04:99:f9:99:12:c1:53:8a:3b:9f:5c:a3:
28:44:02:26:12:09:b0:50:55:e0:56:64:ac:cd:db:
20:89:62:39:27:65:1e:08:cf:8c:57:85:00:d1:a6:
07:b3:91:c3:8d:16:00:10:fe:3a:14:39:a2:57:a1:
90:11:ac:6c:8c:61:a8:81:06:75:50:39:b3:33:17:
0b:01:11:2a:4e:da:f2:33:56:ae:9b:fe:32:0c:93:
8d:05:9b:29:06:fe:c1:54:6e:69:e1:80:8c:e1:05:
a8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:78:37:0E:62:D0:1E:5A:97:8A:DC:20:08:A6:82:08:3D:07:7D:DF
X509v3 Authority Key Identifier:
keyid:06:3C:93:01:BF:3D:2E:15:60:CF:AF:7E:DC:41:A7:C3:EC:8A:16:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6e:fb:3d:d1:f1:52:bc:90:46:00:88:13:16:8c:e3:4a:eb:
2b:1a:c2:47:89:f0:ad:1d:25:e7:c4:96:02:53:74:1e:62:54:
f1:89:dc:50:d4:61:b3:46:8b:dc:cf:c6:92:0a:3f:b5:2c:65:
8e:bd:e0:11:e5:98:6f:f3:82:9a:5a:39:e1:9f:37:6f:48:64:
67:16:6c:09:d3:27:2e:e7:88:61:92:df:86:ad:91:79:75:40:
4a:db:ae:ff:3b:b9:41:58:4a:f5:29:6d:42:59:64:3f:57:f7:
9f:6d:d4:2f:71:e8:7a:10:14:03:44:ae:bc:a0:88:0f:45:ec:
50:a8:92:0f:97:80:ce:da:4e:60:78:a5:d9:98:84:d0:98:6d:
03:25:2d:17:cf:bb:53:d3:61:24:80:dc:33:c5:93:46:34:eb:
8c:5f:cb:d3:bd:57:fd:42:80:ef:16:47:76:08:37:9c:f8:45:
e1:42:2e:b7:72:4f:52:3a:7f:13:66:ed:d9:d5:84:ac:b7:f7:
4e:15:a8:7f:c0:76:0f:95:8c:fa:ea:2e:9b:da:97:cd:bc:03:
31:03:ad:3a:16:28:bf:23:e5:1a:76:86:b3:30:4c:7b:d1:53:
3c:a5:26:ec:19:92:b1:1a:51:48:c3:12:cd:fd:4a:a7:4f:fc:
22:1d:11:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:21:42 2025 by rpki-client