Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft
File: BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft (raw, json)
Hash identifier: Y7xubyyq66OBVfJFNW6YWcAVb8lWYiji3533vE1/oWg=
Subject key identifier: 8C:ED:C7:37:70:AA:AE:4F:26:34:2D:90:1A:AF:AF:4F:3C:AC:2F:5A
Authority key identifier: 06:6B:A2:09:C5:0C:02:A8:58:B5:43:08:C8:2A:E5:BF:30:2E:FA:A4
Certificate issuer: /CN=066ba209c50c02a858b54308c82ae5bf302efaa4
Certificate serial: 019679E91655F4DB3BB33C0CAC7EBE3F0ECE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft
Manifest number: 11E2
Signing time: Mon 28 Apr 2025 01:00:40 +0000
Manifest this update: Mon 28 Apr 2025 01:00:40 +0000
Manifest next update: Tue 29 Apr 2025 01:00:40 +0000
Files and hashes: 1: BmuiCcUMAqhYtUMIyCrlvzAu-qQ.crl (hash: Kmf1mtxTjE254KgtFeHel2vzTsjaeAn7hB0AUWOJJA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:16:55:f4:db:3b:b3:3c:0c:ac:7e:be:3f:0e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=066ba209c50c02a858b54308c82ae5bf302efaa4
Validity
Not Before: Apr 28 01:00:40 2025 GMT
Not After : Apr 29 01:00:40 2025 GMT
Subject: CN=8cedc73770aaae4f26342d901aafaf4f3cac2f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ce:54:59:46:a5:97:3f:a6:31:9c:45:8d:87:
c3:80:4d:4f:49:97:6c:ad:2d:13:27:b4:b7:bf:25:
77:89:e1:87:c3:40:8f:dc:7d:3f:78:33:67:df:5e:
cf:20:d4:eb:c5:05:f4:65:b0:3c:fe:b4:47:ea:46:
1a:e1:5c:b4:21:94:4b:0a:97:ec:13:49:99:02:10:
9c:c7:34:ec:80:4c:bf:84:77:a3:f1:d8:ed:b8:93:
62:9d:89:78:bd:6e:97:c6:f3:c0:26:12:36:2e:97:
e7:c6:52:49:b4:e6:4a:7d:f8:79:76:b4:f4:1d:7a:
3a:7c:29:30:7e:6f:33:0d:5c:b4:b3:3d:5d:81:e7:
50:66:64:3e:e3:2f:c4:b4:4d:a3:7b:99:c0:04:07:
02:51:6a:4e:91:1f:c3:2a:ba:e1:1c:53:5e:e5:e4:
6e:09:1a:ce:56:5e:f9:a1:26:89:f4:a6:8a:21:a4:
7d:75:3a:f8:1c:fb:68:b0:20:cd:f6:1c:b3:4b:24:
04:29:be:d3:4f:cd:62:b8:c2:ef:39:ee:0d:a2:7f:
30:eb:5e:3d:f1:f3:d0:56:48:89:91:99:65:7a:9c:
9a:71:cc:51:ea:ba:57:68:8b:93:34:04:a1:ef:14:
97:77:e2:f4:43:42:60:14:d8:c4:d3:ec:56:61:74:
f0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:ED:C7:37:70:AA:AE:4F:26:34:2D:90:1A:AF:AF:4F:3C:AC:2F:5A
X509v3 Authority Key Identifier:
keyid:06:6B:A2:09:C5:0C:02:A8:58:B5:43:08:C8:2A:E5:BF:30:2E:FA:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ab:53:f0:29:f8:0e:2b:e1:2f:0d:45:8a:b5:cc:5d:2a:36:
c5:4f:3a:d9:39:c1:eb:bf:01:05:c2:07:34:09:fc:c9:c4:ae:
3f:e1:28:68:8d:b4:6b:71:7e:84:e8:01:20:7c:b3:51:fa:80:
71:e3:e3:9c:60:28:ef:b7:30:e5:4e:45:ac:b3:27:18:f4:da:
7f:66:fa:db:37:f9:a6:a0:50:4e:30:51:5c:08:bc:31:a1:a3:
53:4f:2e:71:6b:83:67:db:6b:57:71:4b:15:ae:b9:42:7b:ce:
6a:6b:6a:79:6b:6d:e4:4c:15:02:6b:ea:e9:3a:96:72:68:97:
0f:dc:3b:95:84:28:86:96:ff:46:bb:97:fe:13:6e:6c:ed:51:
29:1c:19:9b:0e:ca:85:ae:ca:c7:98:9f:62:ae:ad:d6:8e:38:
15:25:4a:d3:85:e3:ca:25:85:e5:70:84:75:41:4c:e5:b2:f3:
92:3a:28:52:72:74:dd:ae:7c:14:27:32:8d:ab:24:28:6d:9e:
48:54:61:28:12:c4:68:f8:86:c6:14:68:04:cb:2e:c3:5e:30:
50:2c:4c:58:29:4d:e0:f8:90:37:55:6a:e8:d9:45:5f:ef:b3:
07:b3:a3:16:60:a3:59:61:75:c7:32:69:9a:c9:b8:5e:78:fd:
bc:74:49:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:43:15 2025 by rpki-client