Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
File: BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft (raw, json)
Hash identifier: ssV2aLBab4d2yGROZ6Nzo1fhno4cTyLLoIcySqztoy8=
Subject key identifier: CD:AC:E2:5F:EE:E9:16:7C:DD:86:05:4E:BD:F8:7E:FB:CA:86:C7:E1
Authority key identifier: 05:2B:10:E5:47:E8:9F:F6:C7:B3:9B:6C:A9:7F:B1:6B:3F:DF:BE:4F
Certificate issuer: /CN=052b10e547e89ff6c7b39b6ca97fb16b3fdfbe4f
Certificate serial: 0196789F6C9387EC13E40F216C8AF8F386C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
Manifest number: 078A
Signing time: Sun 27 Apr 2025 19:00:36 +0000
Manifest this update: Sun 27 Apr 2025 19:00:36 +0000
Manifest next update: Mon 28 Apr 2025 19:00:36 +0000
Files and hashes: 1: BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl (hash: MsvBxxj6brvezH1V/NgZxcPVgLfoTBkOZqtCaun62oU=)
2: kZOSQmU6A2elFsqdm-zFawpP2VM.roa (hash: bGe5j2ABlU0093SdrMDiQuuHNz672BXZ6vQ6WijSw+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:6c:93:87:ec:13:e4:0f:21:6c:8a:f8:f3:86:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052b10e547e89ff6c7b39b6ca97fb16b3fdfbe4f
Validity
Not Before: Apr 27 19:00:36 2025 GMT
Not After : Apr 28 19:00:36 2025 GMT
Subject: CN=cdace25feee9167cdd86054ebdf87efbca86c7e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:71:75:b1:da:2c:29:70:02:62:f8:7e:8d:2b:
b9:76:ee:32:38:0c:91:f0:ab:e2:5d:d4:7f:47:63:
cf:31:5b:4e:88:43:d4:ff:32:7f:c5:fc:e3:52:ca:
82:59:b2:ae:d1:99:c8:08:75:8e:51:55:05:cd:1d:
e7:38:e3:de:a0:a3:d5:58:63:5a:6f:a7:59:b5:50:
21:92:2c:19:e1:6b:be:9c:81:f6:90:8f:2e:18:91:
b8:ea:fa:1b:fe:5f:85:28:24:5e:35:5a:13:4e:43:
06:b5:77:d0:e2:ae:dc:42:df:fe:74:99:da:aa:97:
25:bf:61:03:f9:ea:9c:83:11:f5:13:5e:46:cb:a6:
f2:83:e7:52:c0:81:da:13:e5:41:e9:80:bd:03:d8:
7a:c2:df:2a:f7:66:bf:28:85:92:d8:d1:61:a2:8c:
c6:9d:67:54:17:23:56:71:75:03:71:06:b8:fc:55:
7e:50:3e:ff:4b:a9:4b:a2:8d:52:8b:bf:ce:b6:d6:
1a:b7:48:f5:eb:bf:8a:54:44:27:99:92:19:6a:bc:
60:f9:fd:8b:e1:d4:0e:01:f8:03:b8:41:55:ab:c9:
25:11:de:df:fb:f6:e4:53:b7:5f:1f:f6:4b:59:8e:
ef:86:e5:bc:8b:69:6b:26:10:31:d1:4c:ca:7f:e5:
3e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AC:E2:5F:EE:E9:16:7C:DD:86:05:4E:BD:F8:7E:FB:CA:86:C7:E1
X509v3 Authority Key Identifier:
keyid:05:2B:10:E5:47:E8:9F:F6:C7:B3:9B:6C:A9:7F:B1:6B:3F:DF:BE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:14:da:6a:63:76:fb:db:38:1c:2b:3d:b9:f3:9d:4c:e4:ca:
f0:7c:56:be:ec:d5:6d:6c:e8:28:29:33:98:1f:55:fb:10:31:
43:e0:c9:94:2e:6c:9d:d0:73:5f:d8:a9:2a:33:86:e1:b3:56:
fd:79:1e:db:4f:fa:34:d0:cf:fd:1e:18:e5:52:22:6c:d6:bd:
d6:8c:7e:8a:98:27:fb:81:71:23:19:72:ef:19:fa:aa:33:03:
00:43:9f:27:68:9d:22:da:ac:cf:57:00:49:80:e5:f3:b2:32:
db:c3:e9:bf:22:19:48:1f:3e:2b:f8:c4:d7:44:52:48:9c:bb:
5d:49:56:c7:dd:6f:3d:47:89:ad:d3:a2:fe:76:72:e5:dd:86:
7e:1a:b1:30:33:16:0b:de:2a:74:d2:2c:1c:55:03:19:58:c4:
e1:64:f6:78:15:11:5d:09:d6:ae:33:e9:08:dd:c8:e0:ed:05:
74:60:e5:05:7c:7e:35:b8:47:41:dd:cb:c8:46:9e:bf:c9:c3:
a1:52:72:c1:9b:2f:19:48:63:c9:b9:05:5e:88:41:39:52:ff:
f4:18:76:ff:d2:24:05:27:9e:75:26:ae:6a:d5:54:75:be:c9:
13:ce:16:36:d0:9f:e2:e9:ac:c2:e0:49:e7:0a:61:a8:66:bc:
d2:b9:1c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:04:58 2025 by rpki-client