Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
File: BE1l50JUsl_gDrjqBrtY--aKwZs.mft (raw, json)
Hash identifier: KacnjA77++f2QJ+qrQz6c+Y0NY1wSJRgNs3o4Py1CnY=
Subject key identifier: 71:C4:1C:84:FB:9F:C6:4F:BE:AE:41:44:B5:A1:A3:C7:02:08:2E:BD
Authority key identifier: 04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
Certificate issuer: /CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Certificate serial: 019676E7E9387E55A6C333BFBC04F9CBAE22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
Manifest number: 0B10
Signing time: Sun 27 Apr 2025 11:00:32 +0000
Manifest this update: Sun 27 Apr 2025 11:00:32 +0000
Manifest next update: Mon 28 Apr 2025 11:00:32 +0000
Files and hashes: 1: BE1l50JUsl_gDrjqBrtY--aKwZs.crl (hash: ZbyDwKd6etCoIcW5d9YR81GgoTmMkAMcmUMoH+LDLHI=)
2: rthTWvBWTldvCBC_jsm-IEkTBFQ.roa (hash: GkYmfEttYtLOHlLhDgqjd5V7UynvO3JpXV9H0/Hyyb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:e9:38:7e:55:a6:c3:33:bf:bc:04:f9:cb:ae:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Validity
Not Before: Apr 27 11:00:32 2025 GMT
Not After : Apr 28 11:00:32 2025 GMT
Subject: CN=71c41c84fb9fc64fbeae4144b5a1a3c702082ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5c:b5:a6:d1:5a:7a:cd:bc:f5:02:bc:2a:df:
52:6c:aa:c8:1f:5a:c9:1a:d5:95:df:e5:1b:b0:5d:
80:47:4b:54:82:ff:3a:b5:24:d5:f1:0d:7d:1d:d3:
95:eb:ac:00:ac:cc:c2:e7:b5:e0:fb:2d:e6:6f:b9:
54:99:0e:df:41:c3:76:89:75:8b:4c:d9:58:b7:a6:
42:94:28:53:97:74:be:1e:38:43:fb:26:f9:ba:43:
7a:77:fe:90:2b:af:f4:60:6d:8c:33:89:75:ab:b2:
45:36:77:ae:05:1f:d5:30:4e:2e:f6:78:c7:01:50:
a9:c5:98:c5:3a:9a:86:65:c0:b6:f6:96:3a:ae:77:
54:c0:9d:d2:6b:c9:b2:d3:ee:d0:a0:4e:b8:1e:a8:
b4:4a:29:a0:b2:23:98:3f:66:af:f2:c6:20:f5:c6:
34:49:fd:83:73:31:71:68:f9:9d:5e:44:04:a7:57:
ec:53:b5:5c:44:6c:b4:05:e2:4b:83:fa:ff:96:8a:
e3:ec:40:99:c0:69:cc:ee:38:39:d6:8b:c7:76:a8:
8b:a4:ad:91:4f:8a:37:bb:84:e8:b2:5b:52:11:26:
41:6f:f6:d8:a2:aa:d9:40:ad:a3:e1:46:37:ac:b5:
17:49:fb:1f:88:a9:3e:e8:a3:ac:07:e9:c9:03:e3:
bd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C4:1C:84:FB:9F:C6:4F:BE:AE:41:44:B5:A1:A3:C7:02:08:2E:BD
X509v3 Authority Key Identifier:
keyid:04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:48:f2:a8:1a:8e:55:17:74:82:87:ec:56:f5:72:46:89:d5:
e8:15:e7:da:ee:c4:8c:b0:02:cd:98:50:25:12:9c:49:3a:90:
bc:06:46:68:56:67:6c:73:11:cb:ce:97:25:a1:27:18:9b:97:
dc:d0:80:55:41:fa:d2:de:06:46:d6:9f:35:0f:06:44:63:fb:
40:04:b9:98:73:5b:36:73:05:f1:21:bf:cb:ea:5c:11:10:b8:
b0:68:1e:12:12:18:1b:e7:7c:12:36:ed:6f:5a:58:6d:33:9b:
30:09:23:a8:91:c2:6c:ba:96:6d:62:7d:1b:fd:d7:47:9d:78:
10:95:a8:34:0c:8d:61:50:dd:d7:00:c4:4b:45:c8:a5:80:ee:
5b:a1:3b:c5:1c:17:83:cc:39:cb:d6:44:74:94:0d:c2:9d:5b:
cd:a4:28:26:e8:c2:2d:bf:d0:cf:71:19:63:31:50:46:6b:fa:
67:c2:79:c2:d6:79:bd:b5:db:3b:9e:ee:23:18:d0:ac:e6:46:
e7:47:b9:29:d7:8c:06:2b:3b:e2:09:c9:0f:e0:45:36:98:f2:
a2:09:46:9f:60:76:43:c6:bc:7f:2f:72:8a:25:cc:81:f2:2c:
a2:b4:b8:d8:37:65:9c:ba:13:ae:e4:21:5b:24:ca:24:47:db:
11:ce:ac:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:29:48 2025 by rpki-client