Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
File: BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft (raw, json)
Hash identifier: gnZ5GnTzl0z4YQxlVNwCL/8jbufWQN2NAtsa1+n/+wU=
Subject key identifier: 6F:B8:D6:29:31:FE:8D:71:E3:D1:D8:E2:8C:42:28:27:F4:AC:42:5E
Authority key identifier: 05:9B:86:F9:9E:2D:6B:DE:14:FA:87:99:DE:71:CE:41:B9:80:20:B9
Certificate issuer: /CN=059b86f99e2d6bde14fa8799de71ce41b98020b9
Certificate serial: 01968D0205E42236BF508F382B97C100A38E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
Manifest number: 1523
Signing time: Thu 01 May 2025 18:00:41 +0000
Manifest this update: Thu 01 May 2025 18:00:41 +0000
Manifest next update: Fri 02 May 2025 18:00:41 +0000
Files and hashes: 1: AygjfPSd-BYn9y5589qLTfq5Rzs.roa (hash: Xsk4y1Xslni0owNFlDmKiaazs1AHnjaqup5PkFi/QvQ=)
2: BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl (hash: 5j1JvcBu3CnwktGNNCiwMNlsVXnQydHReWRbsBPftog=)
3: _R70hvmCDErcQolme5Vd42Vi6c8.roa (hash: KbGa/eiRh/5D5R1QaKcGjt0GDJJLwcDE+DkGHax+lFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:02:05:e4:22:36:bf:50:8f:38:2b:97:c1:00:a3:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059b86f99e2d6bde14fa8799de71ce41b98020b9
Validity
Not Before: May 1 18:00:41 2025 GMT
Not After : May 2 18:00:41 2025 GMT
Subject: CN=6fb8d62931fe8d71e3d1d8e28c422827f4ac425e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d8:5b:dd:f7:ec:1f:52:f9:09:dd:e5:f6:3b:
7a:8f:24:5a:da:33:c3:35:82:93:13:db:9a:96:e0:
14:65:67:3f:c9:0c:26:aa:79:fb:5c:4b:d1:03:58:
60:83:f9:ef:8a:21:a0:b3:fc:24:33:12:2d:7c:ec:
32:6f:f6:f2:66:6e:4a:af:37:e3:79:70:9e:0e:80:
46:50:01:11:cf:c2:9b:db:c4:63:de:76:02:81:d7:
bd:dc:e5:17:35:a1:b1:53:d9:7c:de:7e:89:07:27:
df:41:dd:a9:fd:66:0f:7a:79:55:2e:39:11:c0:86:
8f:e7:e9:57:45:c0:a1:71:03:3d:03:51:d5:9d:98:
9b:c7:2e:fa:a3:b3:6e:5b:b7:e6:0a:e6:74:c4:65:
18:96:bd:89:1a:70:d5:26:25:e6:4a:27:0e:59:3c:
52:d1:25:ee:cf:63:ba:4e:da:e1:57:66:b9:d1:2b:
7f:d6:d4:13:60:51:31:ba:69:e7:c9:b1:0d:f9:66:
1e:e1:d0:b6:5b:20:00:cc:57:a8:2f:26:1f:db:9d:
3b:3a:bd:b0:95:de:df:39:14:e8:ff:e4:d2:11:3a:
e3:db:37:cf:6d:24:94:d1:44:ec:77:aa:28:cd:06:
86:70:ff:27:05:7c:a8:40:b8:0f:7f:98:b5:7a:2c:
0e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B8:D6:29:31:FE:8D:71:E3:D1:D8:E2:8C:42:28:27:F4:AC:42:5E
X509v3 Authority Key Identifier:
keyid:05:9B:86:F9:9E:2D:6B:DE:14:FA:87:99:DE:71:CE:41:B9:80:20:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:7e:4b:ae:bb:00:8d:92:6c:25:c1:9a:64:aa:62:52:c0:b3:
a5:dc:d3:72:6f:96:a9:dd:c6:5f:59:98:03:e7:94:7a:fc:af:
c1:f2:27:57:54:ca:78:6d:2a:b1:a9:ee:32:a4:2e:13:7b:2a:
2e:50:43:63:fe:64:ff:d2:ed:f6:75:da:5e:18:f8:8c:87:dd:
f8:99:15:b9:27:91:e7:85:2d:6e:42:a5:30:39:57:ae:73:33:
35:76:93:b8:c1:d1:a7:cd:94:b4:de:b5:f0:44:5b:17:5b:d0:
06:c2:e0:01:29:55:29:08:67:cf:09:4b:9d:1b:22:01:ac:61:
6e:32:56:e7:36:cb:b4:f2:83:48:bd:6e:46:fe:1f:11:26:83:
72:50:03:bf:44:b2:0a:11:e9:33:20:35:48:ef:73:64:77:73:
04:f1:bd:b2:0d:10:3c:c6:e5:86:57:02:a7:40:e0:28:86:c5:
d2:7b:8f:df:40:31:0a:3b:87:2d:c3:95:50:13:1f:50:2e:b9:
f0:66:d2:a3:4a:a3:b4:85:1a:d1:0f:35:4b:fc:a9:e8:e2:ca:
49:0b:b1:d8:a9:1c:a1:ca:5c:26:42:e7:73:1d:cf:ed:5b:ff:
8d:d0:24:25:66:cf:d1:4f:48:f5:cc:96:7c:c0:4f:de:d6:cb:
76:8f:be:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 22:45:57 2025 by rpki-client