Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
File: bzxUCLL2cjP2DWP3SaxIPrZq58g.mft (raw, json)
Hash identifier: FJ1IK2mQ62/hdon1COlSiHNEEQOED9oN4zcwRsYG+wA=
Subject key identifier: B6:6F:7A:3A:EF:E2:32:FC:A4:71:52:B6:0D:B8:93:B0:C4:AE:9E:6A
Authority key identifier: 6F:3C:54:08:B2:F6:72:33:F6:0D:63:F7:49:AC:48:3E:B6:6A:E7:C8
Certificate issuer: /CN=6f3c5408b2f67233f60d63f749ac483eb66ae7c8
Certificate serial: 0196767A2F794ECDF02FA7D5A9B5D73DA9EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 09:00:40 +0000
Manifest this update: Sun 27 Apr 2025 09:00:40 +0000
Manifest next update: Mon 28 Apr 2025 09:00:40 +0000
Files and hashes: 1: bzxUCLL2cjP2DWP3SaxIPrZq58g.crl (hash: BL75e4MSN4S6VhmyJVqLLfgR9C5gYPA/MVy08Y6AIR8=)
2: h5hkogAm1tMHtJhfME4RZjDHuf4.roa (hash: RP4fFeHsjDtuvEjbGy1zv2SpMtLitRmpW5FaeuzZl5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:2f:79:4e:cd:f0:2f:a7:d5:a9:b5:d7:3d:a9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3c5408b2f67233f60d63f749ac483eb66ae7c8
Validity
Not Before: Apr 27 09:00:40 2025 GMT
Not After : Apr 28 09:00:40 2025 GMT
Subject: CN=b66f7a3aefe232fca47152b60db893b0c4ae9e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a3:fa:23:a8:20:fe:34:d8:ba:60:51:79:e3:
d2:5a:36:c0:e7:13:1d:01:da:26:03:9f:9b:7d:cd:
88:a7:62:2d:07:5b:3c:55:c9:45:bd:e9:25:7a:e9:
e3:88:aa:f3:c9:3a:0d:45:61:65:6e:09:1d:52:ec:
97:0a:7a:9c:43:9f:fd:b2:95:2d:0c:10:a2:a3:07:
3b:66:17:77:68:a0:1e:60:5a:4a:67:ee:09:2a:fa:
7c:57:d2:1c:5d:e6:bc:d7:87:ec:56:6b:61:8d:df:
1f:36:c1:56:c4:d2:84:31:c9:9e:ee:ea:b0:47:5d:
cd:01:88:d4:f8:e0:12:02:79:67:90:04:bb:b6:23:
f9:04:3c:4b:d8:51:a1:27:6b:83:81:98:57:89:46:
af:34:e4:07:76:d1:79:91:55:a5:ae:05:b6:44:f6:
70:7d:02:a9:78:36:59:5d:d4:be:e6:40:34:1a:e8:
b2:4b:0e:ac:de:ca:5a:71:41:24:eb:4c:e2:33:73:
c3:1d:7e:17:e7:c9:ae:3e:92:32:36:2f:c1:ee:bc:
2b:74:37:ff:b3:b0:bd:e9:02:ff:28:c5:d1:fe:81:
6f:ec:36:ac:56:28:de:1a:43:c4:10:de:42:98:33:
87:fc:6f:9e:f5:14:bf:d0:02:43:b0:14:1c:0e:e1:
b9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6F:7A:3A:EF:E2:32:FC:A4:71:52:B6:0D:B8:93:B0:C4:AE:9E:6A
X509v3 Authority Key Identifier:
keyid:6F:3C:54:08:B2:F6:72:33:F6:0D:63:F7:49:AC:48:3E:B6:6A:E7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:35:5b:2e:c4:21:f8:b5:31:09:c4:3b:ea:b4:56:f8:7f:1f:
cc:64:7f:76:c2:79:e9:38:f5:66:d9:95:66:f5:92:ce:3b:75:
10:a1:17:ad:bc:2d:96:d8:65:6d:a7:7a:b3:2c:58:49:76:5e:
79:8d:91:50:bd:85:cd:35:00:89:d0:ca:f5:04:8b:19:a9:d5:
65:79:2b:ad:58:21:6a:8b:9a:0d:b8:6f:ba:00:19:8c:02:71:
45:b5:af:04:29:1d:3a:4d:02:d4:00:98:d8:04:69:dd:e1:00:
e8:c6:b3:99:92:e0:3b:9c:68:3c:a8:64:26:0a:b8:81:2e:f4:
f1:3c:8a:e2:da:0c:8f:c2:54:c7:5d:ac:02:03:18:e6:c0:a9:
89:bc:f0:fb:0a:2f:1e:40:b5:29:78:b2:42:30:22:73:4b:c4:
bb:01:28:08:70:98:75:09:1c:90:8d:d3:94:b1:b3:9a:8d:e7:
be:ab:5f:ff:ac:db:b3:37:9d:b1:da:84:5c:3d:28:ac:96:e9:
c6:3a:96:13:c9:ec:d2:ae:ee:40:c8:8f:1a:2f:57:59:97:1c:
a4:80:68:eb:86:9e:21:35:ba:09:61:c0:ac:89:4a:53:94:96:
74:8e:e4:12:62:5e:72:61:45:33:70:24:d5:4c:e0:b2:81:81:
4e:b9:0e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:07:14 2025 by rpki-client