Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
File: BfCLdPURftOAcj2eQp7LSqU4Ulo.mft (raw, json)
Hash identifier: 30B+FNT8eSkv7szIjn91IlcFUz2jamrfIn9DnJXRdIw=
Subject key identifier: 72:EF:9A:99:67:15:5D:04:9A:C0:AF:49:F0:B8:BA:20:80:DB:B1:0D
Authority key identifier: 05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A
Certificate issuer: /CN=05f08b74f5117ed380723d9e429ecb4aa538525a
Certificate serial: 019674C2E0974BF4D016F8BF190EDBC4B4D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
Manifest number: 1512
Signing time: Sun 27 Apr 2025 01:00:50 +0000
Manifest this update: Sun 27 Apr 2025 01:00:50 +0000
Manifest next update: Mon 28 Apr 2025 01:00:50 +0000
Files and hashes: 1: BfCLdPURftOAcj2eQp7LSqU4Ulo.crl (hash: 1nV05g5kKwGG93YZ0KhLNJfeEwYjaELcqjY78sam31o=)
2: cadUElPbaF409FA_2Wg_Q_GYDPU.roa (hash: NuxwFEiNd/qBOlqeuoFPvUGS7VeCKWQWl9Silhu16kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:e0:97:4b:f4:d0:16:f8:bf:19:0e:db:c4:b4:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f08b74f5117ed380723d9e429ecb4aa538525a
Validity
Not Before: Apr 27 01:00:50 2025 GMT
Not After : Apr 28 01:00:50 2025 GMT
Subject: CN=72ef9a9967155d049ac0af49f0b8ba2080dbb10d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cf:52:02:b2:d6:33:7a:27:65:5e:a1:18:dd:
da:63:e6:c0:f4:1e:0c:f0:f6:4b:0b:bf:58:6a:72:
10:de:bb:28:76:2a:dd:27:4f:14:f4:71:8e:d5:3b:
cd:ed:cc:79:87:38:fa:b7:8f:00:2d:23:ba:74:8c:
3a:8b:bd:56:80:d0:4a:a0:39:ed:ba:46:01:05:db:
80:72:dd:95:5d:4e:c8:91:12:50:f1:b0:c8:8c:c3:
48:f3:28:bb:97:9a:c8:a5:d5:84:4c:6d:41:8c:c6:
a3:10:2a:c6:a8:a5:aa:cf:e4:d3:fb:15:56:55:aa:
59:36:52:49:89:21:d7:84:2e:f0:bf:1b:94:1b:29:
50:4d:7c:a3:e2:cc:f8:4d:ef:e1:b6:dc:6c:72:e1:
cb:32:f2:cb:d0:18:3f:86:48:e6:9b:3a:b3:2d:39:
b2:02:ff:74:0a:43:ff:ee:cb:8b:8e:bd:9e:71:71:
5d:4f:d1:3c:c9:4d:1d:bc:0f:f0:5c:14:ca:1d:84:
35:f4:99:60:19:2b:ba:72:23:4e:44:50:f9:21:a4:
04:e8:9d:de:0b:95:60:4d:99:94:c4:52:84:c0:fb:
18:cf:65:62:95:66:32:64:ca:df:cf:90:80:09:0f:
7a:9e:03:40:94:7f:a4:c1:7e:75:de:31:a0:bf:fe:
b4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:EF:9A:99:67:15:5D:04:9A:C0:AF:49:F0:B8:BA:20:80:DB:B1:0D
X509v3 Authority Key Identifier:
keyid:05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:17:6f:99:68:79:42:6f:d8:68:59:e3:03:ce:a1:f4:66:70:
af:4e:f1:05:e3:58:df:dc:84:d6:6f:4d:a4:5a:18:9a:46:bf:
25:cc:cb:af:18:fa:a0:a2:22:84:6e:0b:1f:d1:2c:4b:8d:b1:
89:ff:fa:bc:63:49:31:2c:ba:2c:ef:d8:04:bc:d2:82:67:fc:
5a:2a:8c:34:d4:32:ef:69:b9:d4:55:38:9d:e7:e0:36:de:12:
18:70:8a:4a:0c:5c:8f:7e:0f:86:45:7f:c7:cb:52:2f:0c:8d:
88:c6:93:c1:f0:d7:47:ca:41:c0:c3:dd:b5:c2:b0:36:fc:4f:
47:62:41:f8:68:4d:66:6c:a8:d1:8e:1f:f0:a4:31:a0:1c:58:
b1:23:1a:cc:9c:33:ef:de:33:c0:ff:10:f6:e9:09:ba:67:72:
04:a4:60:b7:f5:2b:0c:8a:4f:36:1b:8c:3e:bd:04:68:b0:fb:
62:92:d2:bf:b3:8f:cc:ce:76:e8:6f:50:5c:37:9e:49:04:36:
8f:d6:e3:e0:50:ff:3b:85:05:61:f9:b3:6a:58:af:82:22:43:
0c:0c:25:1e:fd:80:00:f1:7c:64:06:20:08:af:bc:83:d9:2c:
9a:48:ff:8c:0b:c7:6a:24:1b:05:d6:7d:d6:4d:68:e7:e4:df:
f2:75:6f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:10:16 2025 by rpki-client