Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
File: BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft (raw, json)
Hash identifier: Q28qvcQBKLlWZY5xvwitIQrwZ3S8Yzg1YTr7viMnCjc=
Subject key identifier: CB:A9:B1:84:41:4C:D9:30:19:16:D7:04:29:A2:2E:3D:F4:69:C0:62
Authority key identifier: 04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A
Certificate issuer: /CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a
Certificate serial: 01968A00C7C4D99E72712B658015D1FE4498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
Manifest number: 1519
Signing time: Thu 01 May 2025 04:00:28 +0000
Manifest this update: Thu 01 May 2025 04:00:28 +0000
Manifest next update: Fri 02 May 2025 04:00:28 +0000
Files and hashes: 1: BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl (hash: CfdjH4pV1n5AJdkMuu15h7OgT3qlAAqSnElVswm9r1A=)
2: N9wZb19u6uDl2jmJsSrj5tJBTrs.roa (hash: 0C5L52QJ9EePN5vLiQx5L6BEy17vjwGiBKVGlRWVCRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:00:c7:c4:d9:9e:72:71:2b:65:80:15:d1:fe:44:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a
Validity
Not Before: May 1 04:00:28 2025 GMT
Not After : May 2 04:00:28 2025 GMT
Subject: CN=cba9b184414cd9301916d70429a22e3df469c062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a4:99:bb:a2:10:e6:c9:08:36:9b:59:2c:9d:
7f:f1:75:a4:6e:37:b5:92:a0:ad:96:16:97:c0:2b:
57:7f:46:76:6b:77:89:62:62:2c:45:10:85:06:2b:
45:b8:b2:0a:fb:3a:5e:44:58:9b:55:a7:c5:93:2b:
ad:a0:83:7f:da:38:dc:cf:4c:96:38:c9:21:63:06:
0d:0b:95:8e:ba:f7:10:3f:81:93:04:85:6b:8d:2a:
89:88:e7:f9:d1:91:e9:91:02:f2:b4:f9:40:20:91:
70:2e:bd:8c:03:ce:8c:84:96:6e:51:15:b6:26:91:
e3:be:02:96:e7:c9:5b:a8:4d:ae:4f:fc:85:c3:0f:
f3:e5:d1:2a:db:87:bf:64:bd:ce:65:e7:12:77:1d:
63:a2:05:63:48:10:e7:1a:72:bb:56:1a:d3:ec:65:
36:8b:2e:3b:fa:4f:82:53:2c:9d:95:5c:14:a4:40:
11:73:35:3c:0b:d7:dd:ef:4f:74:b1:c8:5b:da:fd:
25:ae:02:02:4f:e7:7e:79:e0:1a:0f:ed:46:10:62:
f3:b1:bd:c5:76:10:65:c9:67:90:3d:7c:d7:ed:4f:
4d:a1:b0:e0:5a:30:86:13:af:73:94:03:5e:47:35:
94:6f:e6:43:6c:fb:49:de:75:ca:41:9f:b2:9c:97:
29:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A9:B1:84:41:4C:D9:30:19:16:D7:04:29:A2:2E:3D:F4:69:C0:62
X509v3 Authority Key Identifier:
keyid:04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:bf:2f:4f:d6:56:40:91:53:f4:a3:d7:4f:60:64:4c:45:a4:
b9:0b:63:e1:07:14:b5:29:aa:c5:e0:89:04:bb:d6:bd:99:6e:
3f:b7:e4:35:af:7c:51:37:71:f6:1d:44:35:ec:f0:f2:32:9b:
88:9b:44:89:38:56:ea:37:01:b4:a0:44:e8:21:ee:1f:c8:5b:
b2:dd:0e:07:4b:13:49:ae:40:ed:7d:41:e9:6e:1e:b9:e6:cc:
50:52:3c:c1:07:24:34:0d:17:eb:5c:5c:36:d3:e9:b0:6d:b6:
35:4d:c4:ad:c6:be:6a:56:7c:d2:c4:c3:57:44:2d:ca:e8:9c:
88:cc:ca:01:e6:cf:e5:c2:d3:82:48:9c:69:5d:c1:31:b5:1a:
a0:b2:e3:fa:fa:24:bb:d1:88:29:3f:48:46:b3:8d:68:4d:04:
2e:d9:a2:a0:6d:b2:90:af:e7:82:c5:d4:12:e0:de:3c:74:b8:
67:3f:4d:bc:54:6e:e0:9a:6b:cb:ff:74:0d:2b:33:f2:ec:d3:
32:1a:53:0b:27:84:f2:b9:1b:a0:55:44:62:87:c8:23:8a:10:
b1:68:6b:fa:e7:65:36:de:40:29:98:58:fa:c1:9b:f8:3b:61:
83:1f:19:02:76:90:60:16:fa:a1:44:38:e3:79:96:8d:f1:db:
46:60:65:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:09:52 2025 by rpki-client