Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
File: BE-_fHvu77FSWiYU2c1jpCafn0o.mft (raw, json)
Hash identifier: HvNc0NYoyqlLYsZzpmkjhJEjfzWidT8K7Udct9qVgUA=
Subject key identifier: 91:3A:EE:3F:4D:C5:ED:78:70:0F:25:93:92:97:24:3D:A3:2D:F5:B4
Authority key identifier: 04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A
Certificate issuer: /CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a
Certificate serial: 01967AC4DBBC84DD9B1A48F3E57C08637EAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
Manifest number: 06D1
Signing time: Mon 28 Apr 2025 05:00:43 +0000
Manifest this update: Mon 28 Apr 2025 05:00:43 +0000
Manifest next update: Tue 29 Apr 2025 05:00:43 +0000
Files and hashes: 1: BE-_fHvu77FSWiYU2c1jpCafn0o.crl (hash: 8VzamCPGJNj+mIPmGpHhOOSXBecAZ5mdmcxFt2el44s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c4:db:bc:84:dd:9b:1a:48:f3:e5:7c:08:63:7e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a
Validity
Not Before: Apr 28 05:00:43 2025 GMT
Not After : Apr 29 05:00:43 2025 GMT
Subject: CN=913aee3f4dc5ed78700f25939297243da32df5b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:79:ef:2c:cf:a0:5b:5a:75:c9:3f:22:65:44:
d8:6b:9a:c5:74:ef:75:be:87:96:5a:4e:7e:75:72:
06:4b:f4:a7:68:73:3a:17:3f:93:74:53:8e:38:27:
50:c8:8d:1e:dc:b9:56:00:a3:90:5c:60:7e:54:c6:
8f:c1:3c:c1:7a:45:da:ee:d7:8a:1d:38:2e:cc:f1:
b5:d5:cb:a6:6d:05:5e:19:a7:74:08:95:6d:74:d7:
2e:e4:b6:0d:d4:cb:6b:e5:33:04:48:bd:bd:d2:b2:
94:57:71:38:2d:86:6f:75:ac:81:3e:0d:42:63:16:
de:68:72:41:67:9c:81:a7:1b:fa:6e:5a:d4:cf:cd:
81:30:97:7d:e7:5d:9d:bf:88:3e:92:46:dc:3b:df:
e2:69:39:62:41:3a:35:2a:aa:79:c9:e8:25:f1:57:
f1:be:63:e4:3a:53:31:0f:1f:21:e5:ec:d1:c8:74:
88:46:17:b1:68:25:40:f3:32:f3:bf:be:bd:42:e9:
70:c1:78:f1:56:57:67:65:1b:f5:af:e4:76:30:1b:
4e:c4:41:1c:dc:ae:9c:be:61:db:fd:6b:9c:95:da:
76:dc:de:e3:2d:cf:c1:57:0e:35:e1:a8:93:1d:20:
4a:89:95:2a:32:5e:7b:96:2a:f8:b3:98:3f:2a:5c:
fd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:3A:EE:3F:4D:C5:ED:78:70:0F:25:93:92:97:24:3D:A3:2D:F5:B4
X509v3 Authority Key Identifier:
keyid:04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:10:f6:18:4e:fe:fd:e5:e2:dd:ae:ba:d9:58:2d:d9:97:d6:
2f:a6:65:39:a0:0a:d5:5c:aa:22:83:03:72:e4:02:7b:ec:e4:
b2:9b:0f:76:9d:da:cb:6d:83:de:4e:a8:bd:86:a8:f5:b2:53:
0b:39:d8:fd:d9:20:f9:41:46:d7:c5:62:cd:15:e6:e5:6d:6f:
32:70:11:be:c0:2a:78:99:dc:ab:90:40:ac:46:3a:a6:e9:94:
a8:c9:fb:14:b9:bf:10:25:45:79:ba:79:89:06:d5:4f:58:a6:
ad:1f:e3:d4:48:d5:f9:fc:ac:0a:21:cb:9b:c5:c5:2e:28:33:
9e:86:ea:91:6b:30:53:c5:d5:9d:2e:85:05:06:85:df:0d:da:
1b:ab:99:72:2a:5f:6f:7f:41:87:63:47:d6:8f:f3:1c:10:31:
5f:ef:5e:27:d2:2f:d1:50:7a:b4:95:50:13:df:24:6f:8a:b4:
0d:76:06:14:45:e6:85:83:d7:6d:f1:49:a8:5f:b5:0b:37:e5:
20:d4:b9:23:d3:d7:b5:ab:d4:7a:ee:04:db:a0:17:c9:b5:aa:
aa:06:e1:fe:94:07:18:9c:7b:11:f3:1f:ac:b2:24:86:df:69:
57:7c:16:65:61:61:17:2d:30:84:57:19:e2:68:0a:b6:a9:bf:
fa:18:36:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:10:44 2025 by rpki-client