Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.mft
File: BbiIxzyL2SyrKy9GX-Z17h9unWA.mft (raw, json)
Hash identifier: fUo6mT3f4pbc0yyY5hFKNqLqzjYQscwcu7Cgry8sNTE=
Subject key identifier: 24:84:43:D0:3A:A7:22:06:04:EA:0A:86:EE:E8:6C:E5:4B:62:5F:BF
Authority key identifier: 05:B8:88:C7:3C:8B:D9:2C:AB:2B:2F:46:5F:E6:75:EE:1F:6E:9D:60
Certificate issuer: /CN=05b888c73c8bd92cab2b2f465fe675ee1f6e9d60
Certificate serial: 019697BCE8A92CAE85DC7EA107E38E62113F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbiIxzyL2SyrKy9GX-Z17h9unWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.mft
Manifest number: 151D
Signing time: Sat 03 May 2025 20:01:01 +0000
Manifest this update: Sat 03 May 2025 20:01:01 +0000
Manifest next update: Sun 04 May 2025 20:01:01 +0000
Files and hashes: 1: BbiIxzyL2SyrKy9GX-Z17h9unWA.crl (hash: q+poyPKNeWC9NOFBkIoOiKnhtYWiY5ehqmY5ZYszWP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbiIxzyL2SyrKy9GX-Z17h9unWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:97:bc:e8:a9:2c:ae:85:dc:7e:a1:07:e3:8e:62:11:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b888c73c8bd92cab2b2f465fe675ee1f6e9d60
Validity
Not Before: May 3 20:01:01 2025 GMT
Not After : May 4 20:01:01 2025 GMT
Subject: CN=248443d03aa7220604ea0a86eee86ce54b625fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2b:6a:5e:c6:5c:73:6c:3a:50:24:58:21:0f:
1d:10:63:c5:a0:bc:b7:57:6c:9a:f7:77:0b:e4:e0:
cd:6f:03:9f:f6:90:8e:46:1d:65:9b:26:2e:5d:ee:
41:09:da:70:13:e6:af:d4:8f:96:b0:e9:be:e0:a0:
ec:b0:aa:73:19:e4:a8:b0:8b:ec:66:30:85:c8:66:
1a:50:f6:97:59:e0:ab:75:7f:6f:66:97:36:6b:0d:
48:52:e7:13:0e:f7:60:c7:88:2d:c1:ab:ad:72:c8:
65:76:b9:cd:88:ab:b5:d5:f1:bb:0d:db:3f:8f:0e:
86:a3:31:31:0f:43:73:3a:55:f6:8e:d9:fc:cb:1e:
45:f7:d2:8d:f6:26:c0:77:72:a7:e0:23:f1:9e:18:
4e:62:70:2d:12:6a:6d:2c:19:4f:3a:d8:46:e7:0c:
6f:11:7a:44:f6:39:e5:3e:12:2c:ef:9f:f6:7b:b2:
e9:c8:c9:ef:c8:46:32:7c:c1:0a:06:fc:11:0a:08:
93:94:e5:5a:4a:4f:4f:26:29:58:d6:bf:21:32:13:
e1:0c:af:1e:df:d2:31:e2:1d:66:37:6e:34:84:4b:
94:e2:ea:44:22:3c:a5:72:19:a4:79:2b:93:a4:3d:
db:f9:49:84:4f:0c:5b:9b:37:0f:15:93:bb:7d:f8:
b9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:84:43:D0:3A:A7:22:06:04:EA:0A:86:EE:E8:6C:E5:4B:62:5F:BF
X509v3 Authority Key Identifier:
keyid:05:B8:88:C7:3C:8B:D9:2C:AB:2B:2F:46:5F:E6:75:EE:1F:6E:9D:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbiIxzyL2SyrKy9GX-Z17h9unWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:26:c0:17:b0:9e:c2:8e:e0:26:0b:e1:c6:05:ae:de:9a:5e:
74:04:80:19:19:7f:3a:51:63:fb:cb:b5:d7:8f:dd:4a:2b:95:
74:74:1f:cf:5a:e5:8a:73:39:76:db:2f:c9:62:fa:ce:ca:c9:
36:a4:74:81:7d:cc:e8:47:7b:e0:92:71:e4:64:1a:10:e1:0d:
28:4d:58:09:6a:86:23:ba:39:a7:61:16:99:b4:b9:1b:59:ed:
9a:95:09:34:0e:2b:b1:ea:92:49:99:d9:50:12:01:c1:75:9c:
f2:56:fb:50:fb:cb:17:e0:95:c9:2d:bb:5c:fc:f0:29:34:32:
fe:a6:3e:5c:73:08:f0:47:61:e8:cf:e6:65:f3:14:1c:c3:c6:
e5:82:1d:aa:5c:55:ec:25:8f:e9:66:d0:a1:69:d2:f6:94:cd:
e5:e0:f0:bc:3b:51:95:c8:75:78:b5:7d:d5:f6:d3:53:8b:3c:
63:13:48:9c:c0:b9:c0:91:45:87:b1:3a:00:f9:50:44:4a:f5:
a4:38:69:92:b0:bf:dc:66:e8:1a:e7:38:51:0c:26:c9:e2:f6:
36:47:6c:83:6d:b9:d3:aa:4f:15:ac:9d:0d:95:77:0c:03:0b:
34:21:50:43:c8:a1:3c:6c:0e:a7:c4:3b:80:c3:bd:e1:a6:f6:
a5:74:e6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 05:49:56 2025 by rpki-client