Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft
File: bxfKsp3wkGVUwRzpqynGDR56Z1w.mft (raw, json)
Hash identifier: Sobg5/cYBOxq6Mo6qtxMYLQJnb3hbLyayxiVojNQIfc=
Subject key identifier: F1:3F:22:22:16:FF:F7:4F:72:EF:E7:EE:AE:78:EA:E3:4D:CE:0A:34
Authority key identifier: 6F:17:CA:B2:9D:F0:90:65:54:C1:1C:E9:AB:29:C6:0D:1E:7A:67:5C
Certificate issuer: /CN=6f17cab29df0906554c11ce9ab29c60d1e7a675c
Certificate serial: 01968BEF747792C4BC7BE355D43435872186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxfKsp3wkGVUwRzpqynGDR56Z1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft
Manifest number: 03F1
Signing time: Thu 01 May 2025 13:00:47 +0000
Manifest this update: Thu 01 May 2025 13:00:47 +0000
Manifest next update: Fri 02 May 2025 13:00:47 +0000
Files and hashes: 1: bxfKsp3wkGVUwRzpqynGDR56Z1w.crl (hash: vD8LLGMn9UBuepvyX55FROC83ObOr/1iDUbSyKHtWIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxfKsp3wkGVUwRzpqynGDR56Z1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:ef:74:77:92:c4:bc:7b:e3:55:d4:34:35:87:21:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f17cab29df0906554c11ce9ab29c60d1e7a675c
Validity
Not Before: May 1 13:00:47 2025 GMT
Not After : May 2 13:00:47 2025 GMT
Subject: CN=f13f222216fff74f72efe7eeae78eae34dce0a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:52:4c:50:f5:f8:66:37:fb:dd:f5:03:9e:8e:
33:1e:9d:38:a5:fc:25:c3:01:d9:1e:c5:1f:db:ec:
3d:96:cb:55:b5:7d:aa:79:22:3a:ca:2c:92:73:0d:
47:f0:7c:06:e7:92:db:22:2e:82:ea:53:59:b5:0e:
86:20:ef:5e:26:0c:09:53:ea:1a:4b:6b:64:b4:0c:
dc:b1:f1:97:01:0f:f9:9e:fd:a2:07:68:a5:50:5a:
b4:1d:09:ad:51:78:eb:dd:22:70:aa:17:fa:62:83:
3b:77:f7:01:68:65:07:6b:da:a0:bb:a7:9a:91:14:
f6:e6:c0:48:5c:6b:74:03:00:5d:b8:e3:ab:25:7c:
6c:36:cb:56:45:a0:a8:9b:81:12:12:e9:ca:8f:47:
bf:ee:85:35:4c:39:21:7c:d5:81:64:cf:c1:cc:11:
0a:9f:b4:21:9c:5c:4e:b7:3b:ba:d0:3c:8c:75:f5:
d5:3a:65:fc:97:bd:2b:9b:4d:83:6b:da:61:24:9f:
78:a9:a9:ce:2a:61:04:58:85:db:52:ba:42:7d:fe:
f2:cb:28:b4:4b:6c:96:76:ff:7a:9a:8d:c6:f6:71:
87:11:a8:36:e5:e2:fa:4b:3d:dc:f4:1b:a5:94:2e:
14:56:7c:56:bb:d9:f4:89:d0:01:54:d3:6f:ee:33:
0f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:3F:22:22:16:FF:F7:4F:72:EF:E7:EE:AE:78:EA:E3:4D:CE:0A:34
X509v3 Authority Key Identifier:
keyid:6F:17:CA:B2:9D:F0:90:65:54:C1:1C:E9:AB:29:C6:0D:1E:7A:67:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxfKsp3wkGVUwRzpqynGDR56Z1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:9d:e1:c2:ec:a3:89:40:75:3f:b9:57:07:a7:83:ce:09:7d:
6a:73:ad:7a:b9:8a:16:fa:bf:fd:09:29:1a:cf:2b:86:29:96:
9b:3c:83:50:4a:cc:02:49:5e:ed:c8:28:5f:46:e1:a0:e2:61:
c5:bc:1c:78:67:eb:62:fa:5e:a5:e0:4b:d2:27:c6:32:f9:77:
8c:8f:42:d6:ce:31:33:dd:7a:c9:d6:b0:83:14:81:cb:2b:8f:
95:ec:ae:4f:fb:d3:37:45:93:6b:0b:e5:c7:da:66:b4:29:42:
0e:f9:ea:12:f7:5f:17:95:d5:e0:b0:9b:eb:0f:da:98:b8:33:
52:2b:ad:12:a9:ee:35:d7:7c:ce:bf:c2:d8:80:bd:8e:00:f8:
4f:8f:31:46:77:73:17:19:ab:7d:97:1d:04:08:f2:57:64:e5:
16:5d:0d:7b:5e:3f:57:dd:0a:77:2c:6f:d6:ee:e7:fe:7e:b5:
12:6b:b6:20:5f:19:93:41:9e:d4:37:50:86:dd:c1:7d:44:cb:
90:42:9c:66:88:8a:52:8d:38:20:0a:49:f4:ff:2c:04:07:14:
e9:7c:fd:ee:b2:ca:ac:e4:10:1f:87:05:67:03:8c:2c:37:ab:
84:1e:55:69:b6:db:d3:e6:56:ee:b5:a3:43:01:50:2c:90:bc:
56:fc:52:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:59:24 2025 by rpki-client