Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
File: bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft (raw, json)
Hash identifier: erx3yjyPBsRbsmcHnns5GCkZmihC5LU2S7mnrOsfHrs=
Subject key identifier: B0:88:D0:12:F6:2A:65:84:DB:15:B9:FB:47:C6:DD:24:B0:3D:9B:1A
Authority key identifier: 6D:FB:07:FE:BD:5D:00:A9:23:AE:39:0A:41:90:FE:56:44:CD:D4:F6
Certificate issuer: /CN=6dfb07febd5d00a923ae390a4190fe5644cdd4f6
Certificate serial: 019676E81435F10FBA2F55862DC1DAB1D8FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
Manifest number: 0F90
Signing time: Sun 27 Apr 2025 11:00:43 +0000
Manifest this update: Sun 27 Apr 2025 11:00:43 +0000
Manifest next update: Mon 28 Apr 2025 11:00:43 +0000
Files and hashes: 1: bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl (hash: wArt9TiiNVmbKI9OeZRxF7ENLBUfsvojsmeOBIFVJW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e8:14:35:f1:0f:ba:2f:55:86:2d:c1:da:b1:d8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfb07febd5d00a923ae390a4190fe5644cdd4f6
Validity
Not Before: Apr 27 11:00:43 2025 GMT
Not After : Apr 28 11:00:43 2025 GMT
Subject: CN=b088d012f62a6584db15b9fb47c6dd24b03d9b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c1:d5:99:b7:2d:c5:d6:af:92:3c:8d:15:2c:
ab:c9:e4:be:a9:1f:4f:91:e6:53:28:51:55:6b:34:
b4:cd:c8:2b:5e:1e:97:9a:53:d7:ea:ef:cd:cb:89:
cb:25:7f:92:d6:d9:a1:5a:25:68:7e:25:46:4f:bd:
85:d6:93:68:fd:0f:98:44:a8:60:cf:22:36:59:dd:
91:59:72:a2:14:2f:73:4a:bd:19:16:60:12:53:da:
a6:15:7a:d1:55:e1:0e:65:d9:15:6f:4c:21:c6:c3:
e3:79:8e:42:9f:27:53:0f:c2:5e:e5:6c:c2:b7:ed:
34:02:52:8c:b2:9a:ce:55:3a:99:44:47:77:46:0a:
98:9e:86:2f:cb:a5:86:10:33:62:f9:f1:1b:31:c6:
09:78:36:98:a8:be:98:75:33:c7:c7:0d:57:15:05:
71:52:89:8b:76:ca:0d:fb:61:52:d8:d5:64:8c:5a:
03:3c:a3:93:e9:a8:6a:f8:4a:08:44:3b:97:c6:7a:
e9:98:bf:ff:eb:44:7a:7d:ef:34:6a:f3:e1:90:a8:
ac:20:57:c4:4b:0e:ec:80:ca:27:08:d0:b4:c7:a0:
93:63:3d:7c:a1:93:2e:4a:ed:e1:ce:49:a0:9b:f5:
62:c0:f8:dd:89:6e:dd:0a:d0:65:8a:f1:f1:f2:f1:
58:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:88:D0:12:F6:2A:65:84:DB:15:B9:FB:47:C6:DD:24:B0:3D:9B:1A
X509v3 Authority Key Identifier:
keyid:6D:FB:07:FE:BD:5D:00:A9:23:AE:39:0A:41:90:FE:56:44:CD:D4:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:35:fd:32:1d:32:dc:60:83:56:b3:99:45:65:c8:69:74:25:
94:a7:3e:54:80:73:9c:ee:46:51:3b:ac:c4:37:0a:ed:f1:fb:
6a:fc:bc:b7:0e:81:f2:3f:54:0a:d2:b1:b5:1d:7c:d4:f1:d9:
a7:76:d5:0d:5b:ab:bb:7e:da:a0:58:55:66:32:f3:c4:d8:2e:
be:47:0c:ea:d6:15:39:37:26:80:90:70:41:9f:1c:b6:a5:89:
d5:8c:3d:52:42:42:31:c7:7b:cf:d1:65:30:a7:7f:69:20:0a:
08:4d:cf:24:4d:40:e8:ed:b3:4d:b0:ec:38:cd:46:a6:f3:59:
f2:b8:41:11:6e:d3:53:11:48:3b:3f:f8:15:e5:e3:26:1b:57:
9e:29:ef:9f:41:b0:1d:64:7a:69:4f:c4:b7:f1:97:22:35:12:
89:e9:31:7a:fb:9f:0b:cd:3b:77:8c:df:02:86:ad:17:d4:39:
70:03:ed:45:85:1b:51:1c:5c:ca:21:59:24:ef:63:66:f5:18:
b5:be:d4:10:52:ca:5d:bb:52:c7:aa:20:0c:c4:01:74:51:05:
3c:7c:7e:ae:03:a2:c1:b8:97:4a:00:3b:49:13:bc:11:25:73:
e3:e3:77:a1:aa:ea:5a:0d:3f:91:71:6a:1c:36:8d:9c:46:75:
8d:28:e7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:45:36 2025 by rpki-client