Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
File: 1-BjewyV4QBB3SCAJDo4KCD3d29w.mft (raw, json)
Hash identifier: 0fccLLNtmiM5Czv13Onzqty8NXiZcSHtgTRIaOsUpko=
Subject key identifier: 31:D3:D0:D8:1E:E5:04:0A:D0:DA:F2:68:42:4F:D8:55:1A:4A:07:64
Authority key identifier: F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC
Certificate issuer: /CN=f818dec325784010774820090e8e0a083ddddbdc
Certificate serial: 019675D4F6D33600C3928508E989E061C60F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
Manifest number: 1213
Signing time: Sun 27 Apr 2025 06:00:13 +0000
Manifest this update: Sun 27 Apr 2025 06:00:13 +0000
Manifest next update: Mon 28 Apr 2025 06:00:13 +0000
Files and hashes: 1: 1-BjewyV4QBB3SCAJDo4KCD3d29w.crl (hash: pE+2mpebk6/jmjYf34Pi719rTyKoWa2PD6nV3EnFAi8=)
2: 4F5-U-IyeBv7jgG-t4o9hlhRjTc.roa (hash: gpdr7Kl3pmYPlDObQ8u3VFe1L12/MWoBa72QoNTdi8I=)
3: CpPijEmYlerTV19r3A6mYbWd_7U.roa (hash: paOU+LXyw4VdCUY8Gvj627Nds5jNeA0tyswAnoZqaYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d4:f6:d3:36:00:c3:92:85:08:e9:89:e0:61:c6:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f818dec325784010774820090e8e0a083ddddbdc
Validity
Not Before: Apr 27 06:00:13 2025 GMT
Not After : Apr 28 06:00:13 2025 GMT
Subject: CN=31d3d0d81ee5040ad0daf268424fd8551a4a0764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:86:25:05:f2:76:58:7b:95:5b:be:0d:f5:eb:
b7:5f:80:f7:83:a5:71:2d:8e:88:38:3e:7a:8f:2d:
25:05:5d:ac:61:37:9c:21:fc:1d:0e:82:03:64:bb:
f2:a5:68:a4:09:ab:c7:56:1e:65:08:48:45:ad:66:
df:a1:79:3e:7d:4c:67:78:ca:ac:19:b2:56:1b:a6:
17:4c:7e:6d:ce:0d:1c:24:d5:ec:e5:94:8a:f1:41:
ee:e5:34:a6:7a:ff:7b:64:b8:2e:4f:5b:cc:83:81:
e9:99:34:b4:e5:63:fd:5c:3b:a9:b6:fb:b2:d4:a4:
0a:67:be:ed:5e:fd:e6:9e:12:46:28:74:c6:5a:56:
ab:81:34:da:54:be:90:3f:61:c2:4e:3d:14:a9:77:
40:5f:6f:db:1c:e5:5d:7a:30:16:73:d9:62:60:d3:
39:47:c7:3c:85:7d:9e:46:82:d2:c2:97:49:11:65:
64:8b:40:84:94:55:4f:c8:3b:6d:18:85:df:9c:bc:
68:36:1a:88:15:e6:59:27:89:d8:08:ef:2e:50:40:
c7:7b:8e:77:5b:47:40:5e:49:d3:ca:86:9c:7f:5c:
76:2e:8d:f7:2c:c7:e9:71:61:1e:c0:1d:85:4c:b2:
c2:96:67:84:ba:37:db:bc:7d:41:86:a8:5f:9f:50:
b1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D3:D0:D8:1E:E5:04:0A:D0:DA:F2:68:42:4F:D8:55:1A:4A:07:64
X509v3 Authority Key Identifier:
keyid:F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:3d:a7:33:ac:81:8e:19:77:a4:99:82:57:bf:85:0a:e1:75:
c3:21:d7:96:c6:31:fc:01:38:a2:be:e5:2c:4d:0a:d1:4a:77:
18:f3:7d:4d:1f:9e:1e:49:a6:f5:e8:a7:56:d4:7d:95:84:a3:
00:91:4d:ce:08:e6:ea:6d:f1:bb:16:25:df:70:c8:cd:7f:af:
47:2d:bd:26:b8:b2:56:ae:20:88:b8:71:2f:3a:78:f7:de:45:
1b:24:0f:53:e6:21:58:ff:29:67:da:7d:ca:14:6a:04:ec:5f:
75:19:5f:65:63:55:cd:83:58:e4:11:78:0b:73:88:f8:bc:94:
93:74:26:d6:ce:6a:0e:ce:99:c1:e4:9a:ab:f8:63:06:7a:3f:
e8:a4:34:1d:da:73:96:8b:f5:09:d9:2a:56:40:cf:02:dd:1a:
3b:fa:68:93:63:5c:b0:27:57:4a:8e:68:40:3e:1c:33:74:9f:
93:9c:04:f4:5b:e8:38:7e:66:bd:32:c4:4c:10:01:b9:fe:4d:
81:af:f2:8c:62:eb:4f:db:b2:6f:57:84:52:15:70:5f:1d:51:
1b:f7:b2:4a:b6:f4:c2:40:a4:41:28:af:cf:23:25:92:72:bf:
4f:e1:dc:3b:ce:c7:f2:d0:55:43:4c:bc:21:88:d3:60:0c:6a:
0a:3a:29:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:11:12 2025 by rpki-client