Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
File: BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft (raw, json)
Hash identifier: tqhy1BJk+XXYAqnOxnqsi0KF4cw+mNCIAFTgdwtp7to=
Subject key identifier: 63:BB:43:C8:67:C6:48:7C:EB:24:65:04:9E:AE:4F:14:A6:74:99:45
Authority key identifier: 07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA
Certificate issuer: /CN=0701b929fd9edbabae35dd44adc161d7d470b1fa
Certificate serial: 019689CA1BF9FBB92DD69D5E2AE484D11B0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
Manifest number: 1519
Signing time: Thu 01 May 2025 03:00:46 +0000
Manifest this update: Thu 01 May 2025 03:00:46 +0000
Manifest next update: Fri 02 May 2025 03:00:46 +0000
Files and hashes: 1: BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl (hash: Goxkcf0O+2rAv1KRaaGi5acz7u1XXauRlX2ZAYuwS9M=)
2: ytt6NDRPw01MpgKIPHZI-KhTqFM.roa (hash: Qz/7LnFWYN8eKNmOmwVT183VYftTGjaTvg3yJfBkJTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 03:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:ca:1b:f9:fb:b9:2d:d6:9d:5e:2a:e4:84:d1:1b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0701b929fd9edbabae35dd44adc161d7d470b1fa
Validity
Not Before: May 1 03:00:46 2025 GMT
Not After : May 2 03:00:46 2025 GMT
Subject: CN=63bb43c867c6487ceb2465049eae4f14a6749945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:92:20:9d:a2:76:65:c2:26:bc:c4:6e:24:aa:
07:4d:42:c0:4e:da:82:5c:e8:74:bf:16:f2:55:d9:
0f:41:f1:80:07:d1:ef:f5:fe:9f:bd:d1:64:c2:26:
2b:7d:bd:91:c7:4a:7a:87:c9:25:d7:1d:bc:42:e9:
99:2b:c7:fa:55:94:3d:d6:03:02:7e:f7:de:d6:41:
d9:e0:0f:f0:1f:9f:11:53:2f:71:59:9d:18:17:14:
2d:1c:72:cb:fe:3f:48:ac:40:0a:fb:01:05:55:57:
f5:06:20:72:4c:9d:6c:e2:e3:09:d2:91:d3:48:e0:
5f:6c:b8:03:1b:fd:94:a0:48:d0:77:00:0f:11:14:
38:26:9e:fd:aa:94:38:4b:cc:c5:5d:8a:16:1a:82:
14:ad:68:d5:51:cd:b1:59:99:19:da:e3:4d:02:4b:
5a:5e:74:a2:5d:0f:88:00:91:94:a4:5a:e0:e2:c9:
18:6b:26:fc:08:f5:e1:1e:7a:a5:eb:79:80:df:e8:
8f:37:d3:65:6c:e5:ee:5b:89:09:eb:1c:ec:22:69:
2a:40:f5:b4:7f:39:18:2d:76:fb:8f:01:1f:2c:0a:
a7:20:4f:16:06:d7:11:bd:30:35:95:17:23:02:15:
bf:7d:54:05:4c:39:b6:dc:52:a1:d9:a1:3f:a3:b8:
29:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:BB:43:C8:67:C6:48:7C:EB:24:65:04:9E:AE:4F:14:A6:74:99:45
X509v3 Authority Key Identifier:
keyid:07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ac:60:44:6a:e8:de:68:e6:40:10:34:cd:bf:f0:ed:7f:79:
1f:46:f7:9f:86:32:30:31:88:9e:2d:82:fb:65:d1:93:12:21:
45:20:91:2f:6e:12:1c:09:79:c7:25:82:2d:10:77:8c:9b:31:
73:63:9e:81:3d:9a:d9:ff:69:38:d3:40:ad:63:f6:79:96:b2:
56:e1:34:b5:e7:ea:63:27:fe:d0:df:f3:1d:10:c7:a7:c6:1b:
6d:0d:56:9e:56:14:ba:f7:75:3a:0f:4c:2e:12:e7:14:91:b7:
26:12:d1:58:81:99:70:60:27:d2:53:8c:2c:d7:c1:f6:d2:72:
15:49:1a:87:80:c9:d3:52:5a:c5:c2:d8:d4:02:87:ec:63:cd:
c8:d4:4c:cd:84:47:1f:c5:cf:2b:87:44:e2:0c:8a:03:3f:5b:
c6:55:a8:ea:2c:13:90:f8:d8:f5:72:ad:b3:22:eb:f3:47:0b:
d0:c7:b7:73:eb:70:de:de:40:ac:63:f5:d6:38:0f:1c:44:a9:
2b:da:64:7c:12:da:ef:5d:1a:76:20:1a:e6:67:ca:24:15:6b:
47:bb:f7:3e:7c:cb:68:51:c5:67:38:be:3f:37:e7:a1:b9:b7:
dc:71:8a:dc:45:67:0d:2a:bc:97:15:cd:26:0f:ca:72:4d:24:
33:e7:48:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:51:50 2025 by rpki-client