Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.mft
File: BcojF2aaRo1QmoqhkGvvp1v5wgE.mft (raw, json)
Hash identifier: yQf9TlxSZjjroEktEtcb61faYl2yqKCdeBWd4pLOvus=
Subject key identifier: 9A:31:44:51:1F:71:29:24:4A:BD:E8:BF:85:AA:90:E7:D8:8D:1D:0E
Authority key identifier: 05:CA:23:17:66:9A:46:8D:50:9A:8A:A1:90:6B:EF:A7:5B:F9:C2:01
Certificate issuer: /CN=05ca2317669a468d509a8aa1906befa75bf9c201
Certificate serial: 0196741E4C43F3996FDBEFD668DF7C481450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcojF2aaRo1QmoqhkGvvp1v5wgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.mft
Manifest number: 0C46
Signing time: Sat 26 Apr 2025 22:01:04 +0000
Manifest this update: Sat 26 Apr 2025 22:01:04 +0000
Manifest next update: Sun 27 Apr 2025 22:01:04 +0000
Files and hashes: 1: BcojF2aaRo1QmoqhkGvvp1v5wgE.crl (hash: ceu/8v+B8g/CGDUJkb/K1TJB8fOh0gWoCrw8+dSYyOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BcojF2aaRo1QmoqhkGvvp1v5wgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 22:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:4c:43:f3:99:6f:db:ef:d6:68:df:7c:48:14:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ca2317669a468d509a8aa1906befa75bf9c201
Validity
Not Before: Apr 26 22:01:04 2025 GMT
Not After : Apr 27 22:01:04 2025 GMT
Subject: CN=9a3144511f7129244abde8bf85aa90e7d88d1d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c9:3b:1a:35:97:0a:0c:18:26:b1:fc:73:4a:
9d:9f:b1:20:67:c7:c0:53:1e:b3:a9:21:94:3b:9e:
dc:aa:68:a6:97:56:8d:b1:b9:35:b2:c7:7f:f5:b7:
d5:ad:d5:11:83:6d:3d:85:13:db:e9:5e:79:9c:c0:
62:28:31:4a:c3:de:09:f7:9b:fe:e2:ff:59:9c:f6:
57:6a:1a:8f:cc:04:12:7b:9b:ca:87:9d:c2:73:86:
a5:c4:87:e6:a1:31:6f:ae:34:95:1b:7b:e8:b4:9e:
fb:fc:69:7e:98:21:6e:17:41:ce:87:5f:85:21:55:
55:63:29:07:78:84:f7:4f:7f:3c:91:76:68:e4:14:
0f:8a:6a:55:e7:d4:f3:89:0a:8e:00:8f:e9:e5:30:
4a:15:be:eb:9f:4c:6e:6c:79:69:01:5c:58:30:8d:
2e:6a:43:98:c3:85:e8:c4:f1:9d:d4:3c:15:2f:78:
4a:60:45:c7:15:a0:4a:40:c0:df:83:8b:c0:65:ae:
a5:c2:9e:24:a7:5f:38:2d:80:36:96:8b:6e:9c:72:
74:f9:82:ef:ad:61:ab:02:5d:66:0a:b7:56:0e:52:
90:f0:25:14:a4:42:c7:10:0a:8b:e0:6b:26:0b:6e:
01:40:8f:4f:57:8e:7d:f8:6a:49:5d:34:af:73:01:
e2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:31:44:51:1F:71:29:24:4A:BD:E8:BF:85:AA:90:E7:D8:8D:1D:0E
X509v3 Authority Key Identifier:
keyid:05:CA:23:17:66:9A:46:8D:50:9A:8A:A1:90:6B:EF:A7:5B:F9:C2:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcojF2aaRo1QmoqhkGvvp1v5wgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:90:1e:b4:65:22:7b:cb:fc:ed:ce:4c:f2:bc:19:3e:2d:89:
c5:56:12:52:13:a0:e9:b5:46:64:1c:43:84:67:0d:be:9d:20:
2b:96:69:7b:85:a4:62:fb:c7:a5:6a:4e:5b:0d:40:4b:12:86:
1e:bf:9e:e9:ff:03:f8:00:f4:ef:ff:75:f4:de:94:be:1b:f6:
cb:ab:e9:77:99:94:55:38:72:52:62:8b:6e:62:df:76:dc:e8:
85:c8:62:99:e8:39:34:2f:4f:45:99:de:73:e0:3a:81:c2:a8:
c2:3c:70:7a:d9:f2:94:ad:da:64:25:42:6a:86:6e:e1:8e:32:
dc:fb:db:09:73:51:49:a6:73:31:8b:ee:e8:46:ae:ce:a0:87:
1b:b6:d9:4f:09:69:32:a7:e8:03:14:f6:df:9a:7c:1c:ef:7a:
d9:97:fd:65:5c:c5:cd:1a:10:ca:e6:37:51:4f:8a:5f:d0:0d:
64:c1:03:41:78:fb:bc:d6:68:ac:f9:20:df:c0:fd:cc:70:18:
0e:09:c6:e9:fe:8f:57:fa:ed:10:e7:74:fe:03:c2:09:de:72:
99:9c:d4:62:4b:0e:1b:97:20:e1:3d:90:d6:af:7d:05:0a:e4:
c5:e4:dd:30:1d:de:a3:ec:5c:45:81:54:95:05:b7:43:85:40:
52:20:12:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:32:45 2025 by rpki-client