Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft
File: BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft (raw, json)
Hash identifier: Xgpg0GvamTTkhDNy6SafRigWIKrSgdj+HyBVbLWGTes=
Subject key identifier: A9:FA:B2:0F:B0:10:4C:94:CF:C9:CB:58:77:CD:E5:3D:6C:BC:4E:88
Authority key identifier: 05:87:C8:49:0B:37:20:45:66:9F:45:F1:83:19:3E:ED:46:F9:91:F5
Certificate issuer: /CN=0587c8490b372045669f45f183193eed46f991f5
Certificate serial: 0196760C81056262DFCCDB48C1B4CE64AEE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft
Manifest number: 086E
Signing time: Sun 27 Apr 2025 07:00:53 +0000
Manifest this update: Sun 27 Apr 2025 07:00:53 +0000
Manifest next update: Mon 28 Apr 2025 07:00:53 +0000
Files and hashes: 1: BYfISQs3IEVmn0Xxgxk-7Ub5kfU.crl (hash: lxJaMqcE35Iik571e98FHO4LzvS/3btSGpg43pgk9+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:81:05:62:62:df:cc:db:48:c1:b4:ce:64:ae:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0587c8490b372045669f45f183193eed46f991f5
Validity
Not Before: Apr 27 07:00:53 2025 GMT
Not After : Apr 28 07:00:53 2025 GMT
Subject: CN=a9fab20fb0104c94cfc9cb5877cde53d6cbc4e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ad:a3:22:0a:0b:94:3d:e2:70:8e:5e:a6:ac:
3e:24:d8:c9:65:f4:7a:26:f1:78:bd:8c:5e:30:51:
be:4d:f8:5b:76:fc:16:c1:d7:d4:b7:f9:91:bd:28:
e3:25:a8:99:47:fb:48:80:12:ab:bf:bc:02:4a:ff:
26:9f:3e:40:28:2a:8e:9c:f4:92:d1:d2:a8:87:84:
77:97:e9:38:9a:a3:56:47:1a:46:b0:3f:21:9e:a6:
67:d3:e1:4c:58:cf:d4:60:c0:b5:bf:9c:2d:a2:f3:
a0:d6:fd:6a:d2:21:d5:21:5e:59:5d:45:32:06:8f:
57:7b:44:aa:1c:71:21:29:d0:ba:de:0d:af:ad:c6:
24:49:ab:73:b8:f5:5b:02:94:c8:fa:9e:c8:48:99:
cc:a7:f4:63:0d:8d:22:73:95:86:ca:d8:25:9f:53:
23:c4:60:7e:3d:73:60:4a:c0:f3:47:4a:3e:d8:eb:
cd:fd:72:ea:a3:b7:87:f6:65:0b:7c:bd:f6:0b:ba:
98:e9:fa:4e:25:0f:50:22:67:81:97:35:cd:e6:04:
2a:0f:ab:e7:58:e8:df:75:4e:cc:a7:8a:79:7a:97:
4b:0c:0d:38:66:0f:4f:c2:b8:42:7f:f0:8c:5c:e8:
0b:26:1b:da:e4:88:86:d3:0c:9d:a8:c7:42:c3:c3:
85:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FA:B2:0F:B0:10:4C:94:CF:C9:CB:58:77:CD:E5:3D:6C:BC:4E:88
X509v3 Authority Key Identifier:
keyid:05:87:C8:49:0B:37:20:45:66:9F:45:F1:83:19:3E:ED:46:F9:91:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c1:01:ad:bf:b8:d5:b8:74:75:4d:24:18:b4:49:04:d7:ce:
be:de:5f:83:1a:98:e4:0b:57:2d:bf:5c:58:c4:e9:e9:1c:77:
dd:7a:ec:0c:05:88:36:76:96:86:4b:48:fb:5e:7a:0c:52:ac:
61:bb:13:76:e0:bd:5f:63:d3:cb:f3:18:41:59:e3:85:27:95:
94:47:98:a4:43:3b:cd:a8:8e:eb:fd:f1:23:af:3c:47:94:c5:
f0:7d:a9:37:a9:dc:94:f7:2d:69:b8:cd:9f:df:74:ab:e4:c8:
f9:f9:72:56:3d:f7:65:f2:05:63:fd:fd:7c:83:d2:f0:89:22:
87:d4:6c:70:63:76:dd:06:fc:0d:f0:37:a9:4f:ba:33:82:c3:
93:ee:1b:85:6c:db:b2:15:a6:8c:7f:57:ee:5a:c5:e6:16:c9:
be:c4:32:fd:e5:a3:0b:92:bc:2b:4e:a0:bc:4d:87:3c:63:63:
10:47:b0:a0:10:4b:e1:19:cb:76:9f:34:f1:d1:c7:86:81:3c:
33:42:1b:05:66:63:89:a3:85:cb:3d:be:a2:53:b7:47:db:34:
6a:71:3e:0b:db:2e:93:8c:98:6b:48:f0:91:7d:7b:db:90:6b:
82:2e:e9:62:5c:45:86:a8:44:97:fc:a7:a9:4d:0d:b1:4f:5e:
ac:0a:84:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:41:36 2025 by rpki-client