Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
File: bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft (raw, json)
Hash identifier: He5Z/GagTNkiENJCVhlWXUFodk1aNi28ngIwxgniOss=
Subject key identifier: 14:54:4D:74:96:44:E6:4C:D6:03:09:20:11:50:8D:22:C7:B2:BA:D8
Authority key identifier: 6E:4B:35:10:F0:04:E4:54:DF:BC:1F:1A:28:C4:59:D9:18:D1:51:3C
Certificate issuer: /CN=6e4b3510f004e454dfbc1f1a28c459d918d1513c
Certificate serial: 01967642E3A12C9E28B535E4B19ED0E9B3F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
Manifest number: 150B
Signing time: Sun 27 Apr 2025 08:00:17 +0000
Manifest this update: Sun 27 Apr 2025 08:00:17 +0000
Manifest next update: Mon 28 Apr 2025 08:00:17 +0000
Files and hashes: 1: bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl (hash: Idw4RDijx4EWY7UrqzsGzbsEcbtOv2I5Zlq3G2isxFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:42:e3:a1:2c:9e:28:b5:35:e4:b1:9e:d0:e9:b3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e4b3510f004e454dfbc1f1a28c459d918d1513c
Validity
Not Before: Apr 27 08:00:17 2025 GMT
Not After : Apr 28 08:00:17 2025 GMT
Subject: CN=14544d749644e64cd603092011508d22c7b2bad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a0:92:12:62:c5:f6:a9:fa:c4:2c:40:6c:22:
cd:2f:2c:f1:35:ee:dc:f6:b3:bc:82:fb:96:45:6b:
76:73:7f:12:f0:3a:14:60:a3:fc:6e:27:df:f3:f2:
00:e6:63:98:b5:4a:b9:af:43:26:0d:c9:05:d5:ab:
09:f1:05:99:6e:14:bc:c1:f0:ab:ee:83:57:0d:81:
8e:c2:ee:51:81:63:02:e7:2f:cb:32:be:15:f6:d0:
de:6a:f7:00:a2:e6:17:34:6b:ec:48:d9:61:32:67:
0d:7e:aa:42:e7:18:c0:40:17:53:58:0d:cd:bb:64:
28:c2:40:9d:a7:88:34:4e:ff:cd:a5:b2:8d:09:20:
f4:9d:76:50:99:a2:90:e0:bc:eb:63:3b:5d:8d:a6:
51:cf:51:08:33:00:d2:99:a2:f2:6c:d4:d3:89:f8:
95:0a:2c:37:f3:f2:ba:93:39:5b:61:78:57:ef:9c:
00:20:b9:b8:bd:9d:d3:36:da:32:ee:a8:73:a8:4f:
c1:d4:65:c0:50:44:d0:fb:4f:e8:43:4a:68:71:c7:
8b:be:16:ae:ce:56:78:7a:8f:95:50:41:1b:e7:0e:
00:f1:f0:6d:2d:a3:82:a1:0c:ee:06:69:16:5a:6e:
5e:8c:0f:19:ee:b2:18:d1:58:a3:c1:af:b5:d7:d5:
8c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:54:4D:74:96:44:E6:4C:D6:03:09:20:11:50:8D:22:C7:B2:BA:D8
X509v3 Authority Key Identifier:
keyid:6E:4B:35:10:F0:04:E4:54:DF:BC:1F:1A:28:C4:59:D9:18:D1:51:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:70:b8:2c:d4:d9:f6:ef:ee:b7:0a:33:be:ae:e5:5d:1d:79:
91:65:08:95:4f:88:cc:ff:0c:a1:8f:63:ac:45:8e:22:39:0f:
c0:0c:10:37:4d:85:9a:e4:fd:ab:3b:11:3e:c6:1a:99:a5:9f:
e6:c7:fb:bf:6f:a9:3a:4d:4e:c9:df:c5:38:d8:c0:fc:ad:7b:
e0:65:84:b4:1c:1f:15:62:25:13:da:6c:89:93:f1:19:8f:69:
57:8c:be:1a:ad:8b:fc:f1:f7:0a:04:76:aa:f7:9e:d2:cc:0e:
92:95:f9:24:31:d3:18:cf:be:09:fe:00:65:98:e8:5d:68:b3:
1f:bb:ee:9b:83:ab:67:30:e9:57:e3:56:75:4a:91:cf:37:3c:
e9:db:02:4d:94:4a:21:57:f8:79:41:c3:95:a8:ad:61:f1:a4:
26:71:6c:e7:f6:1d:29:30:05:b3:a8:4d:c7:91:f8:2f:92:62:
17:48:b0:6a:be:37:4a:b7:aa:19:58:5e:40:7f:b1:c6:e7:fe:
55:68:dd:22:5a:be:7d:f5:16:e0:0d:e4:a4:2f:97:4e:0f:c7:
7f:99:54:d1:3d:f3:23:dd:20:f9:7f:cf:2d:ef:14:ae:01:96:
db:29:51:25:ff:7a:41:b0:a1:c9:73:fb:4e:ef:ac:75:14:05:
d3:62:60:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:37:11 2025 by rpki-client