Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/BtCToXdsCFomSP94tM4f5BfFY10.mft
File: BtCToXdsCFomSP94tM4f5BfFY10.mft (raw, json)
Hash identifier: 9x8qk5ieTaEKzqTGIgCaHBWL4JiiZsyd5wyUVRUxTTI=
Subject key identifier: 2B:9B:06:59:30:2F:97:62:E4:1D:FD:8F:8A:F3:D8:8F:8A:5D:04:D3
Authority key identifier: 06:D0:93:A1:77:6C:08:5A:26:48:FF:78:B4:CE:1F:E4:17:C5:63:5D
Certificate issuer: /CN=06d093a1776c085a2648ff78b4ce1fe417c5635d
Certificate serial: 0196760C560DF1F6A4115EEE5A3C72C3111B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BtCToXdsCFomSP94tM4f5BfFY10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/BtCToXdsCFomSP94tM4f5BfFY10.mft
Manifest number: 0F0A
Signing time: Sun 27 Apr 2025 07:00:41 +0000
Manifest this update: Sun 27 Apr 2025 07:00:41 +0000
Manifest next update: Mon 28 Apr 2025 07:00:41 +0000
Files and hashes: 1: BtCToXdsCFomSP94tM4f5BfFY10.crl (hash: 0dgkL1ZMscqbE/shtI0Vbm96yakIk8OV+I1T73eyPuo=)
2: O_5t5VnCFqXKQyvXfDwSl3tCQrc.roa (hash: LGWIHzKQHKwDqn81Bc/cH47w3yhqK3S50ixaYRYnDVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/BtCToXdsCFomSP94tM4f5BfFY10.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/BtCToXdsCFomSP94tM4f5BfFY10.mft
rsync://rpki.ripe.net/repository/DEFAULT/BtCToXdsCFomSP94tM4f5BfFY10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:56:0d:f1:f6:a4:11:5e:ee:5a:3c:72:c3:11:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06d093a1776c085a2648ff78b4ce1fe417c5635d
Validity
Not Before: Apr 27 07:00:41 2025 GMT
Not After : Apr 28 07:00:41 2025 GMT
Subject: CN=2b9b0659302f9762e41dfd8f8af3d88f8a5d04d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0d:7e:7f:9d:33:fb:54:e7:98:29:41:a6:8b:
b0:79:3f:c8:56:71:84:6e:24:45:74:51:f3:aa:c9:
ae:2b:34:1a:e1:50:e7:a4:7b:8a:4e:22:d2:f7:91:
f2:61:19:06:bf:be:72:55:ea:12:aa:02:43:b2:1d:
31:95:fe:07:4e:8a:76:6b:cb:e3:7b:6b:48:68:28:
20:74:19:bd:f9:2c:04:4a:ba:cc:e2:6f:b8:c3:d8:
66:8f:1a:c5:51:b1:2f:1e:09:4e:86:bc:c7:d2:39:
ef:5f:63:19:cf:86:3c:bc:51:9b:ed:43:f0:7d:7d:
82:64:e8:13:5c:44:45:c2:6a:d0:6b:30:7a:8b:92:
6e:45:72:0a:49:2c:2d:ea:38:e6:61:59:cf:81:21:
7e:c6:a4:dd:0a:27:2f:c0:32:75:34:68:31:f3:26:
1c:91:e7:18:8e:1e:a0:56:50:99:c1:22:52:3c:63:
7a:9f:59:9a:af:f5:4b:ed:13:10:8d:14:c9:66:f6:
d7:47:22:46:9b:48:f8:64:9a:95:6a:17:c3:69:3c:
0f:0d:db:a1:65:25:bc:06:9b:c3:19:b9:f0:56:6d:
72:82:84:1d:c7:56:54:ea:77:b0:59:ec:c9:de:35:
f7:40:c8:ba:b8:cb:f9:b3:73:85:58:ba:52:e7:cc:
c3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9B:06:59:30:2F:97:62:E4:1D:FD:8F:8A:F3:D8:8F:8A:5D:04:D3
X509v3 Authority Key Identifier:
keyid:06:D0:93:A1:77:6C:08:5A:26:48:FF:78:B4:CE:1F:E4:17:C5:63:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BtCToXdsCFomSP94tM4f5BfFY10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/BtCToXdsCFomSP94tM4f5BfFY10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/BtCToXdsCFomSP94tM4f5BfFY10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:68:dd:80:0f:9c:27:7b:27:ac:4d:36:5a:c4:43:e7:f3:f0:
7e:7a:5e:70:ff:df:85:45:14:e9:1b:9b:d7:73:61:30:aa:84:
09:9b:3a:1a:e9:89:4a:11:38:b8:d5:2c:bb:3b:07:e9:7c:9a:
41:2c:14:2a:ba:93:d0:f6:8b:59:31:80:7f:ff:76:6a:76:3f:
76:17:c3:2f:25:0b:e4:c1:24:11:11:eb:c5:b2:16:b1:b4:c2:
d0:30:04:53:18:e8:84:3f:25:61:b8:c1:4c:28:8a:52:e5:0a:
7c:82:5f:6e:5a:5a:54:e9:2b:5f:26:19:ef:bc:17:73:74:db:
73:a0:a2:b3:a1:c9:f6:99:94:10:30:c3:f7:a6:0b:2c:d5:56:
70:3b:f2:62:3d:0c:51:2e:0c:45:40:9f:b4:41:32:13:30:f4:
52:be:79:2b:c3:5c:e3:93:53:c9:c9:de:fe:0c:5b:72:13:b5:
6a:78:24:a4:07:59:40:5c:02:e5:f2:b2:b7:02:5f:44:d1:4c:
67:ac:13:4b:13:b9:1e:0b:59:29:d6:94:a7:99:d8:bf:39:fc:
b4:b4:2a:14:27:a6:d0:88:03:a9:8e:e6:e3:58:e7:34:dd:bb:
23:88:bc:4f:4b:1a:97:11:dd:be:11:5b:de:86:68:fe:d2:6a:
2c:30:74:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:37:21 2025 by rpki-client