Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.mft
File: bwXPdx2ZkucP9nQOayBiDOUtDYs.mft (raw, json)
Hash identifier: cvmbGIJskPHoMGNBemJTGaH8ZKo+bvMylRr/Qc1CiAY=
Subject key identifier: 61:2A:FE:15:EB:0D:78:CE:75:1B:4F:7A:9A:32:50:92:B9:E8:13:C1
Authority key identifier: 6F:05:CF:77:1D:99:92:E7:0F:F6:74:0E:6B:20:62:0C:E5:2D:0D:8B
Certificate issuer: /CN=6f05cf771d9992e70ff6740e6b20620ce52d0d8b
Certificate serial: 0196760CE6CD4BE5035EE5B459DFFD823B99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwXPdx2ZkucP9nQOayBiDOUtDYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.mft
Manifest number: 0AAE
Signing time: Sun 27 Apr 2025 07:01:19 +0000
Manifest this update: Sun 27 Apr 2025 07:01:19 +0000
Manifest next update: Mon 28 Apr 2025 07:01:19 +0000
Files and hashes: 1: bwXPdx2ZkucP9nQOayBiDOUtDYs.crl (hash: I/O4DrL4En+qHJqSL4YmuOEbKxFECO+XITAqgmO9AQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bwXPdx2ZkucP9nQOayBiDOUtDYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:e6:cd:4b:e5:03:5e:e5:b4:59:df:fd:82:3b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f05cf771d9992e70ff6740e6b20620ce52d0d8b
Validity
Not Before: Apr 27 07:01:19 2025 GMT
Not After : Apr 28 07:01:19 2025 GMT
Subject: CN=612afe15eb0d78ce751b4f7a9a325092b9e813c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a4:62:c9:a3:90:79:85:d3:8f:60:6a:2c:fc:
17:40:ff:06:e5:e7:a1:0b:6e:cd:df:e8:5f:cc:a3:
e9:0b:d8:b8:21:91:f3:47:dd:27:59:40:8c:7c:0e:
15:b9:b2:e4:10:24:4a:44:5e:18:0f:89:3e:da:5a:
fa:78:cc:e1:e5:c5:57:8f:ed:62:0b:58:80:f1:cb:
7f:9d:fe:59:fb:1d:a8:dd:ec:a5:e3:da:78:43:44:
bd:5d:89:97:06:30:6f:f2:1c:ef:62:b2:a9:22:5e:
6d:ea:f1:31:69:ad:0b:0b:83:0e:50:17:75:e5:80:
de:d9:53:86:04:09:58:48:22:95:53:24:ce:2e:ad:
04:31:bf:b0:23:2d:87:7e:99:8e:a4:c4:c8:17:a9:
f9:d3:cc:6e:98:8f:2d:ff:9a:f1:34:ae:93:e0:40:
bd:93:6b:e2:01:ee:ef:e9:b0:6a:c9:d1:d9:76:65:
92:04:6f:09:ce:04:bc:3e:69:a7:0e:4b:a6:fe:a7:
5a:5a:5c:4c:0b:b0:4d:2f:51:a7:cc:b2:b7:9b:90:
97:9a:81:ee:bb:83:7f:9e:57:3a:b8:55:4f:65:c0:
73:06:7f:c8:59:36:44:ff:2a:81:9f:4b:e2:e9:e1:
b7:3f:19:74:41:d4:e2:2b:c6:49:6a:45:1b:e3:9e:
48:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2A:FE:15:EB:0D:78:CE:75:1B:4F:7A:9A:32:50:92:B9:E8:13:C1
X509v3 Authority Key Identifier:
keyid:6F:05:CF:77:1D:99:92:E7:0F:F6:74:0E:6B:20:62:0C:E5:2D:0D:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwXPdx2ZkucP9nQOayBiDOUtDYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:f2:1b:a6:7b:05:ee:54:9f:92:14:d8:5c:21:5c:4b:fe:4a:
58:44:f4:ed:0d:be:1f:31:ea:e2:7e:55:63:19:3c:e5:4a:fd:
ba:0e:6d:b5:fe:fd:9b:0e:c1:17:b9:b8:b5:45:b8:2f:36:bc:
d7:4c:b9:00:e1:d7:7a:d8:49:15:d1:fb:07:83:09:d4:c7:76:
83:8f:dc:c2:e2:f0:12:21:ae:a5:04:d7:5c:7d:68:27:ec:4c:
57:bd:b0:ff:b3:32:bb:c6:a3:33:b1:08:7f:f5:3d:4c:52:8d:
e7:b6:85:b1:1f:7c:76:16:34:24:b2:05:1d:74:0d:c7:9e:f6:
29:d4:a4:b7:37:fe:3f:1a:b9:19:5e:d7:1f:9a:c5:53:af:35:
70:db:fc:ba:58:b9:6c:82:96:ba:b8:a9:a9:4c:ec:90:d4:a0:
ca:13:d7:a5:ed:5f:b8:17:70:07:fe:4d:fa:5f:c7:0b:60:cf:
01:5b:0b:8d:c7:85:d0:33:a5:9f:e9:90:65:da:92:5e:1e:ed:
6f:50:0b:2f:dd:ac:59:b1:d7:1a:84:dd:b3:14:8e:ae:6b:62:
a7:98:f2:85:b1:be:73:d1:6e:fe:8b:ff:c2:87:0f:fb:ba:3a:
86:59:f5:f2:97:ee:45:a2:46:71:44:0f:2c:55:14:8d:56:ba:
0e:7b:1b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:16:31 2025 by rpki-client