Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft
File: bxCL1a3fq_FR2QeePT00Emlmb6c.mft (raw, json)
Hash identifier: tERDu3ooxo90KcckdUjSuEsK2yNkUF5/Wxn+nWvBwAc=
Subject key identifier: BC:5E:0F:8B:9C:52:30:AF:BF:69:92:74:1C:63:6E:9E:82:63:80:51
Authority key identifier: 6F:10:8B:D5:AD:DF:AB:F1:51:D9:07:9E:3D:3D:34:12:69:66:6F:A7
Certificate issuer: /CN=6f108bd5addfabf151d9079e3d3d341269666fa7
Certificate serial: 019677FA7E8E4126FBF195D95A6B50C5A97D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft
Manifest number: 0692
Signing time: Sun 27 Apr 2025 16:00:27 +0000
Manifest this update: Sun 27 Apr 2025 16:00:27 +0000
Manifest next update: Mon 28 Apr 2025 16:00:27 +0000
Files and hashes: 1: SVN8chXXLiylZ6iSzxPfIxpS6Wc.roa (hash: S3c0fzdOzI2koB/V4F0MudazfO5SBRZZKt7wV9ucqpI=)
2: bxCL1a3fq_FR2QeePT00Emlmb6c.crl (hash: zskTYUGgWdrJ0M3SRrL673IjfntTSbvrxjVgwqDxKdc=)
3: h7d4ZTDpPr-K2jwKQKNmXhUJLpc.roa (hash: JWS67wGbGixzjqGud+OGYY8Sh8Xk+/Z+C9GlJ0f+TYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:7e:8e:41:26:fb:f1:95:d9:5a:6b:50:c5:a9:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f108bd5addfabf151d9079e3d3d341269666fa7
Validity
Not Before: Apr 27 16:00:27 2025 GMT
Not After : Apr 28 16:00:27 2025 GMT
Subject: CN=bc5e0f8b9c5230afbf6992741c636e9e82638051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:36:6d:12:58:7a:b2:5e:e9:c0:b2:2f:11:0e:
71:5b:a3:1b:05:55:1f:11:66:3f:5b:25:d6:d4:4b:
e5:8d:77:ea:4e:1d:26:f7:d2:e0:8c:a3:fe:03:8c:
bb:eb:aa:8e:d4:9f:6b:4e:a5:11:34:2e:82:ec:b2:
b7:3d:ef:4b:76:23:cc:00:77:6a:ff:e8:b4:3c:7e:
ea:8b:0f:aa:16:cf:dd:d8:35:dd:d3:37:91:cf:2e:
a7:a7:bb:82:ee:32:d7:1a:05:2f:a7:76:5f:0f:6d:
8a:2d:4e:52:31:d7:54:af:d4:20:05:21:25:2c:41:
cc:c7:78:4d:a7:47:f6:3d:9c:27:ca:bf:48:2e:e2:
9c:0d:81:c5:1e:38:f9:20:68:0f:6d:50:54:02:32:
f3:d0:35:b6:fb:fd:d8:e4:21:3a:7d:f6:65:c3:29:
99:0c:ee:38:d6:09:7c:7d:c4:b5:47:74:ed:e0:7c:
d8:0f:29:85:ee:79:e8:d0:01:d4:9f:9c:35:49:56:
de:4b:b9:00:7c:3a:4b:e3:6a:33:7f:ce:69:00:74:
9c:04:1b:2e:ab:df:1e:76:26:e1:44:15:0a:17:d4:
14:a9:b8:16:f8:f2:8e:93:6d:8c:f4:b3:c8:6a:d6:
fd:c2:d0:4a:46:81:7e:91:f2:39:ee:36:f2:8f:4b:
f0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5E:0F:8B:9C:52:30:AF:BF:69:92:74:1C:63:6E:9E:82:63:80:51
X509v3 Authority Key Identifier:
keyid:6F:10:8B:D5:AD:DF:AB:F1:51:D9:07:9E:3D:3D:34:12:69:66:6F:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:17:c7:35:29:a8:23:ab:b8:ed:d4:2e:bc:da:30:6d:9d:70:
fb:18:f2:a1:c1:05:e6:4c:2f:95:68:2c:47:3d:1c:87:71:0e:
c3:b6:b1:fa:ed:f7:91:6c:03:1f:3f:f8:55:80:75:84:89:86:
70:79:7d:2f:6c:77:39:4f:ce:54:c6:19:a7:6b:f0:c8:9a:90:
f5:1d:65:b4:1e:87:54:42:9f:bc:d0:36:65:4f:23:e1:6e:c1:
53:b5:a8:0d:69:d9:ca:0b:b2:d4:c4:ef:f6:9d:b5:a8:54:35:
aa:7d:e2:c4:29:3b:ca:7f:3c:f7:16:cb:50:79:05:f4:e2:f0:
fe:2f:01:42:2e:02:7f:c3:8f:06:7c:4a:82:ec:2c:b7:80:af:
46:1c:98:45:c1:4d:f1:53:a9:50:63:00:47:b0:e0:0a:e9:61:
0e:49:d1:2d:6a:84:a5:5e:f7:54:0b:f4:99:1a:dd:e4:3d:66:
59:4c:ad:3c:f0:72:28:6e:f9:8a:e9:14:62:6e:7c:94:9b:95:
a5:ab:2e:86:18:a1:9a:29:c8:25:07:bd:36:02:82:11:22:81:
9a:b4:1f:cd:a9:f6:84:dd:ea:5c:9b:8e:cd:8d:df:38:a9:18:
0f:e4:eb:88:6a:30:9b:fc:e4:ee:d2:4e:d6:de:d6:66:d2:da:
02:dc:0f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:15:57 2025 by rpki-client