Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
File: BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft (raw, json)
Hash identifier: BkZmuHV7L6FZQ9c7H37A4dRBbBOoddpb6SiSPeuRguo=
Subject key identifier: 86:9F:98:2B:60:25:E8:D4:B7:2E:60:C0:CE:81:54:3F:DE:66:73:94
Authority key identifier: 04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
Certificate issuer: /CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Certificate serial: 0196767AA0757A47F3EC063D8CBDDFD4E0AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
Manifest number: 0E56
Signing time: Sun 27 Apr 2025 09:01:10 +0000
Manifest this update: Sun 27 Apr 2025 09:01:10 +0000
Manifest next update: Mon 28 Apr 2025 09:01:10 +0000
Files and hashes: 1: BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl (hash: 21O6A9X0XfBHOH8KF0a8zc4621++UzDqtr3avPq3sc0=)
2: IoQeF12RJ4sobu5Ga8Eq38fp9lU.roa (hash: ZHXqTkRKDBNra810QH5vCpMO7yqivWRXintrYhNzM9E=)
3: SQ8WO3hellEKsQ4Y9NCRSIjTvBQ.roa (hash: BhoaWfa6WtuVRoo3cEi7UmyVvyoDyPTAAx6/lySfFlU=)
4: SiZIShqgNqX8HAwZHazZNECjby8.roa (hash: pRsgCD3V+Trdu45mh9GvK7xoM8z4mazBwLyC1V4JY0Q=)
5: VHskNMe_9EcN5Ps8VV0dA6UjJfM.roa (hash: +hDMAKuEEYDkIBhUAQS0ED3/5LZ3DcqLT6h5fu0q5Vc=)
6: du_h3WrA0m1xhUnyJPLIuGO4kpA.roa (hash: JDpeOD7xV2ekG+eEesG9qUfLmZmSMWruOGhX64DbBEc=)
7: icyI7vtUu_VifuFeglKfEW94_GM.roa (hash: GtavNKaMLIdLn9+Xx38qptYW+E+bTW1Tx9pUb3Adoq0=)
8: slVrsnHd8rCIfEnbwuX_9NfM9i4.roa (hash: /3BENw/pyYjv+JfWEh8xWz895hOHXgoCQXPnKDlVros=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:a0:75:7a:47:f3:ec:06:3d:8c:bd:df:d4:e0:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Validity
Not Before: Apr 27 09:01:10 2025 GMT
Not After : Apr 28 09:01:10 2025 GMT
Subject: CN=869f982b6025e8d4b72e60c0ce81543fde667394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:97:16:83:70:98:fa:b5:d8:04:f8:41:98:c2:
66:16:c8:54:51:0a:41:96:9f:72:87:04:f3:3b:97:
d9:3f:34:d4:41:0a:02:e9:61:57:e7:1d:02:25:ff:
a7:ac:20:3f:46:ab:7d:af:e5:b8:8c:e4:bd:a4:53:
17:50:23:29:2f:7a:a0:00:2b:7f:94:d2:1e:9b:a8:
51:3f:36:40:69:19:62:92:ba:13:80:e1:75:0c:b8:
ed:5c:99:f2:f4:24:41:45:5a:dc:b4:8e:3e:be:e7:
08:a4:9c:6f:4b:e7:19:8b:7c:29:f0:56:92:92:04:
f1:b0:05:cb:c3:47:64:5c:ed:fd:62:54:c2:4a:44:
d4:40:3b:93:84:67:3d:63:ee:8a:ac:1a:23:26:fc:
63:01:b3:98:45:8d:8a:62:0e:20:a7:d8:90:fb:c8:
84:df:21:84:46:72:5c:6e:75:f4:16:34:ec:cd:04:
88:35:7e:b0:c4:98:4d:8d:e7:75:0b:34:8e:46:23:
43:ec:ee:9a:3e:58:f4:c2:e2:e0:e7:d5:e8:1a:1f:
0a:db:46:62:ab:f4:ba:48:9b:d7:b4:28:03:d3:0f:
fd:47:09:66:71:44:0a:76:a3:43:7f:ae:58:45:51:
67:69:72:0d:02:8b:77:4d:89:0f:62:9a:cc:97:f8:
cb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9F:98:2B:60:25:E8:D4:B7:2E:60:C0:CE:81:54:3F:DE:66:73:94
X509v3 Authority Key Identifier:
keyid:04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:3e:c3:66:a5:09:59:b5:19:b5:ed:56:cd:5c:dd:1a:09:69:
24:4f:52:6b:45:9c:65:b7:3e:05:4b:8d:00:20:a0:44:fb:0e:
86:92:20:20:45:2f:db:aa:40:5f:32:3b:5c:5f:b6:97:2d:5e:
0f:50:5d:d6:c0:84:f6:91:39:35:2b:81:74:ed:0a:e8:04:d4:
9b:d6:d9:6b:e5:12:b0:f4:73:4e:aa:47:ee:01:ee:ac:e1:4c:
43:0e:5a:ec:df:c8:65:39:6e:ae:78:3e:9e:ad:6a:b9:74:91:
8e:d3:e2:f2:ca:a8:4b:98:6f:e1:58:d6:ce:15:5d:da:af:63:
2a:db:c3:2c:ea:6e:87:7c:59:86:0e:f6:53:60:7e:11:ad:22:
c2:6c:a2:98:49:f8:86:a9:7b:9b:33:ee:16:a0:26:81:4d:48:
c7:7a:8c:17:0e:dc:f8:fc:ab:92:e7:01:fe:10:6f:04:68:87:
b8:f3:17:c6:ad:b6:28:2f:61:e0:d5:56:b5:49:1c:6c:be:83:
ae:dc:46:07:f9:31:f5:b4:a7:5a:6e:e3:fb:9a:ba:85:e5:ab:
72:de:03:fe:01:4f:46:31:90:6a:99:cf:1b:9b:48:01:a7:24:
10:de:40:18:4a:68:b2:b2:a6:b3:04:a7:df:3a:05:82:0b:64:
d1:fc:d7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:12:00 2025 by rpki-client