Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft
File: BWRw2Bso3FKOXyjbC7X20pRhGmU.mft (raw, json)
Hash identifier: blF+dOA9QEDXt1Yb5fsxZIS78Hx2chvhM83d5F7GFV4=
Subject key identifier: 31:68:88:20:DF:EB:7A:6E:8E:99:EB:C1:DE:DA:6E:C5:86:D2:0B:79
Authority key identifier: 05:64:70:D8:1B:28:DC:52:8E:5F:28:DB:0B:B5:F6:D2:94:61:1A:65
Certificate issuer: /CN=056470d81b28dc528e5f28db0bb5f6d294611a65
Certificate serial: 019674C2DB9D023A41386052A7513ABDB3A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft
Manifest number: 1227
Signing time: Sun 27 Apr 2025 01:00:49 +0000
Manifest this update: Sun 27 Apr 2025 01:00:49 +0000
Manifest next update: Mon 28 Apr 2025 01:00:49 +0000
Files and hashes: 1: BWRw2Bso3FKOXyjbC7X20pRhGmU.crl (hash: FRQ998D6srjNXDlLexma2TGnE5lS+hoEC+1uEBKW8t8=)
2: kqmUwVdGk1LkjvL-upU9QhBrTk8.roa (hash: ljaTHQhywA3lYtK1TIsMdme1hiJbfaCWwfGaCBoPJAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:db:9d:02:3a:41:38:60:52:a7:51:3a:bd:b3:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056470d81b28dc528e5f28db0bb5f6d294611a65
Validity
Not Before: Apr 27 01:00:49 2025 GMT
Not After : Apr 28 01:00:49 2025 GMT
Subject: CN=31688820dfeb7a6e8e99ebc1deda6ec586d20b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:82:05:d1:53:ed:22:10:1d:1e:f7:19:b1:f4:
fa:78:2e:82:d6:f7:fb:b1:36:5d:78:c8:d5:21:fa:
53:62:65:b9:59:ed:fc:6f:26:24:da:4d:f9:27:62:
1b:40:54:d3:9a:5f:8d:b4:90:0b:bc:7c:6c:45:5b:
6a:6d:1c:09:bc:40:1e:2c:79:c8:56:aa:ed:36:e4:
35:b0:7d:70:e2:c3:31:9e:37:dd:c0:d5:ae:da:37:
18:7e:ca:55:10:5e:22:14:56:e9:76:a1:16:89:80:
c0:9c:ae:3d:3d:1d:12:b2:f4:3d:cc:d2:92:fd:7c:
b4:87:53:bc:03:a3:cb:33:0e:15:cd:f5:7d:fe:78:
9d:55:d8:a5:55:c7:5d:ea:32:8c:bd:15:94:43:2d:
3a:20:da:77:c6:ba:89:c0:32:df:4d:a7:01:1c:11:
50:da:7a:ac:fd:e9:f0:b8:2e:fc:74:b3:bb:6e:56:
f0:5f:75:2e:e5:58:f4:9a:c9:dd:ac:48:30:dd:9d:
91:8e:a7:7d:e6:65:0e:fe:d0:2c:45:f3:d4:02:77:
1b:d1:62:b6:00:e9:78:1b:6c:6e:9e:96:21:3e:bb:
a6:75:72:6f:7b:10:d8:68:50:c4:53:11:00:04:df:
dc:09:bf:82:d2:be:f3:5b:ae:fb:f2:68:b5:70:3b:
1e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:68:88:20:DF:EB:7A:6E:8E:99:EB:C1:DE:DA:6E:C5:86:D2:0B:79
X509v3 Authority Key Identifier:
keyid:05:64:70:D8:1B:28:DC:52:8E:5F:28:DB:0B:B5:F6:D2:94:61:1A:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:5c:7d:86:bd:5c:d9:1e:0e:9d:e4:7d:a5:fd:98:5b:aa:92:
04:ad:4c:c8:11:f7:13:ec:b1:8d:52:66:a0:94:78:a6:58:d4:
91:7d:c4:f1:67:5f:2d:4c:b5:0b:d3:b6:ed:b4:6f:d8:e1:57:
56:8f:c4:a7:63:07:68:38:17:3b:4b:b4:2f:5c:24:6d:8c:39:
5b:9f:ac:cb:33:f9:5e:80:6a:fb:c7:00:f4:46:f0:54:29:52:
b4:eb:ef:9a:1b:5e:b5:2a:8e:d6:6c:32:dd:c6:63:69:88:dc:
97:b0:f0:50:bc:8c:bf:b0:53:3c:e6:55:e6:17:23:d5:78:8a:
fe:44:1a:ad:4f:13:86:45:6d:fe:4d:5c:fa:88:4b:ba:4c:1e:
91:99:29:e4:82:16:7f:b0:01:8c:2a:96:15:f3:1c:57:d4:76:
25:ac:cd:76:80:60:e6:a1:d0:d7:d8:51:ed:cf:d2:fa:b9:b2:
6c:3a:06:52:38:34:58:c7:f8:b2:36:18:9a:95:6f:29:1c:87:
e0:54:e5:87:3f:bb:78:19:db:92:bd:43:a3:50:cb:b0:94:41:
d6:a5:cd:86:70:d7:91:58:a0:d8:d3:b2:c2:53:cf:3c:f6:03:
f5:ca:e1:b9:39:95:d2:79:59:f0:f7:68:53:96:3f:32:ec:eb:
b6:06:29:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:41:21 2025 by rpki-client