Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
File: BZZLbVGQL9wapoQbs9PGIqV5glo.mft (raw, json)
Hash identifier: gT2aePinzOkJ4RFalbGT2B2O5OWj/UpF0IyI74Szryk=
Subject key identifier: 69:3B:44:D9:8D:36:CA:37:8D:14:59:75:8A:E8:76:2C:01:49:E7:E8
Authority key identifier: 05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A
Certificate issuer: /CN=05964b6d51902fdc1aa6841bb3d3c622a579825a
Certificate serial: 01967FB47E4A319261B9452DA54BCA979F93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
Manifest number: 0901
Signing time: Tue 29 Apr 2025 04:00:57 +0000
Manifest this update: Tue 29 Apr 2025 04:00:57 +0000
Manifest next update: Wed 30 Apr 2025 04:00:57 +0000
Files and hashes: 1: BZZLbVGQL9wapoQbs9PGIqV5glo.crl (hash: yjb9A16jHoPAbdjBzbwkqZfYHT8YRgYDJIeW4leW/w0=)
2: inNKkDFxcUNq5FXZVVy7-DSSYCQ.roa (hash: k4FJ7ff3nr4506kIqSUj3qTtLfz2+PJT75ZSUSvS0y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:7e:4a:31:92:61:b9:45:2d:a5:4b:ca:97:9f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05964b6d51902fdc1aa6841bb3d3c622a579825a
Validity
Not Before: Apr 29 04:00:57 2025 GMT
Not After : Apr 30 04:00:57 2025 GMT
Subject: CN=693b44d98d36ca378d1459758ae8762c0149e7e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ac:db:a4:ff:7b:00:52:de:30:c3:60:47:6d:
66:e4:e0:f2:a0:26:ce:0c:52:fb:fe:e9:95:cc:a8:
e4:9e:f6:1b:4d:bb:1d:94:9c:67:03:23:70:86:74:
9c:c7:8f:cc:f7:63:2b:26:5d:f3:95:b9:0c:b2:db:
8e:f4:8a:f0:ea:3e:e5:39:14:7f:f7:26:c1:7d:cb:
0d:af:3f:89:f7:61:a1:2c:f7:17:34:82:2e:bf:aa:
79:fb:2f:26:85:5a:b8:a4:b4:81:d0:c8:c1:f1:55:
a5:5b:db:b9:fe:24:2e:ef:82:e2:0c:90:fc:c3:5a:
26:84:66:67:0b:67:c1:2e:d7:45:49:1f:79:6c:3d:
76:3a:b2:a5:7c:1e:ca:70:a0:00:47:66:7a:9f:0f:
4d:2e:cb:37:77:66:1c:c1:0a:5d:3c:48:85:fa:c0:
25:c5:b8:42:7e:55:28:54:f0:f1:bb:6a:da:d8:18:
95:cb:37:46:2a:03:69:ff:c6:83:0d:35:69:d8:db:
45:df:a7:61:51:25:f8:44:07:0d:86:96:b0:fa:03:
40:07:81:cd:64:f5:63:41:fd:bc:69:70:02:3b:c5:
ba:33:4e:86:81:59:07:07:19:93:f5:0b:0d:f5:6e:
72:c8:5f:47:b1:f6:29:2d:01:eb:4d:94:a5:e0:c7:
9a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3B:44:D9:8D:36:CA:37:8D:14:59:75:8A:E8:76:2C:01:49:E7:E8
X509v3 Authority Key Identifier:
keyid:05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:31:83:e2:36:50:db:a7:b0:43:86:55:34:76:56:d2:f2:7a:
b5:cc:62:11:b4:cc:0d:58:25:41:43:30:ec:b6:65:08:85:8b:
00:cc:23:1b:8d:d8:7c:6d:69:55:8f:ab:6f:af:b6:ba:b9:ab:
ee:69:3a:75:2f:a2:e0:0d:12:15:07:73:95:6a:ca:99:21:d0:
6e:8f:69:d0:ad:2d:0f:b9:32:3f:7a:3c:ce:72:2d:17:53:75:
cb:76:94:e8:9f:aa:2e:ed:75:68:dd:69:82:9e:41:b1:97:66:
55:a5:7e:a2:d9:2a:ce:49:af:33:39:f1:72:39:07:2d:61:28:
a5:c0:24:4a:aa:a1:eb:e3:b0:04:80:fc:27:81:08:4c:87:a9:
99:63:98:69:7f:59:95:da:10:2a:b6:c6:e5:76:d0:91:5a:b1:
35:7d:18:a8:ff:c1:77:a2:92:c4:ff:f4:e1:fc:ac:d5:50:50:
29:2d:04:0e:d9:3b:13:a1:3d:68:6e:b3:bd:b8:37:35:51:09:
38:41:11:8a:41:29:1a:d4:c9:76:af:07:49:55:bd:90:e8:dc:
c3:24:e5:fb:0a:6c:89:f3:2e:e4:83:c7:3b:f1:da:fc:c6:15:
71:97:dc:38:92:2f:dd:cd:87:6f:a8:5f:69:dd:6c:e0:84:e0:
ad:7b:c0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:31:56 2025 by rpki-client