Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
File: BLw664svC0huXIwMec6djWixj5Y.mft (raw, json)
Hash identifier: YAeB+CZuTqk2CWdKzzA0jCnuBe38UV45ZtoMNVXnnKE=
Subject key identifier: 38:E0:C2:9B:9E:8D:BE:D1:FB:78:76:6E:7F:F3:F3:FA:E5:B7:E0:DC
Authority key identifier: 04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96
Certificate issuer: /CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96
Certificate serial: 019683C7F84BE2F3330D91C777E61048876A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
Manifest number: 04C1
Signing time: Tue 29 Apr 2025 23:00:42 +0000
Manifest this update: Tue 29 Apr 2025 23:00:42 +0000
Manifest next update: Wed 30 Apr 2025 23:00:42 +0000
Files and hashes: 1: BLw664svC0huXIwMec6djWixj5Y.crl (hash: Hirn3VH7BenvW0NVfmw2pGRED2xAtKP6KoQYN99n3Vk=)
2: RLDEvA5lT3OJsuLbbmV0pyamz6M.roa (hash: 08l04RNVeM6otYs3DB4mk2Ka+Bd48a32zNdlW+piPQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:c7:f8:4b:e2:f3:33:0d:91:c7:77:e6:10:48:87:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96
Validity
Not Before: Apr 29 23:00:42 2025 GMT
Not After : Apr 30 23:00:42 2025 GMT
Subject: CN=38e0c29b9e8dbed1fb78766e7ff3f3fae5b7e0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:51:a5:77:d7:35:d7:67:7d:02:e1:19:6a:90:
5b:a0:71:04:0c:53:9e:b4:82:be:db:3c:7b:3b:eb:
c7:db:f8:35:39:3f:d7:ab:b0:4a:01:2c:76:ad:c0:
4e:2c:7b:51:11:d7:2e:51:2f:8f:94:0c:02:d4:3d:
ec:41:ea:f0:2f:1a:23:00:8b:6a:4b:e1:96:b2:a4:
c6:15:99:e2:c2:d6:0a:7a:5e:56:1e:c6:02:23:c4:
e2:ba:c2:d5:74:03:5c:7b:86:24:ae:32:c5:08:c4:
b4:03:30:b8:f9:ed:41:08:91:bd:a4:00:61:d8:a8:
cb:a7:ed:14:39:72:99:df:61:af:cc:e6:90:fa:b4:
04:9b:2a:31:2b:fb:36:4f:fa:6e:e2:1d:9c:a1:4b:
3e:81:2a:3f:7d:3c:22:80:08:84:91:1f:2d:2b:6b:
7c:62:ee:37:d4:26:59:35:58:51:86:87:84:83:ec:
f2:de:5b:ad:e3:ad:14:b4:f6:24:d7:e3:aa:a9:69:
56:6e:d0:7e:9d:65:37:5f:a8:56:ca:f2:14:b2:87:
ba:6e:41:a8:a8:3e:0e:be:bd:4d:b6:e9:6f:0f:ac:
02:1d:de:d8:cc:46:55:cb:e2:08:ff:eb:7b:2d:6e:
0e:36:b2:fc:b8:5f:20:89:ed:d9:5e:9a:57:be:1a:
39:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E0:C2:9B:9E:8D:BE:D1:FB:78:76:6E:7F:F3:F3:FA:E5:B7:E0:DC
X509v3 Authority Key Identifier:
keyid:04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:45:47:32:ed:51:ea:c6:73:fd:37:f8:22:2c:52:2c:0d:22:
03:67:7c:c7:e2:c2:38:71:37:f6:09:9f:20:77:85:a0:22:6e:
1e:10:0b:c2:84:ae:04:95:e0:50:b8:b0:ef:04:58:3a:f0:05:
72:c8:8e:a2:b7:aa:42:6f:94:00:ed:06:70:13:f9:e6:5f:a8:
49:1e:1f:91:db:d0:e6:c5:65:7b:33:b4:c4:67:09:df:26:57:
dc:59:ca:f2:b8:c3:4c:f1:fc:15:ba:b4:db:8a:02:4b:69:8c:
b6:2d:f9:24:44:8b:4b:2c:2b:df:d8:ed:63:70:56:b5:e5:1c:
9d:95:b2:da:5c:da:59:ff:95:d9:a4:e1:77:bb:a6:cb:90:3b:
06:99:26:b2:c6:58:0e:23:c1:42:bf:a1:44:b2:0a:6c:9b:b6:
e3:41:d5:20:c4:52:b4:8f:71:ad:b9:7c:46:ad:f6:a8:f9:46:
fb:cf:cc:07:4b:b2:1e:71:c4:60:30:e8:38:41:54:2e:e0:28:
b2:b5:49:c1:3f:fd:04:51:21:5a:cc:b3:fd:ae:b0:24:b4:5c:
b8:f7:ef:6a:5b:3b:34:51:84:be:81:96:71:ce:8b:9c:ac:41:
12:95:64:0f:aa:de:51:bf:95:3e:db:10:55:f7:81:19:54:c5:
77:c9:ed:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:26:50 2025 by rpki-client