Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft
File: BLVuw7rwqesioTYUdj8YFF0M8Eo.mft (raw, json)
Hash identifier: CSziun1UhNUnY171dwcQn/bqWye07hxyWwfiK92IK+Y=
Subject key identifier: 5C:BD:E3:A9:22:36:EC:17:A5:E7:5A:D1:91:F9:09:0F:88:E8:09:30
Authority key identifier: 04:B5:6E:C3:BA:F0:A9:EB:22:A1:36:14:76:3F:18:14:5D:0C:F0:4A
Certificate issuer: /CN=04b56ec3baf0a9eb22a13614763f18145d0cf04a
Certificate serial: 019683FF1D2D78A107C9DF86F5EDA0EF540F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft
Manifest number: 020F
Signing time: Wed 30 Apr 2025 00:00:56 +0000
Manifest this update: Wed 30 Apr 2025 00:00:56 +0000
Manifest next update: Thu 01 May 2025 00:00:56 +0000
Files and hashes: 1: BLVuw7rwqesioTYUdj8YFF0M8Eo.crl (hash: ygxyw00J4aKiaInfR/PTUiRD3xIHYSZb87lHJyMz15Q=)
2: CQgo9i7xKCKF-brlO7bOG3BNmVY.roa (hash: X8lPFkVQRlIn745XFiJL9ENZDguoL523rt5LMcrNdrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:ff:1d:2d:78:a1:07:c9:df:86:f5:ed:a0:ef:54:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04b56ec3baf0a9eb22a13614763f18145d0cf04a
Validity
Not Before: Apr 30 00:00:56 2025 GMT
Not After : May 1 00:00:56 2025 GMT
Subject: CN=5cbde3a92236ec17a5e75ad191f9090f88e80930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:32:66:db:08:ef:76:33:71:51:24:30:5a:76:
8d:da:a9:7d:ac:a0:1b:ac:79:3f:db:0c:46:77:22:
a7:62:a1:f0:e5:38:45:84:83:80:f9:d9:d4:8b:25:
a3:af:a2:06:b6:df:e0:80:c3:3e:a5:74:e6:12:70:
83:f7:d0:2d:70:75:eb:e1:b3:a3:25:fe:a4:d0:bb:
be:01:02:d5:e3:d4:9b:f2:73:43:db:23:bd:96:80:
b9:fe:3c:c7:92:97:da:f8:f3:a7:8d:c1:23:60:15:
5a:96:c5:50:4a:04:94:59:9e:b2:4e:98:bd:cf:64:
70:59:a2:b1:90:83:d5:5d:5d:fe:c7:b7:8b:0e:7e:
78:e7:df:60:ce:01:25:ef:37:34:92:65:79:c5:41:
0e:b9:90:02:29:42:a2:43:6c:43:3c:61:d4:1f:24:
c7:c5:28:4b:7f:50:1e:94:f2:ed:5d:01:cf:e2:89:
b1:70:05:a2:6b:5a:91:4b:13:0c:87:14:ff:64:62:
0b:3f:11:76:93:0b:85:23:35:99:6d:5e:b2:cf:8e:
7d:13:b1:a9:76:1a:e0:c0:17:63:eb:08:cf:63:14:
e8:c2:94:a4:d1:8a:ed:b5:1f:ca:1f:8d:8c:f3:5d:
f8:5e:a6:f3:f2:89:fc:eb:c6:8b:67:1d:44:ed:4d:
de:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:BD:E3:A9:22:36:EC:17:A5:E7:5A:D1:91:F9:09:0F:88:E8:09:30
X509v3 Authority Key Identifier:
keyid:04:B5:6E:C3:BA:F0:A9:EB:22:A1:36:14:76:3F:18:14:5D:0C:F0:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:16:c4:d8:df:8d:69:88:7d:0d:bd:6d:13:bb:18:c6:71:78:
00:05:b4:02:e8:7d:fd:20:da:4c:3d:89:4e:23:14:53:b2:3b:
fb:dd:90:e9:d3:91:64:15:78:ec:13:e7:c2:65:5e:7c:1e:11:
6e:d6:57:56:3b:11:f4:7c:5d:56:49:35:23:c5:5c:3f:4b:0d:
72:40:12:65:8d:3a:aa:03:29:57:98:14:af:36:6f:69:01:cf:
70:a8:4b:62:24:a2:57:e3:81:12:2a:c2:83:87:81:6d:3f:5a:
33:54:ef:f4:9c:29:ca:9c:aa:39:81:59:13:c9:7b:dc:29:e2:
68:aa:3e:c7:43:d1:d3:74:9a:51:db:20:57:fb:29:be:3d:d9:
8c:c2:d6:d4:a0:07:7b:af:2c:af:87:fb:19:f4:fe:42:64:78:
8e:0b:23:89:15:ef:cb:a9:e4:14:08:d9:55:f7:61:c5:0c:ce:
db:03:78:8c:7b:80:70:da:99:98:1a:0b:fe:fb:cd:39:e2:f9:
7e:24:28:cb:d8:3a:15:1d:94:d7:56:93:1c:04:fc:d2:d0:41:
6b:25:2e:1f:cb:41:8f:f2:b0:56:21:eb:63:b2:3d:fe:47:9c:
2e:33:52:6b:bb:87:b8:ca:b4:bc:09:48:8a:ee:9c:5d:87:49:
c1:00:78:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:37:27 2025 by rpki-client