Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
File: BamRrNeyJz2eGGWvonVeb15nLlU.mft (raw, json)
Hash identifier: 6KlzxUV6C7ANDehIYsFE6k7TIRD1nN2UZMqp5VKBMFs=
Subject key identifier: DD:99:25:F3:A3:54:6B:7C:F9:4E:F5:AD:67:80:9D:5A:42:BE:E8:F8
Authority key identifier: 05:A9:91:AC:D7:B2:27:3D:9E:18:65:AF:A2:75:5E:6F:5E:67:2E:55
Certificate issuer: /CN=05a991acd7b2273d9e1865afa2755e6f5e672e55
Certificate serial: 01968B814CF4267CC02695F159E7539219E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
Manifest number: 095D
Signing time: Thu 01 May 2025 11:00:28 +0000
Manifest this update: Thu 01 May 2025 11:00:28 +0000
Manifest next update: Fri 02 May 2025 11:00:28 +0000
Files and hashes: 1: BamRrNeyJz2eGGWvonVeb15nLlU.crl (hash: k4EpSRipNelGYOn82FlG11agSr4IQaluIUR/ZaTwaDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 11:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:81:4c:f4:26:7c:c0:26:95:f1:59:e7:53:92:19:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a991acd7b2273d9e1865afa2755e6f5e672e55
Validity
Not Before: May 1 11:00:28 2025 GMT
Not After : May 2 11:00:28 2025 GMT
Subject: CN=dd9925f3a3546b7cf94ef5ad67809d5a42bee8f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cb:1a:10:dc:06:5f:4e:2d:33:01:b4:80:f6:
83:df:70:88:32:cb:b2:67:8c:53:b5:d3:5d:b8:40:
2e:cb:dd:5d:06:3f:04:d8:3a:52:60:33:ee:56:c2:
7d:66:d0:f4:d5:ce:84:29:05:cf:6a:65:79:66:f5:
fb:4e:bd:14:27:4b:37:91:5c:48:40:b4:45:b4:e1:
cb:62:a8:f6:0e:b7:9f:83:97:bb:d8:8e:b0:c8:5b:
93:0d:86:13:fa:93:90:bb:01:1e:a1:3c:88:f9:d3:
4a:71:be:e3:c1:53:50:2a:e9:30:86:e6:47:0f:23:
8a:04:6c:09:3e:45:3e:d3:34:5f:5f:d7:4e:97:7d:
68:94:59:04:90:53:8a:dc:34:00:f0:45:2f:54:43:
50:cd:4a:d1:57:28:37:59:70:d3:0b:17:68:fd:67:
9e:69:88:b6:94:c3:4c:4b:13:0c:21:4f:b2:83:9e:
0f:aa:46:bc:ea:13:e9:8a:f9:58:3e:f4:97:64:5a:
da:f1:e1:b0:c2:b5:10:27:3b:1b:ac:53:87:54:3a:
10:f1:19:86:fc:29:8c:b8:8a:b9:b9:c6:61:27:19:
a4:82:19:58:0a:ba:c8:19:5b:3d:f5:63:72:e1:ab:
c6:ae:1d:2c:63:35:51:4b:a6:20:94:cf:c9:a1:75:
cc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:99:25:F3:A3:54:6B:7C:F9:4E:F5:AD:67:80:9D:5A:42:BE:E8:F8
X509v3 Authority Key Identifier:
keyid:05:A9:91:AC:D7:B2:27:3D:9E:18:65:AF:A2:75:5E:6F:5E:67:2E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:33:eb:e3:1e:aa:3b:d8:03:5c:f2:b8:16:4f:b7:00:5d:71:
f4:55:24:fd:62:df:3a:c1:59:44:da:b4:69:82:f8:07:89:be:
31:49:ee:69:9b:18:e5:4a:fb:de:6e:4e:30:f1:6d:3a:aa:e8:
09:dc:c5:e8:16:73:49:75:39:1e:3f:14:15:ab:c7:0c:22:75:
fb:13:5c:ba:b4:3c:3c:71:3a:8a:68:14:bd:6f:c5:66:21:f8:
e7:42:1b:37:af:c3:5e:32:f5:2f:46:a4:08:1e:8b:db:9d:eb:
97:0f:9c:0e:5f:75:86:43:ee:d7:24:15:d6:07:4f:d6:73:4e:
90:c1:d3:d3:a3:8e:9f:59:8c:5f:f7:90:4d:88:3d:66:cf:5b:
8f:d9:30:28:75:d6:5c:b7:12:6a:99:07:93:cf:42:b2:6b:6a:
1f:75:6d:52:e8:20:77:3e:ab:71:03:b3:09:20:bb:24:cd:a1:
01:77:ca:d1:40:cb:33:5c:98:90:29:22:18:ea:fa:86:f3:c1:
eb:d6:3c:f6:62:39:e5:16:ad:53:01:5f:2f:c5:ca:23:d2:a0:
fa:ec:13:9a:d9:67:8f:06:1d:e0:c9:e2:1a:4e:c7:5c:ec:1e:
bc:5f:12:a6:88:99:14:93:26:c0:e9:a7:08:e7:a2:b8:a6:2c:
bd:4a:f3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:35:08 2025 by rpki-client