Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.mft
File: bpnMzW8P8m3o7Tk29KZL7pjZ3GY.mft (raw, json)
Hash identifier: h749SQ/nL2tF9hILrlRUywIpUUA04a4JgzTgKFmOPZo=
Subject key identifier: 3F:38:12:0E:F1:FB:47:92:BE:9E:80:49:1F:51:75:94:9F:A6:51:A8
Authority key identifier: 6E:99:CC:CD:6F:0F:F2:6D:E8:ED:39:36:F4:A6:4B:EE:98:D9:DC:66
Certificate issuer: /CN=6e99cccd6f0ff26de8ed3936f4a64bee98d9dc66
Certificate serial: 0196789F7B9F0A06A047E39DF36E5792C283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.mft
Manifest number: 14C2
Signing time: Sun 27 Apr 2025 19:00:39 +0000
Manifest this update: Sun 27 Apr 2025 19:00:39 +0000
Manifest next update: Mon 28 Apr 2025 19:00:39 +0000
Files and hashes: 1: bpnMzW8P8m3o7Tk29KZL7pjZ3GY.crl (hash: /HI+/Nhr4igubWdsa9Jf/Xl70svbYgflaI0JvL0v9g4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:7b:9f:0a:06:a0:47:e3:9d:f3:6e:57:92:c2:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e99cccd6f0ff26de8ed3936f4a64bee98d9dc66
Validity
Not Before: Apr 27 19:00:39 2025 GMT
Not After : Apr 28 19:00:39 2025 GMT
Subject: CN=3f38120ef1fb4792be9e80491f5175949fa651a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:49:8f:8b:44:b1:ce:68:8d:c7:7d:61:97:7c:
85:ad:79:a5:97:87:1f:b7:46:f6:91:5a:1a:5d:af:
b6:11:f1:26:09:9e:4d:63:76:67:47:ea:97:14:b2:
69:36:e0:42:40:60:17:75:52:44:48:fd:b4:88:02:
f3:c5:23:54:f0:6d:26:ff:f2:af:88:9f:09:e8:1e:
11:91:17:74:23:76:a0:c2:f4:a8:2b:0f:ad:a8:19:
02:26:ad:34:6f:47:02:2a:e3:ea:2b:4f:1c:33:d2:
a7:7d:ab:ef:26:7d:40:3a:04:da:b0:7a:41:97:e1:
00:f5:83:87:0d:5f:8a:56:51:9f:42:36:43:09:95:
f5:42:63:87:fb:c3:9c:c8:89:73:88:47:73:44:78:
51:cf:74:10:f1:49:fc:a7:3e:09:cf:a4:37:78:ca:
82:b0:69:ba:ce:12:4a:1c:a0:0c:b3:16:06:81:4a:
45:ea:7c:5f:8a:d4:ad:b8:81:26:af:10:09:23:48:
37:a6:08:bf:c9:95:3f:d3:27:12:82:48:23:3c:64:
24:23:4f:39:f0:20:70:d6:1a:a8:09:11:6d:fd:a7:
31:07:74:71:df:8d:05:11:7d:d4:e3:9a:05:d5:00:
0e:15:1d:3d:5f:c7:75:4b:4f:b0:19:c0:9a:6e:bb:
49:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:38:12:0E:F1:FB:47:92:BE:9E:80:49:1F:51:75:94:9F:A6:51:A8
X509v3 Authority Key Identifier:
keyid:6E:99:CC:CD:6F:0F:F2:6D:E8:ED:39:36:F4:A6:4B:EE:98:D9:DC:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e4:51:37:10:19:d8:f6:e3:9a:f5:38:e1:f0:2f:6c:27:80:
ae:d1:b3:c8:39:72:17:b6:aa:e7:c9:ae:c1:1d:1c:3e:ff:ed:
d2:30:e4:d1:78:7d:cf:29:aa:8f:db:29:36:99:8c:79:9b:37:
28:b0:c2:66:f6:0a:3a:48:34:06:9c:df:21:24:c0:08:8e:5a:
66:15:ef:60:ba:f6:12:72:82:51:60:3e:8e:8d:14:de:4b:3f:
91:4f:1e:5f:96:39:65:fc:80:26:c2:e4:e5:75:c7:9b:9f:73:
3e:bf:d6:86:fe:ad:b1:de:6b:5b:ef:16:86:03:71:4b:73:4a:
da:84:72:81:02:37:79:eb:81:4b:91:94:92:7e:51:3b:4c:70:
92:17:88:30:27:3e:fe:bf:54:87:b2:3e:91:72:96:da:6e:c6:
b0:7a:25:72:8f:d9:0a:6c:0f:57:9d:40:c3:99:48:9d:76:4e:
ba:09:eb:7f:82:cb:9b:c1:3b:bb:38:c6:1c:88:f2:4e:28:43:
5e:1f:7f:4c:c0:ff:f9:13:b7:bd:9f:6c:12:05:59:be:8f:3f:
7f:05:8f:2b:0a:09:37:4e:84:a8:bd:30:a5:67:6b:77:70:9a:
74:5f:de:d6:93:96:c8:ff:32:f9:6f:79:90:9a:77:ed:ac:e9:
d9:e5:d3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:58:43 2025 by rpki-client