Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
File: BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft (raw, json)
Hash identifier: VXhuSZ2yYoSXsPrkHLpbRmnESygKfHUnIrDsAD7jAEg=
Subject key identifier: 4C:27:85:57:90:54:92:CB:CE:A9:C9:48:34:A5:92:1B:8B:83:15:36
Authority key identifier: BC:09:F1:50:8E:1B:C1:1B:EE:CB:80:8E:5B:01:E6:F5:DB:8D:81:68
Certificate issuer: /CN=bc09f1508e1bc11beecb808e5b01e6f5db8d8168
Certificate serial: 5804AE80C510D882406813D085F700CE81FB2E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
Manifest number: 0257
Signing time: Mon 28 Apr 2025 08:22:42 +0000
Manifest this update: Mon 28 Apr 2025 08:17:42 +0000
Manifest next update: Tue 29 Apr 2025 10:32:42 +0000
Files and hashes: 1: BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl (hash: HHFO6gobvF/yTA1okPyP9o65g23cUgTKQOm+YFA+crc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl
rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 10:32:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:04:ae:80:c5:10:d8:82:40:68:13:d0:85:f7:00:ce:81:fb:2e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc09f1508e1bc11beecb808e5b01e6f5db8d8168
Validity
Not Before: Apr 28 08:17:42 2025 GMT
Not After : Apr 29 10:32:42 2025 GMT
Subject: CN=4C278557905492CBCEA9C94834A5921B8B831536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c9:25:63:e6:8b:8c:6a:03:2d:9b:0d:0a:11:
cf:82:bb:bd:78:94:96:ce:37:0a:30:33:90:f2:7c:
b6:c4:4c:fd:97:69:e0:e4:84:b3:6d:75:76:99:c8:
5b:07:ba:92:35:30:8f:14:e5:8c:0c:b8:80:42:12:
68:46:65:ea:ba:aa:cf:07:73:3d:a0:9f:85:da:28:
f8:10:08:91:73:32:5f:36:ec:c4:6b:10:3d:25:a4:
7e:99:63:d8:c1:6e:e6:ac:dd:13:64:08:f7:78:6b:
44:85:0d:c0:89:7b:98:e7:4c:d3:f9:45:45:bc:fd:
cb:e8:7a:be:f8:16:9d:99:51:05:23:d4:3d:c4:4d:
bc:4a:90:42:fa:9e:9f:6d:4f:a9:b5:08:d1:96:3f:
03:9a:b2:7c:09:b6:7c:b7:26:70:a4:78:62:5a:06:
f9:1c:c0:5b:93:1f:54:fe:8a:36:f1:55:d4:35:ae:
15:af:6e:3a:56:09:20:f4:f0:a3:7a:cf:7a:50:fe:
fc:40:92:0b:d7:c1:b9:58:ca:81:e4:5d:a4:43:b9:
f6:f0:2b:be:bb:d2:8f:d4:94:0d:97:93:0c:a9:b3:
97:62:8c:a4:06:c1:2c:1e:3f:19:23:a6:96:2e:fe:
22:a0:96:6b:b1:31:ca:5c:98:8d:3a:80:5c:f2:6b:
d6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:27:85:57:90:54:92:CB:CE:A9:C9:48:34:A5:92:1B:8B:83:15:36
X509v3 Authority Key Identifier:
keyid:BC:09:F1:50:8E:1B:C1:1B:EE:CB:80:8E:5B:01:E6:F5:DB:8D:81:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:64:21:7f:80:9f:6d:5e:d2:f9:a1:aa:09:4f:5d:91:7f:23:
46:25:9c:c2:5b:80:4f:3d:15:37:03:80:e3:f9:d7:f6:26:f5:
99:4f:89:d8:35:51:9b:16:48:bc:41:0e:53:6c:ca:2a:cc:4e:
6f:d1:60:4e:b9:a7:c2:93:65:98:89:2e:e4:60:86:12:a7:61:
f3:f4:d2:b3:bf:ba:4b:6d:16:8f:d3:df:81:2b:a1:1d:55:a4:
ee:41:26:d2:ad:55:bd:43:2f:8e:a7:d9:c5:25:ad:44:68:25:
b8:c1:a1:db:35:c9:7a:64:17:9f:d6:4b:91:f0:82:71:64:f6:
00:4d:85:4c:f4:a9:51:89:86:b1:e8:52:3e:d4:96:54:21:17:
e8:e2:38:6e:1a:54:3f:17:17:79:53:3d:3f:12:6c:29:d8:85:
af:03:2b:0d:de:a6:84:77:29:89:4f:2d:cd:34:bf:03:71:0f:
22:df:1c:a0:6b:8a:c5:72:c1:d3:dd:f5:f5:55:a2:65:ad:89:
cc:9b:0b:b8:bc:55:7e:78:13:8b:97:6a:b1:8e:d9:2c:6d:91:
25:15:7c:cf:b3:75:c3:cc:04:92:35:b7:d7:40:1b:42:c6:a4:
ed:5a:c2:46:c5:c7:82:53:35:37:52:ac:05:4b:22:38:79:6e:
03:b5:4c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:36:24 2025 by rpki-client