Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
File: BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft (raw, json)
Hash identifier: EDsIKxHSA0A3PU02RWeB06ZoETtOXdEZDDkmZZ1GpDc=
Subject key identifier: 72:8B:D0:94:CE:9B:2A:3A:FD:35:3F:F1:3E:9E:BE:3C:49:7F:12:81
Authority key identifier: BC:09:F1:50:8E:1B:C1:1B:EE:CB:80:8E:5B:01:E6:F5:DB:8D:81:68
Certificate issuer: /CN=bc09f1508e1bc11beecb808e5b01e6f5db8d8168
Certificate serial: 125CED9B9125D253675E9DC02CAA93658F5E66D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
Manifest number: 0295
Signing time: Sat 14 Jun 2025 00:25:35 +0000
Manifest this update: Sat 14 Jun 2025 00:20:35 +0000
Manifest next update: Sun 15 Jun 2025 00:50:35 +0000
Files and hashes: 1: BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl (hash: xFvBT9ohMRo5p2rqRnHvqSk5bh7NaAL9Y8N+ZBTtqvo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl
rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:5c:ed:9b:91:25:d2:53:67:5e:9d:c0:2c:aa:93:65:8f:5e:66:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc09f1508e1bc11beecb808e5b01e6f5db8d8168
Validity
Not Before: Jun 14 00:20:35 2025 GMT
Not After : Jun 15 00:50:35 2025 GMT
Subject: CN=728BD094CE9B2A3AFD353FF13E9EBE3C497F1281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:78:a0:47:f2:9c:ce:67:ad:1c:82:99:7f:7e:
e8:1a:66:fb:1a:7d:86:27:1f:ac:fa:ca:10:f9:8c:
57:f5:c8:39:d4:51:8e:56:85:03:14:6c:3f:14:99:
c5:3a:06:42:3e:ea:9e:1a:28:b6:4e:2d:79:cd:a2:
83:16:68:0d:39:c9:62:18:40:45:06:7f:b5:d6:db:
4d:f2:96:0b:9f:1a:f9:36:7e:2b:0e:21:9f:5e:77:
c0:19:46:9e:bc:32:f0:75:1f:77:3f:f3:2c:3d:ca:
08:51:0d:52:60:8f:ce:9a:04:90:32:80:93:29:dc:
2d:96:b9:78:c8:b6:53:13:8b:4e:8d:da:fc:bb:94:
0b:c5:8b:f0:4c:e6:0a:9f:ac:81:81:64:e0:3f:30:
c1:2c:1b:ea:6c:e9:50:ed:48:37:ff:f4:0c:00:ec:
da:68:39:95:59:fc:74:0f:d0:57:24:ae:6d:e8:31:
a9:74:0a:03:73:84:34:75:cc:92:13:14:2c:d8:da:
90:1b:46:66:14:34:7a:8f:b0:1e:fa:81:6e:ad:df:
09:6a:45:6c:70:a9:fa:f5:a0:86:7a:ca:86:d0:ba:
b7:7f:1b:6e:80:12:62:13:ee:27:4c:5a:70:d7:23:
2e:97:c1:7b:da:7e:0d:04:00:18:90:ae:7a:28:b2:
73:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:8B:D0:94:CE:9B:2A:3A:FD:35:3F:F1:3E:9E:BE:3C:49:7F:12:81
X509v3 Authority Key Identifier:
keyid:BC:09:F1:50:8E:1B:C1:1B:EE:CB:80:8E:5B:01:E6:F5:DB:8D:81:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:50:57:c7:13:b8:f6:7c:b3:ba:54:d0:43:9f:dc:59:ed:9b:
2a:f6:94:31:30:c5:30:aa:73:bf:ad:ca:5d:2c:b0:cd:1d:ae:
eb:fb:a9:5e:ec:a3:11:3c:41:92:36:ee:f5:37:9c:e7:5c:2b:
e2:e1:73:22:75:7c:8b:2c:10:b5:ed:10:4e:25:82:fe:2a:c9:
b1:44:9b:fb:84:f6:a6:bc:ff:70:30:99:82:13:8e:d6:64:8e:
f9:a5:39:cb:3c:40:aa:7b:60:0d:20:c8:7b:43:bd:56:4f:92:
15:88:69:5a:3b:3e:4e:6a:85:f0:d6:5c:80:96:e2:d7:50:7d:
eb:ab:9d:3f:98:e6:90:ca:4f:60:6a:7b:89:e6:15:d7:6f:eb:
73:27:45:0a:07:19:cb:f0:f5:dd:61:92:e3:a0:1a:d1:64:f3:
4f:27:b3:67:46:37:8b:b5:75:56:a4:94:ae:3c:cc:f8:1f:24:
0e:fa:67:46:2a:20:09:bf:6b:40:01:82:ac:8b:89:ee:e6:94:
8a:a2:d3:07:ff:d5:cb:1a:e6:a0:30:5e:be:94:0a:34:9a:88:
1f:c6:95:0b:06:23:75:f5:61:a7:0c:59:91:f9:e2:95:f7:39:
a8:ac:08:60:59:86:6a:9f:27:c5:0e:bc:ac:7f:d1:0a:54:78:
8d:5e:52:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:21:18 2025 by rpki-client