Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
File: 8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft (raw, json)
Hash identifier: rVsDkviDfIQPyrPg3GvCwMcem9DwbQoCf5pMnm47Tqo=
Subject key identifier: 63:82:5E:E2:7C:92:7B:F5:C5:BF:36:42:9D:79:BC:B7:CE:D1:26:A9
Authority key identifier: F0:15:0B:3A:94:19:62:7F:DB:CD:B6:58:0E:87:8A:1C:9F:A0:CC:58
Certificate issuer: /CN=f0150b3a9419627fdbcdb6580e878a1c9fa0cc58
Certificate serial: 01965982EE2B54D2B1990D472B01FD11BE27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
Manifest number: 0C0E
Signing time: Mon 21 Apr 2025 18:01:14 +0000
Manifest this update: Mon 21 Apr 2025 18:01:14 +0000
Manifest next update: Tue 22 Apr 2025 18:01:14 +0000
Files and hashes: 1: 8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl (hash: l7upjN9uX4Y1mBKIGH7R3a+NhYP91+PFkpf3nnw6MdU=)
2: otWydKJIblYoFDAZjlf3bz3XaMM.roa (hash: xwlrdUyrXAa6g8e84xQqVsN9ku3EVyiSX1A/Nu5VNrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:ee:2b:54:d2:b1:99:0d:47:2b:01:fd:11:be:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0150b3a9419627fdbcdb6580e878a1c9fa0cc58
Validity
Not Before: Apr 21 18:01:14 2025 GMT
Not After : Apr 22 18:01:14 2025 GMT
Subject: CN=63825ee27c927bf5c5bf36429d79bcb7ced126a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:29:89:07:e4:b1:b0:03:14:81:ab:e0:cc:dc:
36:3a:82:3e:29:aa:7a:db:4c:b7:93:8d:b6:b0:3e:
08:32:56:63:90:41:c1:1d:5b:65:87:a5:0a:84:28:
bf:e6:08:61:00:6a:da:5c:8e:20:39:dc:5d:43:94:
06:4a:b4:7d:a2:98:ac:dc:ec:97:df:ba:c3:97:5b:
ed:04:80:dd:99:4f:4c:e0:58:30:d4:0c:ed:9a:3b:
08:82:e9:24:07:50:1a:3c:96:29:ce:fe:3d:28:86:
1c:e1:41:27:1e:3a:0d:6d:a8:75:e2:17:37:88:fa:
e9:44:db:3d:b3:be:c4:07:cb:fb:dc:96:9b:28:91:
c6:b3:43:bd:32:48:8d:77:49:82:b6:0c:42:5b:e4:
e8:94:95:7a:a1:e9:ec:52:ae:df:bd:d0:98:b3:ef:
6e:39:fc:6f:01:19:19:55:02:c0:68:97:61:3e:94:
97:99:2b:10:74:67:e1:cb:c8:f2:10:da:76:93:c3:
52:15:1f:3e:a4:f0:af:6b:76:c8:96:41:d6:7b:ea:
85:34:5e:da:d7:a0:b8:e1:05:75:b9:ac:24:94:09:
78:4a:0b:f1:eb:33:b0:56:cc:b9:4e:4c:88:0c:d8:
47:e9:9f:d1:6c:cb:0e:ef:10:75:56:c2:13:60:c1:
88:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:82:5E:E2:7C:92:7B:F5:C5:BF:36:42:9D:79:BC:B7:CE:D1:26:A9
X509v3 Authority Key Identifier:
keyid:F0:15:0B:3A:94:19:62:7F:DB:CD:B6:58:0E:87:8A:1C:9F:A0:CC:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:32:25:39:23:b5:9b:5e:f7:da:32:7d:e5:17:5a:83:25:ec:
ab:7d:0a:98:b0:34:27:37:99:3f:d6:70:91:2f:b6:33:79:de:
62:27:b4:13:69:0d:83:a9:31:97:3f:e4:f3:ee:1d:7d:79:7a:
35:b6:aa:ff:71:0f:f2:27:b5:89:7e:a1:8d:e3:3a:02:79:9a:
08:40:29:9d:c8:3b:d4:65:80:c8:a4:4f:2a:f1:c6:cc:36:c7:
53:dc:d1:68:4d:62:27:0a:be:3d:5d:c4:88:97:1c:fb:5b:61:
91:47:58:83:45:ce:8f:17:43:5a:b9:80:6a:09:82:12:5c:f7:
cb:c5:bb:d9:9b:d2:17:bb:06:72:df:c7:39:87:00:77:d0:b1:
f6:9d:b5:51:7c:f7:b4:61:bd:cb:bf:da:f7:2d:f0:b8:53:ec:
17:ac:df:fd:63:58:f5:3b:42:62:92:e8:4d:9c:c7:bb:9c:35:
fb:a3:13:4f:46:e6:a7:0c:ae:7c:f6:ce:b5:7f:51:26:ce:80:
5e:93:bb:5e:e2:f7:a2:d7:77:a4:78:1c:88:24:58:c2:79:24:
54:5c:ce:cf:9c:43:4f:a8:4d:96:bf:70:02:71:c4:b0:db:d5:
cf:7e:7e:53:aa:7e:3a:5e:e5:ae:10:2d:cf:9b:92:a9:18:1f:
0b:54:6e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:06:22 2025 by rpki-client