Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/bULP8YM0sv92sVrZRKipE16QVow.mft
File: bULP8YM0sv92sVrZRKipE16QVow.mft (raw, json)
Hash identifier: ONfIMi01BTpi8KxtDX/LYxHl+fIjC+3OLDvqjAOTWhM=
Subject key identifier: F8:BC:9D:B6:9F:A3:7E:1F:F3:1A:EA:D8:2F:25:3D:55:A9:16:C7:C7
Authority key identifier: 6D:42:CF:F1:83:34:B2:FF:76:B1:5A:D9:44:A8:A9:13:5E:90:56:8C
Certificate issuer: /CN=6d42cff18334b2ff76b15ad944a8a9135e90568c
Certificate serial: 01964EC7C766C057A750B9743A4CCE03291F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bULP8YM0sv92sVrZRKipE16QVow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/bULP8YM0sv92sVrZRKipE16QVow.mft
Manifest number: 0C5B
Signing time: Sat 19 Apr 2025 16:00:37 +0000
Manifest this update: Sat 19 Apr 2025 16:00:37 +0000
Manifest next update: Sun 20 Apr 2025 16:00:37 +0000
Files and hashes: 1: bULP8YM0sv92sVrZRKipE16QVow.crl (hash: jqmtqR7WedOluSNYYEP+AmqrDpll99+5emnznr2T0vI=)
2: nnbxQ8tDPz9a0vLR7ITFF8A_VlE.roa (hash: halDO4C/H1OfIMQSoqT7EneEPBECnw5N2tq5Tmmkcww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/bULP8YM0sv92sVrZRKipE16QVow.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/bULP8YM0sv92sVrZRKipE16QVow.mft
rsync://rpki.ripe.net/repository/DEFAULT/bULP8YM0sv92sVrZRKipE16QVow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:c7:c7:66:c0:57:a7:50:b9:74:3a:4c:ce:03:29:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d42cff18334b2ff76b15ad944a8a9135e90568c
Validity
Not Before: Apr 19 16:00:37 2025 GMT
Not After : Apr 20 16:00:37 2025 GMT
Subject: CN=f8bc9db69fa37e1ff31aead82f253d55a916c7c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c0:03:00:47:81:f8:2a:cc:39:11:70:f9:b5:
25:f3:51:8c:15:4a:3d:df:6d:1e:91:9d:c7:fc:21:
46:94:dd:81:60:6d:6b:69:1c:c4:52:b8:93:8a:85:
82:e5:dc:01:4a:66:01:0c:64:8e:a9:2c:36:7e:17:
40:57:06:3d:6f:85:ff:12:eb:fb:ee:46:c8:ac:ac:
1e:81:f9:69:45:7c:66:ad:f0:fd:6d:7c:4b:72:05:
ad:d9:55:e3:f5:89:95:2a:db:19:17:dc:b2:28:de:
fc:cb:93:f3:85:fb:dc:da:0d:e9:83:1f:71:cf:7d:
53:95:a4:d4:2c:12:c1:1d:04:e0:a9:f6:a4:01:dd:
fc:6e:bc:1f:28:48:20:98:8b:9f:f5:08:0c:cd:85:
e7:3c:3b:37:89:d9:26:e2:53:12:1c:fb:31:4b:cc:
94:f0:89:d0:06:e4:e7:89:bd:4c:a8:7f:0c:1d:0a:
b4:b0:a7:03:2e:62:e3:70:6b:5f:45:6e:fc:d1:19:
80:e8:c0:7a:06:ed:9d:b9:4b:4b:e4:34:7b:aa:fd:
fb:20:5b:04:e6:1f:93:fc:9a:4c:86:88:87:20:fa:
49:68:ac:b2:04:6f:94:c4:a2:98:ff:06:85:15:bb:
8c:c8:dd:dc:18:75:52:44:ea:9d:d3:5f:78:be:a5:
47:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BC:9D:B6:9F:A3:7E:1F:F3:1A:EA:D8:2F:25:3D:55:A9:16:C7:C7
X509v3 Authority Key Identifier:
keyid:6D:42:CF:F1:83:34:B2:FF:76:B1:5A:D9:44:A8:A9:13:5E:90:56:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bULP8YM0sv92sVrZRKipE16QVow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/bULP8YM0sv92sVrZRKipE16QVow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/bULP8YM0sv92sVrZRKipE16QVow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:05:16:99:8f:83:4a:eb:9b:8c:16:2e:eb:18:d3:0c:c7:25:
e5:f6:e2:3c:33:74:ad:6b:f2:51:74:4a:8d:bc:c5:9a:95:20:
62:9e:95:d5:da:c0:34:f7:84:d5:75:03:1c:2d:bc:d8:68:ef:
a5:09:9e:83:69:97:03:15:96:e4:bd:c5:41:4f:c9:3f:05:ac:
7d:b9:e6:aa:7f:c8:92:42:67:1b:5c:48:6f:89:33:09:b9:70:
2c:e5:e7:87:31:43:36:e3:9c:43:21:00:87:1e:00:b7:5a:b8:
0e:a2:e4:35:88:c3:86:37:ab:ea:0c:ad:7f:5d:db:05:4f:31:
45:7e:35:0d:a3:55:f4:ae:b5:96:51:a1:ff:ea:4e:65:02:33:
58:f7:cb:89:a7:16:9f:e6:4f:9c:9d:c1:a8:d0:d3:f2:e2:d3:
49:84:bd:9f:35:ea:1f:11:99:64:a3:be:2c:9b:cb:e6:c3:06:
d9:94:90:ac:b6:54:50:f3:c7:d0:9e:22:22:4d:96:3b:4f:42:
38:42:9b:78:2a:e4:4b:d7:1d:f9:9b:f5:3e:75:2b:2c:58:1e:
44:b6:d0:a5:93:6e:1a:90:98:f7:c2:1f:69:d1:c8:cb:0a:ab:
d5:e0:a6:15:3d:7d:98:aa:c4:01:60:e0:c3:f9:91:de:f3:f7:
32:c9:d0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:46:11 2025 by rpki-client