Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.mft
File: bu8NxR3_8BA0GVmZBjZVcrf-SP4.mft (raw, json)
Hash identifier: 6KbGz8meif6rVl4mARwTyOaJIVVwOwPw/R7VpfTk8bw=
Subject key identifier: 35:F2:6B:A5:9A:1F:3D:94:CD:DD:7D:CE:10:10:F6:F3:A4:90:EB:86
Authority key identifier: 6E:EF:0D:C5:1D:FF:F0:10:34:19:59:99:06:36:55:72:B7:FE:48:FE
Certificate issuer: /CN=6eef0dc51dfff0103419599906365572b7fe48fe
Certificate serial: 019510C6B07A64F4557FD5EDD7CB3545064D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bu8NxR3_8BA0GVmZBjZVcrf-SP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.mft
Manifest number: 13B3
Signing time: Sun 16 Feb 2025 22:00:11 +0000
Manifest this update: Sun 16 Feb 2025 22:00:11 +0000
Manifest next update: Mon 17 Feb 2025 22:00:11 +0000
Files and hashes: 1: U6RWD9aj4OMHo0yZqYie1YKgXI8.roa (hash: 4jGk3sD+7Q1BY6xahD0ze9ksbE/y7sr9QeBNFj05KaY=)
2: bu8NxR3_8BA0GVmZBjZVcrf-SP4.crl (hash: kNRfTYN1VnDcSfK6PU/RMV7zIq5+Tdk7Yr0cziZIrsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bu8NxR3_8BA0GVmZBjZVcrf-SP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:b0:7a:64:f4:55:7f:d5:ed:d7:cb:35:45:06:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eef0dc51dfff0103419599906365572b7fe48fe
Validity
Not Before: Feb 16 22:00:11 2025 GMT
Not After : Feb 17 22:00:11 2025 GMT
Subject: CN=35f26ba59a1f3d94cddd7dce1010f6f3a490eb86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9d:76:c7:7a:6e:7e:70:4a:95:1e:cb:42:2a:
5f:5e:81:11:23:4f:36:c3:48:02:50:6d:9e:f4:13:
e4:90:db:72:a1:b7:07:e5:6a:50:11:26:f5:95:ab:
b2:d7:65:23:14:ef:c3:48:42:50:22:67:9c:cf:e7:
f9:85:87:1b:ec:d5:6e:2c:9b:d3:2f:d1:9a:ef:95:
5c:85:e7:46:0f:6f:da:63:98:76:20:92:09:b7:ef:
88:28:3a:a5:83:d8:6c:b8:f2:d3:77:0a:d4:96:2b:
67:13:b9:48:a7:3a:3c:99:99:ae:8d:59:27:2d:69:
07:7c:1c:79:89:27:de:68:46:e0:74:da:55:b6:2b:
5b:75:df:49:8c:c6:95:ca:6e:f8:a6:99:c2:34:ae:
51:80:5e:a4:dc:b4:06:c1:e3:22:a7:9a:c9:c1:d9:
e3:0c:a5:cd:bc:b1:c9:cf:28:c7:6a:7c:3f:60:a5:
f5:c2:59:f0:9d:da:4a:71:f8:8e:cc:13:9a:e3:3d:
3d:52:67:1d:3f:ae:fe:08:5e:5b:99:b5:0c:37:4f:
b9:ea:36:0b:8e:9b:f1:16:52:b0:03:4b:cc:a1:72:
1c:50:b7:77:0c:aa:99:e7:ce:2b:64:93:b3:f2:0f:
c2:d6:f9:39:bf:c0:fb:e6:b4:4d:21:a8:2e:35:85:
1c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F2:6B:A5:9A:1F:3D:94:CD:DD:7D:CE:10:10:F6:F3:A4:90:EB:86
X509v3 Authority Key Identifier:
keyid:6E:EF:0D:C5:1D:FF:F0:10:34:19:59:99:06:36:55:72:B7:FE:48:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bu8NxR3_8BA0GVmZBjZVcrf-SP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e3:81:f4:f2:28:ca:ec:45:ad:51:2b:8d:3c:87:16:fe:ab:
5a:af:8e:c3:c5:57:1c:0f:6a:82:c3:e6:4d:9c:df:b3:6f:8a:
44:43:1c:f6:ef:d2:c9:35:29:ae:f8:df:7a:45:35:d0:d9:1e:
9f:63:af:5b:da:64:46:18:e1:0e:a7:26:14:1b:78:da:ff:b9:
f4:47:f0:80:78:94:a2:27:e9:16:0e:6f:7c:fe:ab:0e:8c:13:
e5:b0:62:24:1f:2d:31:90:e3:7b:ab:81:4d:29:da:10:1f:d1:
1e:5d:43:33:60:32:5a:a2:b1:49:1e:5a:20:ef:4a:d6:c0:75:
c8:07:fc:b6:b2:7f:8c:6f:0c:d3:6e:ae:7d:21:fb:9a:0d:4b:
58:ef:ed:31:80:8e:15:ab:e9:12:ba:ff:65:71:c5:1b:8b:c8:
b4:82:aa:1b:cb:f7:ce:18:d3:e4:19:24:0b:6a:79:bb:71:a3:
dd:52:b1:7c:ee:7d:b1:2e:8b:d5:83:e6:ef:1e:51:e5:3d:2b:
65:14:ec:00:9d:21:53:4e:e7:c2:77:71:04:79:2e:f5:36:15:
c5:2b:0d:bd:70:e8:3f:c3:55:64:b0:2c:7f:42:1b:d2:49:14:
6a:52:d3:6d:94:d1:50:d8:5b:96:79:df:e9:75:80:24:2e:10:
3c:0a:d0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:17 2025 by rpki-client