Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft
File: Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft (raw, json)
Hash identifier: fyySCS3GkhFKfCG4LUJokJA60KyeN57mu1uSecUksCc=
Subject key identifier: A0:BF:17:FA:97:7E:26:B3:34:17:43:43:8A:CD:EE:50:A9:20:DA:DC
Authority key identifier: 06:ED:FD:28:35:0F:73:D3:98:55:C4:75:A1:51:6A:E0:B7:79:1A:0F
Certificate issuer: /CN=06edfd28350f73d39855c475a1516ae0b7791a0f
Certificate serial: 019655379D2C59935D8E9314D97D7C4C32A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft
Manifest number: 1501
Signing time: Sun 20 Apr 2025 22:00:29 +0000
Manifest this update: Sun 20 Apr 2025 22:00:29 +0000
Manifest next update: Mon 21 Apr 2025 22:00:29 +0000
Files and hashes: 1: Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl (hash: 8/uB3eQJUNDFa5DUzbGiit3CkL/srD0BtJjmudm1g4Q=)
2: ommcgtarI65YI1kcqlSBP2uGJm0.roa (hash: 4y+wKlBvRSXHODdQDqeioxxZ7eEyNb3DpNEaFBajPZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:9d:2c:59:93:5d:8e:93:14:d9:7d:7c:4c:32:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06edfd28350f73d39855c475a1516ae0b7791a0f
Validity
Not Before: Apr 20 22:00:29 2025 GMT
Not After : Apr 21 22:00:29 2025 GMT
Subject: CN=a0bf17fa977e26b3341743438acdee50a920dadc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:54:5a:59:7c:ad:e4:3f:86:0f:55:93:a5:76:
f1:2c:7c:95:bd:73:6a:05:71:f9:22:97:40:4a:02:
cf:21:06:60:8b:ab:ee:33:35:4f:9d:56:da:36:4c:
c2:e1:bb:bd:01:38:82:e5:7c:8a:28:58:6e:d9:ee:
08:49:4f:4a:1e:a8:b8:c1:48:c7:b4:ae:74:51:4f:
0e:95:fa:13:2b:bf:5d:21:1a:e9:83:6d:f7:de:cd:
60:c3:52:94:89:32:3b:f4:4d:e0:d1:87:75:91:b3:
aa:c9:23:f1:d5:fb:a7:18:19:45:d8:c5:89:b8:db:
fb:df:9e:96:5c:9e:da:cd:80:5f:68:5c:56:f9:8b:
5c:57:78:a6:08:1c:d8:dd:ee:21:91:f1:b1:fc:c4:
1f:cb:7c:bb:54:0d:0f:0a:39:5c:a3:3d:e8:9a:fa:
ed:f3:06:a2:ca:ae:da:f6:d8:f6:da:9b:7f:12:79:
1f:a6:89:7f:b3:75:ee:6c:01:05:d7:88:ea:a9:35:
62:11:b0:67:43:ae:4e:37:26:c3:25:00:85:a7:d1:
45:f0:30:bd:b2:0a:5c:6f:7d:8a:9e:83:47:c4:33:
87:be:86:88:6b:a9:85:3e:a3:fa:c4:85:84:5d:77:
f5:33:6c:30:1b:e4:ae:24:13:8c:57:c1:f1:52:42:
c1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:BF:17:FA:97:7E:26:B3:34:17:43:43:8A:CD:EE:50:A9:20:DA:DC
X509v3 Authority Key Identifier:
keyid:06:ED:FD:28:35:0F:73:D3:98:55:C4:75:A1:51:6A:E0:B7:79:1A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:5d:8a:84:c4:12:68:0d:8f:51:83:de:2d:0f:43:85:5b:fb:
bf:99:b0:79:91:53:6d:64:05:20:db:4a:95:7b:b3:c1:b7:97:
be:70:85:22:e7:6b:97:c5:af:1a:54:94:66:9c:c6:a3:a0:c7:
d7:42:cd:96:f2:4a:e8:76:ec:6c:87:bf:cc:f1:5f:8b:15:ce:
b3:62:e8:9a:6c:ac:85:b9:76:fe:b8:6e:f8:4d:77:c0:1a:37:
2e:09:2c:69:96:d4:ef:b8:bf:2f:14:30:55:e5:15:6a:64:57:
c6:77:04:09:89:c7:4a:e4:87:8c:6c:c5:4b:3c:c5:7a:bd:7d:
5b:e8:a5:22:ff:d2:6e:eb:14:5f:96:60:16:a2:f5:11:c0:46:
85:d9:8d:44:cc:a4:56:ff:82:86:e5:3d:d8:b8:3b:c6:f9:63:
2b:70:81:27:cd:45:c8:08:a9:70:eb:06:6b:ae:8e:8d:42:f5:
ba:d7:a8:59:d0:4b:30:b5:c9:c3:6d:8d:a4:bb:f8:85:1b:f0:
f1:07:39:97:2a:9e:3c:50:4d:9b:65:e3:1c:b2:fc:10:e8:14:
ab:63:6d:f6:77:cd:0c:f7:97:bd:79:56:48:bd:2f:49:5f:37:
63:c1:e6:14:7d:6b:7a:98:60:e8:50:97:be:d2:6e:c0:0a:e3:
04:92:38:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:14:33 2025 by rpki-client