Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.mft
File: buKspS4zrI1YnzIhdZLNHmm_cEw.mft (raw, json)
Hash identifier: bmN9XliIfiJ2+kZuoWP/MuuViC7wUgc75QHnNk9wVAc=
Subject key identifier: 1D:CC:AF:6E:46:63:D1:8B:7C:EF:22:4D:CE:B9:70:F2:7C:14:FE:89
Authority key identifier: 6E:E2:AC:A5:2E:33:AC:8D:58:9F:32:21:75:92:CD:1E:69:BF:70:4C
Certificate issuer: /CN=6ee2aca52e33ac8d589f32217592cd1e69bf704c
Certificate serial: 0195816E064B6FCC41AB68C3DE5607FF216A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/buKspS4zrI1YnzIhdZLNHmm_cEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.mft
Manifest number: 148D
Signing time: Mon 10 Mar 2025 19:00:26 +0000
Manifest this update: Mon 10 Mar 2025 19:00:26 +0000
Manifest next update: Tue 11 Mar 2025 19:00:26 +0000
Files and hashes: 1: buKspS4zrI1YnzIhdZLNHmm_cEw.crl (hash: WrG5NnLZ0BU2AqUrWv12L/ShgZa8mjA4Q4anqL70uwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/buKspS4zrI1YnzIhdZLNHmm_cEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Mar 2025 19:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:81:6e:06:4b:6f:cc:41:ab:68:c3:de:56:07:ff:21:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ee2aca52e33ac8d589f32217592cd1e69bf704c
Validity
Not Before: Mar 10 19:00:26 2025 GMT
Not After : Mar 11 19:00:26 2025 GMT
Subject: CN=1dccaf6e4663d18b7cef224dceb970f27c14fe89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:16:4f:17:ac:3b:8f:b7:76:98:43:ca:79:67:
8d:84:fa:d8:7a:fc:e9:8b:43:46:88:db:a8:6c:b9:
60:7c:5b:f4:71:a5:d7:4d:ea:c6:40:74:28:17:30:
60:0e:c0:28:0a:43:c0:66:b4:84:1b:1a:f9:77:94:
49:6f:46:6f:af:16:82:bd:03:44:3e:36:75:61:6e:
87:6c:25:1b:ce:fd:7d:6e:85:f2:51:8f:0d:03:eb:
c3:76:90:1b:89:d0:f2:a8:f5:a5:68:b8:87:65:d5:
73:98:38:e5:2b:6f:58:07:17:b6:1e:05:e5:0b:60:
4a:50:67:f0:45:00:7e:e0:cc:9b:ff:6e:f0:ea:68:
47:49:26:f1:36:76:15:a7:a4:4d:5e:cc:0d:c7:cf:
b9:da:b6:9e:f4:ea:56:81:e3:eb:2e:25:93:a9:3f:
45:12:de:0d:08:d1:3b:a2:be:09:ce:ea:69:d5:38:
9d:66:ba:92:7f:b7:f0:6d:4b:d1:82:a7:46:30:af:
f0:e2:86:50:33:e0:94:bc:0a:38:d4:46:5a:98:4c:
7f:d9:c3:4c:cb:75:ca:7d:a3:6c:27:48:fe:12:61:
7a:2d:c2:f3:46:d5:0c:c5:8c:27:f0:ce:a1:7f:4f:
f8:f5:60:c0:1d:a1:26:d9:29:43:7d:e1:59:99:93:
6d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CC:AF:6E:46:63:D1:8B:7C:EF:22:4D:CE:B9:70:F2:7C:14:FE:89
X509v3 Authority Key Identifier:
keyid:6E:E2:AC:A5:2E:33:AC:8D:58:9F:32:21:75:92:CD:1E:69:BF:70:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/buKspS4zrI1YnzIhdZLNHmm_cEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a6:18:bd:c3:06:85:b7:5f:cd:d8:e2:78:e3:79:f4:16:49:
20:52:33:d3:48:25:b8:75:cd:78:fe:92:dd:eb:b2:1c:88:5c:
23:0a:8d:ed:58:2c:32:b1:1d:b4:2f:4e:73:00:67:1a:82:74:
d3:bc:a4:33:a0:25:45:42:35:df:5f:ef:2c:75:87:17:de:a2:
ef:3e:fe:b1:03:61:df:b0:a1:26:e2:04:68:96:8f:85:bf:12:
05:de:5a:e8:9f:38:60:4f:79:d1:da:35:28:a8:0b:af:9d:24:
54:16:21:b5:6c:d4:58:4b:4f:f4:06:f0:be:ec:a6:77:7c:9c:
42:d4:dc:35:0b:c3:9c:ee:4d:9d:b9:62:a2:64:af:b9:97:e0:
08:9b:7e:9e:e0:aa:a9:2e:64:c6:b3:e6:0f:66:43:fb:26:7f:
68:39:2a:2a:07:da:8c:e0:03:5e:5a:b2:d6:7d:c0:df:96:3c:
f5:ba:da:20:7e:b4:6d:54:1b:87:79:e1:b2:05:09:66:18:23:
ed:89:84:0a:1f:91:a1:dd:31:f0:4f:ad:b1:e5:af:11:59:50:
09:82:d8:06:77:56:ab:ee:9a:c6:fc:7c:7e:fd:c7:74:04:db:
ca:03:e4:af:5e:58:ef:f6:48:b7:01:e3:1b:d9:0f:eb:6c:46:
41:7a:06:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:12:43 2025 by rpki-client