Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.mft
File: BuLSfTDs_0J3HEq5d6gq6lina04.mft (raw, json)
Hash identifier: K1wwui+LicSynPb7RPYy1BfoLYgDjlzomopXO+2+IHc=
Subject key identifier: A2:97:D2:E2:17:C6:86:09:4B:F6:EB:E3:D9:1E:A8:CF:BE:1E:F8:83
Authority key identifier: 06:E2:D2:7D:30:EC:FF:42:77:1C:4A:B9:77:A8:2A:EA:58:A7:6B:4E
Certificate issuer: /CN=06e2d27d30ecff42771c4ab977a82aea58a76b4e
Certificate serial: 01965B70C1A41479DAEAF551491174E00E84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuLSfTDs_0J3HEq5d6gq6lina04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.mft
Manifest number: 02D2
Signing time: Tue 22 Apr 2025 03:00:38 +0000
Manifest this update: Tue 22 Apr 2025 03:00:38 +0000
Manifest next update: Wed 23 Apr 2025 03:00:38 +0000
Files and hashes: 1: BuLSfTDs_0J3HEq5d6gq6lina04.crl (hash: 4ndUNsQPGdjljcjXvrOas/TKdWAMBxXF1pWeibqN+04=)
2: F9NENsgLQplgyDxaKboJGp-ngV4.roa (hash: aqyInFH9uBhCwBTndxpchZMGLxp6pudfSp9X2MnmgCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.mft
rsync://rpki.ripe.net/repository/DEFAULT/BuLSfTDs_0J3HEq5d6gq6lina04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:70:c1:a4:14:79:da:ea:f5:51:49:11:74:e0:0e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06e2d27d30ecff42771c4ab977a82aea58a76b4e
Validity
Not Before: Apr 22 03:00:38 2025 GMT
Not After : Apr 23 03:00:38 2025 GMT
Subject: CN=a297d2e217c686094bf6ebe3d91ea8cfbe1ef883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b8:4d:3e:de:91:3d:69:d4:56:69:b0:d0:26:
a4:19:80:26:f1:ee:fc:a8:5e:f6:89:ba:01:d4:59:
dc:77:74:7a:2b:81:88:60:b9:b2:66:2b:4c:02:65:
c1:8c:6f:65:a8:59:9a:f7:8b:0c:43:8a:5c:19:00:
bb:04:3c:5a:64:c8:9e:9d:a2:34:a5:bc:91:e8:5a:
a7:5e:a1:05:0d:4b:3a:e1:54:40:70:a9:79:08:0b:
da:61:57:99:56:ca:48:d6:10:8f:57:64:05:1a:62:
90:bc:dd:bb:f5:a9:0d:5c:5d:1c:c9:74:40:95:94:
27:a4:66:76:aa:f4:76:53:13:6b:71:c8:ff:9b:a9:
70:2d:ee:8f:59:5e:4b:50:12:6d:2a:26:d0:a7:d1:
96:e0:a9:ba:d9:f7:37:22:59:f7:af:2d:9e:1d:54:
9f:4b:41:97:5d:95:ed:c0:9f:3a:29:ec:d1:79:1c:
8e:b2:b9:08:8c:2b:a2:11:cd:f9:95:56:d9:0b:88:
4d:71:2b:fb:02:3a:df:70:2f:ea:65:f5:03:25:4f:
d3:0b:19:4b:ce:ac:46:6d:28:ce:3a:6a:ea:fa:92:
97:76:18:c4:5c:68:d3:76:29:f9:cd:77:6d:d7:87:
c6:81:68:a3:5a:54:c6:22:12:14:81:d6:2f:3f:db:
e0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:97:D2:E2:17:C6:86:09:4B:F6:EB:E3:D9:1E:A8:CF:BE:1E:F8:83
X509v3 Authority Key Identifier:
keyid:06:E2:D2:7D:30:EC:FF:42:77:1C:4A:B9:77:A8:2A:EA:58:A7:6B:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuLSfTDs_0J3HEq5d6gq6lina04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:74:75:0b:c1:f8:57:7a:f8:35:74:0e:37:49:04:58:25:db:
77:67:b8:6a:3a:e9:43:7c:c4:8e:24:ff:d6:15:08:c7:70:7f:
ff:37:f7:7e:20:60:ea:15:a9:26:af:3b:87:68:53:d4:e5:1c:
2e:95:68:75:47:07:f2:0d:eb:28:fe:5b:95:35:ff:da:c3:63:
7e:dc:73:8e:07:dd:80:75:33:2e:3b:69:3b:14:11:4e:a7:38:
80:a1:f5:75:20:2d:26:6d:8a:a6:84:db:e9:13:50:fe:6f:c1:
c9:2c:d5:00:04:1e:c7:90:48:ff:c3:af:6a:da:fc:98:8b:23:
dd:0f:cd:81:88:58:44:ea:2e:6d:5d:b3:a1:38:c2:92:b5:b4:
e5:69:0b:82:fa:41:0c:0e:4d:b6:52:9f:1a:61:84:e7:0a:c3:
38:2d:fa:ba:6d:9f:e9:0b:bf:c6:b3:6c:19:4d:8d:fb:84:7a:
ca:3b:1e:33:24:46:37:54:6d:2d:6c:c3:e2:9d:d9:8a:28:bc:
75:d4:1d:50:7b:6d:42:83:04:c4:8a:b7:e9:67:99:99:11:67:
0a:1d:51:aa:17:94:cc:85:cf:39:55:76:cf:7b:0f:06:7f:3d:
9f:d8:1d:b0:bc:5b:77:d7:8b:29:14:cd:00:46:19:e9:01:2d:
c2:47:b5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:44:45 2025 by rpki-client