Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.mft
File: BuLSfTDs_0J3HEq5d6gq6lina04.mft (raw, json)
Hash identifier: nVcD2zhRZz0SnrBrZdhKOO/c45bVi285kJI17IILC2M=
Subject key identifier: 8C:63:88:6B:3E:CD:4E:E5:29:EB:6C:1D:13:AA:13:03:D4:8E:B1:13
Authority key identifier: 06:E2:D2:7D:30:EC:FF:42:77:1C:4A:B9:77:A8:2A:EA:58:A7:6B:4E
Certificate issuer: /CN=06e2d27d30ecff42771c4ab977a82aea58a76b4e
Certificate serial: 019748F9F38C5369A15C340C465AC80A1C3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuLSfTDs_0J3HEq5d6gq6lina04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.mft
Manifest number: 034D
Signing time: Sat 07 Jun 2025 06:00:29 +0000
Manifest this update: Sat 07 Jun 2025 06:00:29 +0000
Manifest next update: Sun 08 Jun 2025 06:00:29 +0000
Files and hashes: 1: BuLSfTDs_0J3HEq5d6gq6lina04.crl (hash: jdok77mMMVpe6wUI2m1L+MdnoWqO/eTZy7/syVLRzsI=)
2: F9NENsgLQplgyDxaKboJGp-ngV4.roa (hash: aqyInFH9uBhCwBTndxpchZMGLxp6pudfSp9X2MnmgCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.mft
rsync://rpki.ripe.net/repository/DEFAULT/BuLSfTDs_0J3HEq5d6gq6lina04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:f3:8c:53:69:a1:5c:34:0c:46:5a:c8:0a:1c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06e2d27d30ecff42771c4ab977a82aea58a76b4e
Validity
Not Before: Jun 7 06:00:29 2025 GMT
Not After : Jun 8 06:00:29 2025 GMT
Subject: CN=8c63886b3ecd4ee529eb6c1d13aa1303d48eb113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:27:a5:4c:36:c9:ef:74:9c:8b:0a:70:58:a9:
18:68:7d:c1:9e:c6:72:9a:7d:c0:70:a1:54:71:ab:
23:ff:9e:b4:93:e5:51:ca:c1:67:8a:73:74:b5:6c:
a5:68:5a:2c:19:a5:74:e5:dc:ec:b6:d5:28:ca:73:
f9:3a:c8:ab:10:75:6f:b2:57:88:f5:e2:d5:7b:36:
8b:44:7c:32:9b:72:e0:ea:b3:b7:de:1c:ac:9c:af:
51:ca:19:f9:2f:f0:2f:b3:09:c6:c0:d1:ca:92:47:
02:ea:81:c5:36:07:8e:41:bc:c0:b8:60:63:12:b1:
25:bc:79:46:ee:12:63:79:ed:ca:13:35:3d:5b:b4:
69:db:d7:f2:18:87:5d:ef:7c:93:e9:41:46:15:e4:
a8:e1:42:1a:97:ae:1d:1a:62:9b:b8:bc:ed:d5:3e:
e5:11:e9:a3:f4:c4:b9:33:76:c9:9b:ee:9e:1c:e4:
6c:4a:31:21:d8:5f:63:1d:5b:ac:e1:38:70:fd:23:
92:42:4d:b6:c3:4e:6e:25:7f:dd:16:f9:0d:23:45:
ba:c9:90:19:35:51:01:d1:55:56:47:e0:23:4e:33:
10:f2:e5:96:1c:11:30:17:c8:75:05:13:d3:a7:28:
60:79:2b:04:45:fa:5e:38:4e:33:3c:b1:d2:0c:65:
a8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:63:88:6B:3E:CD:4E:E5:29:EB:6C:1D:13:AA:13:03:D4:8E:B1:13
X509v3 Authority Key Identifier:
keyid:06:E2:D2:7D:30:EC:FF:42:77:1C:4A:B9:77:A8:2A:EA:58:A7:6B:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuLSfTDs_0J3HEq5d6gq6lina04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:9d:fc:f1:f5:89:94:b9:3b:19:3f:76:05:70:f9:82:3a:09:
76:38:d1:93:6e:99:ac:a6:cf:dd:01:3b:60:34:6b:f5:69:a2:
9b:70:5a:c1:f9:1c:f4:94:82:50:40:be:77:f5:2e:a4:78:02:
55:85:ad:fe:d7:33:33:a7:2e:99:2a:f7:56:77:7c:21:90:f1:
c0:e9:c2:f0:b1:da:43:35:c1:cd:ac:7b:a1:8b:a4:1c:2d:34:
30:d8:a1:44:00:f1:32:31:b6:77:65:86:78:7c:3a:5c:2e:88:
40:22:ca:48:b2:0b:a9:2f:c1:da:1b:f1:8f:a9:24:9b:e2:64:
18:56:86:18:ab:81:5b:95:e0:28:a8:73:95:41:3e:4c:72:92:
e2:12:8d:d0:65:3f:d2:b0:06:6a:cf:37:29:27:5f:09:fa:7d:
5b:4b:9f:ef:07:15:2b:13:6c:3c:95:8c:74:a3:01:53:f8:53:
f1:14:0c:6b:00:80:c4:23:2e:f9:d1:2d:43:f7:49:12:56:eb:
20:2a:70:20:6d:ff:6b:84:56:37:3d:c6:ac:0b:c1:c3:48:6a:
f4:a2:6e:aa:b3:8f:2a:7c:d9:c8:72:6c:5b:ea:7d:2b:c1:94:
5b:67:8b:54:1a:6d:38:f5:ce:5e:59:98:d0:0b:6c:63:3a:b8:
37:8f:1b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:05:43 2025 by rpki-client