Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
File: BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft (raw, json)
Hash identifier: +7iQBtS0qg6ww/0ZOizj9kwdljAwSkwiXX1zy1/Nnec=
Subject key identifier: 63:EE:73:8C:EA:80:64:6E:0D:B5:47:3C:C6:1A:C5:1B:36:28:06:80
Authority key identifier: 05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
Certificate issuer: /CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Certificate serial: 0196127D438B3C6A67054B996F79DDEDAC55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
Manifest number: 0677
Signing time: Mon 07 Apr 2025 23:02:01 +0000
Manifest this update: Mon 07 Apr 2025 23:02:01 +0000
Manifest next update: Tue 08 Apr 2025 23:02:01 +0000
Files and hashes: 1: BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl (hash: qiu8u3UvZR/TmKBC+xu+DPo87sNpKJlQIYW9i9HdCmY=)
2: FU5ckiwSRF9khD7WupXiavmIPzs.roa (hash: 84Hh9Rd/Utxajq2oO+DHR2ECiOMAuLuEnM4faDd74uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:7d:43:8b:3c:6a:67:05:4b:99:6f:79:dd:ed:ac:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Validity
Not Before: Apr 7 23:02:01 2025 GMT
Not After : Apr 8 23:02:01 2025 GMT
Subject: CN=63ee738cea80646e0db5473cc61ac51b36280680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:65:b2:9d:2f:db:eb:c8:c6:97:ef:ef:28:66:
21:c5:7b:bf:d1:a4:9c:49:cc:71:08:26:4f:47:05:
0c:b3:de:31:6e:9d:dc:40:b6:8d:8c:2d:30:f7:4a:
dd:03:83:7c:ec:d1:5b:b3:20:22:54:23:9e:80:c8:
bb:a9:44:27:a3:54:a2:47:28:1e:06:2b:59:17:73:
f9:f0:6a:04:7f:11:9f:43:93:a6:13:fc:fd:c3:73:
ab:0e:31:49:74:23:e0:fd:c0:ec:1e:52:35:03:ca:
cf:4b:58:bf:d2:ba:fb:87:2a:c2:87:a5:6b:f2:0a:
3a:c4:f7:21:d0:f9:1e:92:9a:57:33:42:09:f0:0f:
6d:79:f4:f0:90:7c:8c:e8:84:3d:8a:05:c3:e3:73:
ef:26:2e:1a:41:74:91:e9:ae:de:37:1d:53:c2:94:
93:d5:63:b1:00:5a:1d:d6:88:c2:12:1e:3c:0c:47:
35:07:5e:14:55:bd:9b:3a:cf:0b:0c:0d:13:ac:3b:
d3:35:4f:c2:a4:8c:99:77:a9:06:f8:6e:00:c4:77:
5f:dc:67:a3:e9:d7:76:f5:da:b1:8b:10:8a:77:69:
9a:a1:8c:59:9e:c2:27:1c:25:3c:20:ca:b4:cd:97:
2c:bd:d5:48:9f:38:79:06:31:c4:bc:7c:6f:c6:ec:
85:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:EE:73:8C:EA:80:64:6E:0D:B5:47:3C:C6:1A:C5:1B:36:28:06:80
X509v3 Authority Key Identifier:
keyid:05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:74:bb:dc:40:48:f7:3b:cf:46:e9:7c:98:09:cc:56:cc:0f:
74:ba:12:9d:d9:d1:71:a8:36:d5:72:bf:42:5c:45:fe:ad:da:
a7:17:a2:ea:81:05:5c:cc:4c:21:97:65:fc:80:8d:47:e9:31:
d5:22:45:51:e2:42:b6:b0:01:4e:35:b3:4f:76:d5:4b:a1:29:
0b:bd:32:e0:53:b4:d9:90:0f:e5:e9:ce:08:25:32:75:be:36:
8c:da:12:f1:19:5f:50:34:4d:49:5c:c2:64:01:a6:62:e8:d6:
f4:d6:b4:87:a8:6f:49:05:03:69:f6:74:48:a0:72:76:4f:a4:
fc:00:db:ca:3d:12:54:9d:bf:ba:45:b5:c4:bb:3c:ba:8c:e5:
f0:2b:b5:70:34:8b:b3:c9:35:d3:5f:d8:c9:db:58:5a:d6:6b:
c9:c0:43:2b:d3:30:44:5b:61:9b:af:95:b4:7e:60:8c:ea:8c:
ef:5b:3c:48:7c:6f:41:57:a2:d1:11:ca:ba:2d:58:f7:cf:6a:
76:86:14:47:ee:fd:53:39:bf:bf:f9:16:31:de:e7:97:90:3a:
f1:2f:09:cd:c1:5b:5d:b5:30:9f:50:54:9b:0a:8f:e0:c5:54:
45:a2:8f:a0:ba:c5:1d:ab:e5:be:a9:9f:e8:62:5b:fd:c1:f0:
82:68:1e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:16:24 2025 by rpki-client