Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
File: bRULQ4zGj2LcFdNZWTFh95neU68.mft (raw, json)
Hash identifier: n9/aloSm3ssbMuuaflao+XzyJBsno0dAyRaWQNSlzGY=
Subject key identifier: 98:2E:7F:71:5D:7D:57:28:87:5F:A0:BD:93:57:19:B9:F6:38:58:34
Authority key identifier: 6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
Certificate issuer: /CN=6d150b438cc68f62dc15d359593161f799de53af
Certificate serial: 019510FE33F9D6700304BF721110973C482A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
Manifest number: 145A
Signing time: Sun 16 Feb 2025 23:00:49 +0000
Manifest this update: Sun 16 Feb 2025 23:00:49 +0000
Manifest next update: Mon 17 Feb 2025 23:00:49 +0000
Files and hashes: 1: WponuMlWZtiFOUgzphoJZxWN_iw.roa (hash: UIQh/CuyVqeX7HcjhL38mDSrWztLseE4bJUkUTwxbUc=)
2: bRULQ4zGj2LcFdNZWTFh95neU68.crl (hash: iM5s52mRhRQA+ZznnVhjmBY08szldhWW0p1pQfYMpg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fe:33:f9:d6:70:03:04:bf:72:11:10:97:3c:48:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d150b438cc68f62dc15d359593161f799de53af
Validity
Not Before: Feb 16 23:00:49 2025 GMT
Not After : Feb 17 23:00:49 2025 GMT
Subject: CN=982e7f715d7d5728875fa0bd935719b9f6385834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cc:bc:f5:67:2c:20:c1:8f:11:6c:93:60:f3:
bd:dd:0b:59:9f:fe:c3:fd:f0:43:37:af:bf:a2:f3:
b0:2f:60:e2:ff:c6:e0:a6:b3:8c:7b:35:98:76:9b:
ed:85:41:d8:c6:d7:f9:c5:6a:f4:d3:71:fe:d0:95:
57:1c:47:80:32:c0:c6:d4:82:09:ac:8e:55:b3:42:
fa:00:f5:b6:60:41:66:16:14:b1:33:68:7c:ef:ed:
32:c0:5a:c3:ae:7f:72:9b:1b:e8:e2:aa:c0:06:bc:
45:9b:9e:7e:7f:2f:af:e7:05:a3:21:f8:a8:21:ca:
01:59:a1:ab:bb:ba:60:fd:05:2e:cd:38:d2:40:e7:
cf:65:25:31:e3:73:8f:bb:8c:c6:24:0e:fa:01:73:
92:fb:26:89:3b:67:b2:f1:27:73:8d:25:51:a9:07:
8f:0f:06:4d:38:8a:00:71:15:ff:bc:f9:e4:6b:26:
33:bd:f2:26:e5:78:6e:7c:a3:cf:95:71:64:ad:9f:
88:0c:b8:ba:c1:26:7e:51:e0:e2:ff:11:ff:79:61:
f9:a6:8c:9e:ea:35:6f:b0:6a:10:53:56:78:02:6f:
ed:9a:8b:5e:b5:26:20:66:e9:2d:42:2f:3f:fb:dd:
d9:7d:4a:7c:ab:d6:dd:dc:e3:c5:e7:24:41:1b:64:
70:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2E:7F:71:5D:7D:57:28:87:5F:A0:BD:93:57:19:B9:F6:38:58:34
X509v3 Authority Key Identifier:
keyid:6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ef:72:20:56:d9:de:80:89:18:9c:42:2d:80:e2:ad:7a:e1:
e8:25:7c:01:c0:e1:83:b1:e1:f5:fa:a2:c8:0b:4f:a6:0f:bd:
ef:77:3c:af:64:fd:e7:06:7d:36:b4:bd:48:5d:6c:9f:92:cb:
d7:5a:7f:7d:09:7e:e1:00:c1:60:af:eb:d7:ec:e2:01:94:a0:
05:80:95:4b:a3:0b:b9:50:c4:64:6e:6d:ae:6a:9c:84:8c:6e:
53:fe:56:1b:3c:30:7a:8b:95:b5:c2:a4:06:44:2b:9c:57:b3:
3f:30:1c:46:01:e9:8e:ee:1f:fa:a2:b6:d8:0a:a9:0c:8d:66:
dd:6b:84:02:c9:76:af:4b:22:9f:d5:15:56:08:ef:ba:8c:11:
ec:18:5b:2f:d1:4d:12:97:75:c2:22:c8:4d:75:f5:96:8c:e3:
6b:a6:fd:ae:c7:b7:51:2c:8b:29:e2:64:5c:b4:b7:bd:00:ac:
65:f0:c3:ce:f8:57:ba:af:29:7d:90:d2:6c:05:7a:da:7f:52:
a8:c2:f8:73:0f:ce:af:ea:11:47:ab:5b:70:24:25:9c:f9:fb:
a5:95:00:ce:73:5e:80:c7:bd:e1:31:83:75:b0:f8:06:de:e4:
92:9d:88:6d:f8:04:bb:ee:2f:4c:df:2e:84:a0:5f:f4:4c:48:
5c:fe:27:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:09 2025 by rpki-client