Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft
File: 0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft (raw, json)
Hash identifier: 1DBllMyjFqSGbLEd6HORwYcLLf9t8AhokjpO1Myysmg=
Subject key identifier: 3C:88:33:FB:59:BB:22:D0:A7:51:EB:31:74:94:93:52:44:12:89:C9
Authority key identifier: D1:B7:AC:BB:E6:54:27:C3:E3:61:15:4E:FC:3E:9B:38:AC:CD:C9:0C
Certificate issuer: /CN=d1b7acbbe65427c3e361154efc3e9b38accdc90c
Certificate serial: 0197B6D7571A328FBE4AD08C2FEEA7C7BC1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0besu-ZUJ8PjYRVO_D6bOKzNyQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft
Manifest number: 135E
Signing time: Sat 28 Jun 2025 14:00:54 +0000
Manifest this update: Sat 28 Jun 2025 14:00:54 +0000
Manifest next update: Sun 29 Jun 2025 14:00:54 +0000
Files and hashes: 1: 0besu-ZUJ8PjYRVO_D6bOKzNyQw.crl (hash: YK5v8MFyV3x+DZ1qwmz8zoY6+lJ6huJZwBZdNXFN8ZE=)
2: aslvAzWrkieZYpSVHXy9ukXCbnc.roa (hash: yIgr60ZsmvtMcpizBEZgSYhdXH9PzjNeiOmyJWJcUDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0besu-ZUJ8PjYRVO_D6bOKzNyQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:57:1a:32:8f:be:4a:d0:8c:2f:ee:a7:c7:bc:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1b7acbbe65427c3e361154efc3e9b38accdc90c
Validity
Not Before: Jun 28 14:00:54 2025 GMT
Not After : Jun 29 14:00:54 2025 GMT
Subject: CN=3c8833fb59bb22d0a751eb3174949352441289c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6c:89:86:24:5b:0d:3a:80:06:a7:fe:85:87:
5b:92:01:2e:5b:23:b4:48:51:cc:be:a3:28:ae:32:
71:0c:87:47:fe:8f:e9:54:f1:37:6b:ca:b3:a7:63:
3b:3c:10:78:c7:fc:b1:25:be:9b:9f:79:16:b0:0d:
88:0c:61:30:99:43:26:d7:1d:60:06:c1:4d:da:96:
37:57:b9:73:a7:25:ab:33:5f:56:b2:27:8e:ce:f3:
4e:7b:54:eb:fa:12:db:e3:9d:1d:a4:28:2f:f2:64:
ed:f7:8a:f4:ec:73:4f:c4:b5:36:98:66:a1:30:dd:
f5:23:70:b5:c6:b4:b3:12:ed:b3:14:03:31:9f:95:
bd:ab:82:e4:95:42:1f:51:ab:df:a2:34:6a:fa:bd:
23:f7:4c:f8:25:f3:70:ae:70:52:b6:98:c2:28:75:
2a:5f:55:d7:1f:c2:9e:56:8b:45:26:2b:9d:1e:40:
b8:65:9e:56:a7:78:1b:02:40:e3:e3:7b:2e:8f:ce:
d4:f2:1a:c7:ee:b2:91:ce:1e:83:7d:46:46:88:16:
fd:d0:c9:5c:95:f1:fe:77:78:1f:e9:16:86:55:40:
5b:f8:c7:42:8e:ba:d6:f9:9b:d0:d6:81:32:0e:0f:
d8:0a:76:ca:e6:16:0b:0b:b0:11:01:c8:c8:c5:5a:
26:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:88:33:FB:59:BB:22:D0:A7:51:EB:31:74:94:93:52:44:12:89:C9
X509v3 Authority Key Identifier:
keyid:D1:B7:AC:BB:E6:54:27:C3:E3:61:15:4E:FC:3E:9B:38:AC:CD:C9:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0besu-ZUJ8PjYRVO_D6bOKzNyQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:6f:2a:dc:1d:09:20:25:71:2f:29:79:52:13:e8:6f:f7:43:
a9:9e:c6:8d:45:a6:9c:58:01:88:72:a0:89:07:c2:77:b1:77:
f1:18:13:9c:39:a2:d6:d1:6b:9d:16:e3:35:62:2f:38:92:b5:
22:04:04:74:19:a9:07:9a:8d:af:ea:18:eb:04:e2:c2:26:51:
83:50:01:1b:2e:70:65:35:fd:9f:b8:57:31:c5:82:c9:1b:90:
df:73:42:7f:57:b8:fe:5c:f9:7c:7a:83:81:1b:69:9f:99:42:
16:2e:a0:eb:4a:17:2a:0f:ba:2b:0d:26:7f:4c:16:a8:65:1d:
5a:e4:f8:fb:f9:23:5d:9e:17:60:04:0e:92:c1:f6:14:6d:53:
fa:ea:55:28:94:3f:84:2f:26:16:95:e2:da:7e:5e:b9:5d:e0:
6a:d5:5e:57:70:24:51:5e:42:be:04:ae:62:4c:4d:7f:af:f6:
35:48:d4:95:17:e2:cf:f6:f6:4d:e0:c2:6e:38:84:3e:41:8a:
c7:af:bc:ab:76:e1:38:fd:ca:1f:90:22:9d:5a:c7:69:1a:93:
46:88:7d:97:cd:7d:ed:5d:33:a4:b6:80:93:7e:f7:de:ac:6d:
e7:32:5c:77:9c:93:32:7b:02:a9:4d:a1:77:80:e4:72:1a:a0:
ae:91:15:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:31:05 2025 by rpki-client