Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft
File: 0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft (raw, json)
Hash identifier: ZXRIpB9k8mXjUYc1vhuee+UfBmrm/JyURNFEW6Zuq6M=
Subject key identifier: 93:5B:C7:02:81:19:89:2C:BC:7D:ED:9C:8A:54:4B:3F:E8:02:99:76
Authority key identifier: D1:B7:AC:BB:E6:54:27:C3:E3:61:15:4E:FC:3E:9B:38:AC:CD:C9:0C
Certificate issuer: /CN=d1b7acbbe65427c3e361154efc3e9b38accdc90c
Certificate serial: 0196C570E2EC957D654D0E2D0927E877992F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0besu-ZUJ8PjYRVO_D6bOKzNyQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft
Manifest number: 12E1
Signing time: Mon 12 May 2025 17:00:31 +0000
Manifest this update: Mon 12 May 2025 17:00:31 +0000
Manifest next update: Tue 13 May 2025 17:00:31 +0000
Files and hashes: 1: 0besu-ZUJ8PjYRVO_D6bOKzNyQw.crl (hash: mkAISv1GuSGhI92I5nUWyR296b9Th5knPFQoR6x7sdk=)
2: aslvAzWrkieZYpSVHXy9ukXCbnc.roa (hash: yIgr60ZsmvtMcpizBEZgSYhdXH9PzjNeiOmyJWJcUDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0besu-ZUJ8PjYRVO_D6bOKzNyQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:70:e2:ec:95:7d:65:4d:0e:2d:09:27:e8:77:99:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1b7acbbe65427c3e361154efc3e9b38accdc90c
Validity
Not Before: May 12 17:00:31 2025 GMT
Not After : May 13 17:00:31 2025 GMT
Subject: CN=935bc7028119892cbc7ded9c8a544b3fe8029976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:32:56:bd:97:f7:31:8e:42:87:78:be:1b:3e:
85:5f:63:a0:c5:5c:25:53:50:31:41:c7:a0:03:dd:
e7:6e:44:14:a4:46:bb:84:28:f9:0a:0c:49:fb:f8:
0e:50:8d:70:5c:6d:c5:d6:84:0b:8d:f1:79:b7:62:
30:76:d8:51:59:d3:82:4c:2b:44:6f:75:4a:f0:8b:
2e:6a:80:ee:4f:b3:76:b7:44:5a:98:7c:b6:13:27:
a5:da:97:2b:46:dd:f6:0a:40:51:d6:db:87:71:97:
e1:9b:8f:cd:78:74:b4:85:90:87:e5:1a:2f:28:ac:
be:5e:66:f2:9a:2e:2d:cb:2c:5e:e9:b7:34:5a:1a:
7b:6b:57:4b:60:67:cc:15:b6:20:89:f1:92:ad:48:
6f:fe:ad:64:50:06:1e:a2:8c:13:98:0e:e2:a1:c2:
67:4b:c4:45:35:ea:6b:29:2a:82:d1:3d:2e:05:37:
d0:66:6d:0f:a2:a5:fe:8a:5f:32:9e:25:7c:3d:c5:
d8:a4:2d:64:75:9f:0b:c2:11:d4:a7:26:7f:54:c3:
ae:2e:d3:b4:05:1c:74:ca:0a:f2:ed:0b:16:27:ac:
42:d5:aa:c2:aa:06:08:39:05:49:c4:89:4d:08:0d:
01:bd:10:04:76:da:76:4a:ee:ee:68:68:fc:5a:19:
e6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5B:C7:02:81:19:89:2C:BC:7D:ED:9C:8A:54:4B:3F:E8:02:99:76
X509v3 Authority Key Identifier:
keyid:D1:B7:AC:BB:E6:54:27:C3:E3:61:15:4E:FC:3E:9B:38:AC:CD:C9:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0besu-ZUJ8PjYRVO_D6bOKzNyQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:6c:20:c1:eb:ce:60:f3:cc:b9:f8:b0:6e:e4:31:c8:4a:56:
00:18:1e:9a:e7:5f:47:2c:36:26:74:1c:64:a6:34:fd:a6:5d:
20:a6:18:8a:bb:b1:3d:ba:10:35:58:56:eb:b6:05:60:94:7b:
b8:b0:a8:64:e1:41:fa:55:06:9f:17:39:78:7d:ca:a4:5a:74:
9c:f1:36:76:cf:05:ac:2d:91:d3:1c:85:af:b1:e0:2a:24:8c:
b3:59:15:6b:31:18:d9:49:50:21:b3:2f:a8:14:48:30:a5:0d:
d5:72:c3:ad:52:87:b3:1d:70:12:40:0c:53:57:15:b1:3f:cb:
dc:43:b2:b5:13:2f:1d:e6:a2:39:15:dd:cc:d1:7c:19:7f:f2:
8a:ac:84:bb:f6:3a:08:ea:07:a0:63:e8:cd:da:7a:72:09:f4:
30:9a:27:68:e9:47:42:72:3a:76:47:25:92:0e:da:02:1f:9e:
df:56:85:4f:3c:32:20:f7:c6:a9:40:db:bc:b0:84:a4:c8:cb:
32:ed:1a:6d:f7:06:d8:c8:c7:20:f5:ba:e6:dc:b5:62:8a:e0:
39:c2:d9:90:bf:4d:33:db:9c:42:74:c4:5f:cd:2d:c9:ff:04:
ff:fd:d6:d4:2b:ae:7b:ca:b8:43:c4:ae:c6:1e:2a:9a:5d:98:
9d:f5:ad:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbFcOLslX1lTQ4tCSfod5kvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxYjdhY2JiZTY1NDI3YzNlMzYxMTU0ZWZjM2U5YjM4YWNj
ZGM5MGMwHhcNMjUwNTEyMTcwMDMxWhcNMjUwNTEzMTcwMDMxWjAzMTEwLwYDVQQD
Eyg5MzViYzcwMjgxMTk4OTJjYmM3ZGVkOWM4YTU0NGIzZmU4MDI5OTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TJWvZf3MY5Ch3i+Gz6FX2OgxVwl
U1AxQcegA93nbkQUpEa7hCj5CgxJ+/gOUI1wXG3F1oQLjfF5t2IwdthRWdOCTCtE
b3VK8IsuaoDuT7N2t0RamHy2Eyel2pcrRt32CkBR1tuHcZfhm4/NeHS0hZCH5Rov
KKy+Xmbymi4tyyxe6bc0Whp7a1dLYGfMFbYgifGSrUhv/q1kUAYeoowTmA7iocJn
S8RFNeprKSqC0T0uBTfQZm0PoqX+il8yniV8PcXYpC1kdZ8LwhHUpyZ/VMOuLtO0
BRx0ygry7QsWJ6xC1arCqgYIOQVJxIlNCA0BvRAEdtp2Su7uaGj8WhnmwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJNbxwKBGYksvH3tnIpUSz/oApl2MB8GA1UdIwQY
MBaAFNG3rLvmVCfD42EVTvw+mziszckMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGJlc3UtWlVKOFBqWVJWT19ENmJPS3pOeVF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9lMjU1NDAtNjY4My00NTJhLWExNzMt
MWQ0ZjRmOTZkYWQ0LzEvMGJlc3UtWlVKOFBqWVJWT19ENmJPS3pOeVF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9lMjU1NDAtNjY4My00NTJhLWExNzMtMWQ0ZjRmOTZkYWQ0
LzEvMGJlc3UtWlVKOFBqWVJWT19ENmJPS3pOeVF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnmwgwevO
YPPMufiwbuQxyEpWABgemudfRyw2JnQcZKY0/aZdIKYYiruxPboQNVhW67YFYJR7
uLCoZOFB+lUGnxc5eH3KpFp0nPE2ds8FrC2R0xyFr7HgKiSMs1kVazEY2UlQIbMv
qBRIMKUN1XLDrVKHsx1wEkAMU1cVsT/L3EOytRMvHeaiORXdzNF8GX/yiqyEu/Y6
COoHoGPozdp6cgn0MJonaOlHQnI6dkclkg7aAh+e31aFTzwyIPfGqUDbvLCEpMjL
Mu0abfcG2MjHIPW65ty1YorgOcLZkL9NM9ucQnTEX80tyf8E//3W1Cuue8q4Q8Su
xh4qml2YnfWt4A==
-----END CERTIFICATE-----
Generated at Mon May 12 19:19:45 2025 by rpki-client