Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
File: BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft (raw, json)
Hash identifier: fiYpviVo1eY64vwCphMH0j7daxdlFmZ/LkKeW6+V1+E=
Subject key identifier: 77:84:3B:2B:BD:65:9D:98:E2:D1:56:BC:4D:9C:BF:18:5E:41:A9:DE
Authority key identifier: 05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
Certificate issuer: /CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Certificate serial: 01969F75ABCECCA85E956CEC8079BE2CE883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
Manifest number: 06C0
Signing time: Mon 05 May 2025 08:00:10 +0000
Manifest this update: Mon 05 May 2025 08:00:10 +0000
Manifest next update: Tue 06 May 2025 08:00:10 +0000
Files and hashes: 1: BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl (hash: DVAfYvRglFng0vMWAiI5O4AE51paUZFBU0Be74uDkyY=)
2: FU5ckiwSRF9khD7WupXiavmIPzs.roa (hash: 84Hh9Rd/Utxajq2oO+DHR2ECiOMAuLuEnM4faDd74uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:75:ab:ce:cc:a8:5e:95:6c:ec:80:79:be:2c:e8:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Validity
Not Before: May 5 08:00:10 2025 GMT
Not After : May 6 08:00:10 2025 GMT
Subject: CN=77843b2bbd659d98e2d156bc4d9cbf185e41a9de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:5e:87:11:40:23:72:62:02:14:9f:73:e5:58:
41:95:15:1e:f4:9e:25:d0:7f:b2:23:c3:2f:7b:98:
0b:17:11:79:e0:33:8e:75:e8:6d:ec:02:2b:b4:8a:
1e:8e:78:f1:20:a5:2f:5a:fd:44:7b:30:49:5d:60:
1b:b3:a5:1e:0d:b0:42:98:2e:4f:0a:61:61:9b:0f:
35:3c:03:2f:dd:72:9b:54:db:c0:64:06:24:7b:8b:
57:bc:65:30:7b:5e:19:69:9b:38:d6:4b:7d:a9:18:
e1:02:45:2b:ff:6f:9b:cf:48:57:44:06:a2:42:e0:
c0:af:dd:2c:d1:92:c4:93:e3:95:e4:c7:b2:e8:01:
95:35:b6:1e:38:28:6c:ca:b5:96:5a:e5:de:ab:75:
2e:b6:40:8b:9a:4c:13:55:45:69:ba:e6:e1:a5:f1:
d5:c1:ba:94:28:c3:7d:1b:c0:3e:57:6b:7e:62:08:
70:0f:76:c7:50:6c:c5:b3:d4:14:eb:60:1e:af:0c:
53:86:5d:9d:c2:da:b5:db:2f:4f:a9:94:ab:f8:ff:
99:e1:26:67:98:de:46:8f:38:7b:ef:be:18:b1:4c:
0a:d3:9e:c0:fb:bc:86:5b:ea:e9:c9:aa:96:01:a0:
d1:04:0c:76:27:ce:03:10:29:15:c0:bd:68:4c:86:
db:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:84:3B:2B:BD:65:9D:98:E2:D1:56:BC:4D:9C:BF:18:5E:41:A9:DE
X509v3 Authority Key Identifier:
keyid:05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:2c:22:21:f7:1d:c1:29:c2:d6:2a:a0:14:83:4b:79:61:c1:
e2:e7:dd:3f:73:31:02:d2:b8:54:7c:20:ed:ea:c7:85:ef:28:
5b:81:72:2a:0b:f0:c6:a5:a5:a4:c7:08:d8:33:c7:4b:12:7a:
d9:75:27:1f:73:de:29:3f:f5:e9:90:64:ef:3a:0b:f0:0e:f8:
3a:82:d7:a5:f8:70:a7:39:6d:a3:8e:84:8b:6b:8c:39:2b:9c:
00:18:1e:41:aa:8f:a2:f9:51:bb:d9:05:dc:27:a8:8d:ee:b3:
d6:e4:a5:b8:9c:21:fd:ad:7d:04:c0:03:e4:4f:a6:ba:b4:2f:
ff:e9:e2:f2:f1:7b:96:8e:22:c1:32:f0:f5:27:77:61:50:af:
61:39:03:02:52:db:88:52:0d:e9:7d:d4:7f:5e:a3:2d:79:25:
29:80:4f:74:96:10:b9:88:96:ff:f9:f0:fe:c0:8d:51:16:7c:
9c:96:df:b7:a7:e6:ef:ab:74:22:9f:14:9f:b8:06:2b:04:56:
52:66:3c:75:35:e4:e8:f7:2e:6b:64:b1:e9:c1:9f:bc:76:be:
14:5b:14:38:62:f8:6c:27:7b:30:66:d8:0b:6a:7a:9f:f2:c2:
cd:2e:6e:1e:8f:d0:1f:e7:f3:99:fb:d1:2b:e8:d6:7a:78:53:
97:d5:0c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:59:13 2025 by rpki-client