Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
File: 8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft (raw, json)
Hash identifier: U0/CLWPjg5R9g9exUSk/IS5JJk1AcpyMXJv5uac3+ao=
Subject key identifier: 6A:AA:25:A3:63:F7:6F:EF:AC:3F:36:11:19:67:A1:0C:24:56:51:85
Authority key identifier: F0:15:0B:3A:94:19:62:7F:DB:CD:B6:58:0E:87:8A:1C:9F:A0:CC:58
Certificate issuer: /CN=f0150b3a9419627fdbcdb6580e878a1c9fa0cc58
Certificate serial: 0196BBFFD70BE343A8CD85B95B9F3F187185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
Manifest number: 0C41
Signing time: Sat 10 May 2025 21:00:28 +0000
Manifest this update: Sat 10 May 2025 21:00:28 +0000
Manifest next update: Sun 11 May 2025 21:00:28 +0000
Files and hashes: 1: 8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl (hash: kjfbYE2xJXAQ1ZS/YilEfQhwUnXSWCvo1KHPQmquQao=)
2: otWydKJIblYoFDAZjlf3bz3XaMM.roa (hash: xwlrdUyrXAa6g8e84xQqVsN9ku3EVyiSX1A/Nu5VNrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:ff:d7:0b:e3:43:a8:cd:85:b9:5b:9f:3f:18:71:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0150b3a9419627fdbcdb6580e878a1c9fa0cc58
Validity
Not Before: May 10 21:00:28 2025 GMT
Not After : May 11 21:00:28 2025 GMT
Subject: CN=6aaa25a363f76fefac3f36111967a10c24565185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cf:3e:ba:fa:e7:c2:fc:b0:92:9f:50:a8:ec:
6c:4c:f3:e3:44:d8:1c:bf:59:c8:12:f4:d8:10:df:
5c:09:22:14:8a:37:82:8e:2a:3f:1b:b3:56:f9:6a:
95:1a:a0:81:1f:a7:6e:de:49:74:d6:f2:19:3c:1e:
3f:6b:0c:bd:de:3a:4b:c7:59:c2:83:5a:99:ad:e2:
ab:79:13:8d:c4:19:53:d6:e6:60:ed:03:b9:49:26:
13:be:3d:54:1f:5a:91:39:c7:d1:03:72:fe:16:27:
ca:78:a0:26:89:63:46:6c:db:71:4e:04:24:fe:a6:
45:09:69:58:86:18:f9:b2:b9:93:47:8b:43:d9:b6:
18:50:56:fd:4c:ea:56:ff:5c:d0:1e:0d:cb:78:06:
49:b6:63:06:b8:01:ba:3f:35:fd:4c:d5:6f:04:ee:
25:5c:a2:81:9e:62:ff:26:71:65:a8:fa:90:d3:28:
e3:e3:83:d0:a4:ed:d1:36:6f:49:f2:0f:4e:99:ff:
99:5a:e2:79:ed:d7:19:39:b8:93:c9:06:83:af:0a:
34:9e:14:29:e8:da:6e:fa:62:f3:9d:93:29:d5:c7:
82:b8:c6:25:1f:37:cd:68:9b:14:6d:64:e8:56:1e:
3c:3d:90:05:53:19:55:5f:29:ff:87:34:68:80:d8:
6f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AA:25:A3:63:F7:6F:EF:AC:3F:36:11:19:67:A1:0C:24:56:51:85
X509v3 Authority Key Identifier:
keyid:F0:15:0B:3A:94:19:62:7F:DB:CD:B6:58:0E:87:8A:1C:9F:A0:CC:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:3d:04:ee:3c:2d:46:31:03:77:ec:5a:19:b3:9d:ed:61:12:
11:0a:b2:19:49:74:e6:a9:65:ee:46:5f:12:6b:c2:a8:5a:1a:
a5:6d:64:0c:85:79:34:82:8f:b3:3c:73:53:89:6e:6c:b5:74:
1c:c2:b0:62:85:cd:00:33:9f:21:54:46:2d:2e:b2:92:b4:dd:
16:f1:34:66:34:c2:c5:92:33:ce:ed:6f:f3:d1:1b:ac:50:9e:
08:68:9b:f5:19:e4:22:13:f0:b7:41:84:ae:6a:9e:d5:d4:7a:
d3:06:79:2f:17:3b:19:fa:e1:b3:6c:b1:93:9b:95:d9:33:9b:
22:d0:9b:80:d1:66:35:e3:be:d6:3a:77:68:2b:50:10:b8:7a:
c3:af:50:68:b0:a7:8e:4d:4b:a3:a6:e5:b0:6d:3d:ef:7b:a4:
69:47:b7:e7:7c:88:91:4f:7e:7c:ed:f7:48:13:87:9d:df:ef:
cd:d5:f1:fb:47:35:cc:3a:ab:ba:6d:09:af:a7:de:38:3f:eb:
a7:27:ae:e8:75:33:02:78:6c:a9:e9:4d:93:ff:6f:16:68:62:
65:f8:15:3e:38:32:12:d8:b7:bb:b3:3a:17:c5:cf:3b:4c:1d:
80:27:0d:db:91:f0:f2:5d:90:36:c4:01:bc:b4:74:b9:21:5e:
e5:b6:fc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:21:58 2025 by rpki-client