Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
File: bRULQ4zGj2LcFdNZWTFh95neU68.mft (raw, json)
Hash identifier: Gdb4dk9yTPRFIIZRb+QezcpaqNZOCnrZ/dZHYDbwC54=
Subject key identifier: CA:D5:F3:81:94:E0:97:D5:00:92:B4:81:C0:46:D1:4D:17:44:57:FC
Authority key identifier: 6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
Certificate issuer: /CN=6d150b438cc68f62dc15d359593161f799de53af
Certificate serial: 0196B36AAC9F07FA009020CA38A1C8E4D7A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
Manifest number: 1534
Signing time: Fri 09 May 2025 05:00:34 +0000
Manifest this update: Fri 09 May 2025 05:00:34 +0000
Manifest next update: Sat 10 May 2025 05:00:34 +0000
Files and hashes: 1: bRULQ4zGj2LcFdNZWTFh95neU68.crl (hash: MDHdNN/j8RglkLDZKYV73sBGAKYji/suEjSN+msd/Eg=)
2: eOJh9jPF2rg62QTnhjhlK1Lrg1w.roa (hash: r7IjyXmhMKmvdhLF1sofBUJOM+GxOvLawDA1jM5V0lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:6a:ac:9f:07:fa:00:90:20:ca:38:a1:c8:e4:d7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d150b438cc68f62dc15d359593161f799de53af
Validity
Not Before: May 9 05:00:34 2025 GMT
Not After : May 10 05:00:34 2025 GMT
Subject: CN=cad5f38194e097d50092b481c046d14d174457fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:40:1e:1b:90:c9:c0:cc:51:fc:ce:b1:c7:94:
df:b0:e3:79:30:eb:78:d1:30:00:8e:ea:b3:3d:9d:
59:69:dc:2a:97:fc:c8:73:04:31:63:df:8f:38:e6:
88:c7:ac:68:9c:df:de:06:1f:12:b9:5e:c6:f2:32:
11:7b:36:fd:1a:6c:ce:9e:57:22:a7:61:49:9e:8d:
b9:36:61:ff:03:f7:89:3a:f4:7f:03:9c:29:6b:cd:
de:18:0d:3d:a9:cf:f1:c4:3f:74:42:ec:51:b6:97:
31:66:1f:fb:12:a6:42:b2:1d:aa:9a:c4:89:35:e6:
98:b3:05:f2:f3:92:70:a9:c9:e5:4c:42:c8:39:8a:
d1:08:6c:46:cf:b4:2c:58:a4:f6:2d:29:f1:0d:78:
28:c2:c6:b7:93:92:8e:e3:9e:4c:ac:77:49:6c:4f:
0b:05:71:80:e5:ea:11:f8:5f:e8:01:3c:44:02:c8:
5d:00:88:12:ff:0e:fd:50:dd:4f:a6:e0:a2:9f:d4:
a1:97:b0:3f:57:b8:2f:ad:56:7a:b9:e5:ea:ac:a6:
6d:0c:b8:69:d2:e5:20:47:a5:e6:ad:46:60:97:de:
f8:53:d7:bf:97:67:b9:30:33:40:10:dd:02:a6:81:
0a:82:51:8c:af:b0:08:29:f0:e3:67:74:8d:97:de:
cc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D5:F3:81:94:E0:97:D5:00:92:B4:81:C0:46:D1:4D:17:44:57:FC
X509v3 Authority Key Identifier:
keyid:6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:55:4a:5d:7e:3b:c3:c7:1e:ff:2f:9e:cd:fc:b2:dd:27:98:
25:2f:31:82:be:6b:76:f2:07:01:2a:36:3d:5e:0f:c5:ea:c1:
d7:ea:72:33:22:19:a5:05:80:6a:0e:93:33:7f:db:5d:79:32:
d9:16:94:47:15:d2:85:2e:73:89:80:3a:40:82:b5:08:6e:12:
7f:71:03:f7:f1:56:00:de:ce:20:a4:5b:6a:83:4e:f3:11:1d:
d4:0c:88:b6:b6:ae:89:79:26:81:f9:44:07:9a:67:9e:ec:c5:
fc:83:0b:86:4e:ab:53:9b:43:5a:27:51:5d:cb:40:16:07:66:
ee:aa:70:c5:19:19:e1:99:5f:26:f4:a3:46:1c:ce:90:b1:d1:
75:ff:9c:1a:1f:9e:56:bc:08:6c:fc:bb:16:e6:46:6d:d4:48:
2d:fe:91:b5:8e:a3:1f:8a:d6:97:0d:b7:df:e7:c9:82:98:52:
b4:18:87:7a:1c:87:00:72:10:6b:6c:1f:88:9f:0f:6b:3e:42:
cf:3f:ee:2c:da:b1:ab:b1:cb:2b:ca:43:84:b4:64:ba:11:fe:
93:4c:6b:68:0a:c7:17:26:59:93:32:cc:71:9e:0f:aa:95:71:
fa:3e:a6:f4:8a:91:2c:ba:52:02:44:19:13:af:45:03:59:f5:
a5:80:83:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:21:31 2025 by rpki-client