Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/bULP8YM0sv92sVrZRKipE16QVow.mft
File: bULP8YM0sv92sVrZRKipE16QVow.mft (raw, json)
Hash identifier: Rc0yAHn317D5o9iecNTqreQdK9BU+fPjeBEdqWmGylc=
Subject key identifier: 95:21:D3:2D:EC:A4:1E:46:96:CB:58:03:8F:DD:D7:17:FA:4C:80:24
Authority key identifier: 6D:42:CF:F1:83:34:B2:FF:76:B1:5A:D9:44:A8:A9:13:5E:90:56:8C
Certificate issuer: /CN=6d42cff18334b2ff76b15ad944a8a9135e90568c
Certificate serial: 0196AA678C90DE4AA99D0BFDD3ED9BD26E30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bULP8YM0sv92sVrZRKipE16QVow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/bULP8YM0sv92sVrZRKipE16QVow.mft
Manifest number: 0C8B
Signing time: Wed 07 May 2025 11:00:34 +0000
Manifest this update: Wed 07 May 2025 11:00:34 +0000
Manifest next update: Thu 08 May 2025 11:00:34 +0000
Files and hashes: 1: bULP8YM0sv92sVrZRKipE16QVow.crl (hash: oQbCmnmPr+RLWinWPNAyoOQawR1kkvIg4h85VC9uDOM=)
2: nnbxQ8tDPz9a0vLR7ITFF8A_VlE.roa (hash: halDO4C/H1OfIMQSoqT7EneEPBECnw5N2tq5Tmmkcww=)
3: p8yh7cpRxTyZ1PP7mS2mLTKixUQ.roa (hash: OxdG54zVI8TmiMuPSkefFSPZVVftVNj4uTPLezk6AtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/bULP8YM0sv92sVrZRKipE16QVow.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/bULP8YM0sv92sVrZRKipE16QVow.mft
rsync://rpki.ripe.net/repository/DEFAULT/bULP8YM0sv92sVrZRKipE16QVow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:67:8c:90:de:4a:a9:9d:0b:fd:d3:ed:9b:d2:6e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d42cff18334b2ff76b15ad944a8a9135e90568c
Validity
Not Before: May 7 11:00:34 2025 GMT
Not After : May 8 11:00:34 2025 GMT
Subject: CN=9521d32deca41e4696cb58038fddd717fa4c8024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:68:75:ed:a6:ad:74:b6:55:85:d0:74:fc:8d:
20:dc:ca:d4:4d:bb:d1:eb:ef:e8:45:29:8c:de:48:
f0:8d:b0:f2:b7:a0:f0:54:84:26:22:ff:d3:4d:31:
1e:f0:ec:b9:1a:ac:8b:7b:0d:2a:34:22:8e:59:4d:
71:41:82:d7:6a:05:05:57:e0:58:ba:ff:b1:ed:c6:
64:06:93:3e:4d:a2:3b:cb:d1:09:cf:aa:e6:a5:68:
8a:05:7b:fd:87:93:25:c8:25:1c:03:49:68:6a:45:
48:c9:47:2b:b0:ba:05:a3:d2:b1:94:bc:61:91:38:
28:d7:ec:eb:bf:34:8b:3a:8f:b6:8d:87:bb:81:92:
0b:9d:a2:3c:1d:73:36:51:c0:5a:0a:39:16:79:7a:
4d:ef:e5:21:cb:c8:c0:a0:b3:01:fd:90:90:ae:8a:
2d:f2:f8:3a:ab:33:44:34:47:13:9d:58:92:98:14:
9d:ec:41:76:fe:24:14:66:5a:3c:81:23:0b:cc:83:
c9:41:84:ad:4b:20:02:c3:26:05:4b:8b:bd:ed:9b:
97:a4:a2:21:fd:2b:30:8c:58:ac:6d:66:80:7c:82:
34:91:df:82:de:9a:b5:2d:11:17:ff:ea:64:df:82:
4a:d7:a4:11:d6:e9:ce:65:5a:96:47:d7:ce:60:87:
6b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:21:D3:2D:EC:A4:1E:46:96:CB:58:03:8F:DD:D7:17:FA:4C:80:24
X509v3 Authority Key Identifier:
keyid:6D:42:CF:F1:83:34:B2:FF:76:B1:5A:D9:44:A8:A9:13:5E:90:56:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bULP8YM0sv92sVrZRKipE16QVow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/bULP8YM0sv92sVrZRKipE16QVow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/bULP8YM0sv92sVrZRKipE16QVow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:94:35:dd:f4:a8:65:e8:93:d3:4b:7d:30:6d:7b:6a:37:91:
b5:0f:14:6d:9b:4b:ce:a9:1b:bb:5e:07:57:67:c9:bb:24:20:
57:5f:33:08:f7:37:07:25:92:c2:a7:69:63:89:d9:8a:30:23:
1b:fa:bc:f4:40:32:63:f0:e6:b1:2a:cb:1c:3b:17:35:1f:3e:
ea:31:e6:20:07:0a:54:66:28:e6:23:65:36:b2:fd:b2:00:39:
4f:35:07:b8:6a:ef:7a:9c:b2:3a:62:10:c6:3e:9c:fe:20:f8:
c9:17:10:7e:58:cd:61:f3:29:fe:df:67:eb:98:13:77:e9:3e:
aa:2e:4f:46:20:2d:99:1b:6b:a5:c3:3b:52:61:2e:4c:2c:23:
00:f5:2a:0e:22:76:2c:3e:e8:2b:90:79:41:0c:34:a0:ef:3c:
49:c9:37:78:a1:93:67:78:01:80:f0:5e:90:1b:47:e2:81:e4:
2d:14:d4:ea:2f:7c:d1:af:09:4e:18:92:c2:bc:40:0f:9b:ae:
fa:5b:71:d9:b4:3b:39:b1:69:fd:d1:b2:9d:d9:00:6a:aa:75:
45:a6:c3:05:8f:73:bb:4c:7a:11:35:58:65:49:3e:fb:cf:42:
5e:f1:1c:5a:92:e5:b6:3d:79:48:ff:c6:af:ea:e2:9b:19:3d:
1d:29:55:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 20:52:36 2025 by rpki-client