Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.mft
File: buKspS4zrI1YnzIhdZLNHmm_cEw.mft (raw, json)
Hash identifier: i3rKWmnKFL+fU5Wo9M4OkAHNQaXLdxxxWqgjDPQ/2vo=
Subject key identifier: 7D:FB:A3:54:33:AA:F4:3B:ED:B5:E3:DC:08:FE:35:5C:BE:27:66:D7
Authority key identifier: 6E:E2:AC:A5:2E:33:AC:8D:58:9F:32:21:75:92:CD:1E:69:BF:70:4C
Certificate issuer: /CN=6ee2aca52e33ac8d589f32217592cd1e69bf704c
Certificate serial: 01968247363BEDD316C45C740544D7310945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/buKspS4zrI1YnzIhdZLNHmm_cEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.mft
Manifest number: 1512
Signing time: Tue 29 Apr 2025 16:00:27 +0000
Manifest this update: Tue 29 Apr 2025 16:00:27 +0000
Manifest next update: Wed 30 Apr 2025 16:00:27 +0000
Files and hashes: 1: buKspS4zrI1YnzIhdZLNHmm_cEw.crl (hash: NXyGryKNB0wYRjgWlabu/e9qJp1Xl6Wa9iAMQBhWPkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/buKspS4zrI1YnzIhdZLNHmm_cEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:47:36:3b:ed:d3:16:c4:5c:74:05:44:d7:31:09:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ee2aca52e33ac8d589f32217592cd1e69bf704c
Validity
Not Before: Apr 29 16:00:27 2025 GMT
Not After : Apr 30 16:00:27 2025 GMT
Subject: CN=7dfba35433aaf43bedb5e3dc08fe355cbe2766d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d2:d8:e0:9c:a6:e0:04:c0:d9:20:e6:2e:5c:
89:46:87:fc:97:30:71:6b:34:3e:f6:b4:9e:40:ac:
14:e6:0d:75:fb:5e:06:dd:1c:ea:7c:38:d3:93:9a:
db:0a:2e:f7:05:93:86:8e:f3:08:bc:c3:e2:8e:99:
4f:3b:79:1d:b3:51:60:a4:52:30:47:a2:49:28:1c:
23:4f:1f:70:54:bd:76:dd:98:b2:79:d6:89:a0:5a:
7d:b0:d8:57:26:9c:ba:6b:1b:bf:0d:53:10:7c:1c:
7e:3b:d8:e8:15:ce:cb:e5:50:13:69:0e:3b:0a:6c:
35:85:a7:b3:ef:87:3b:fa:83:af:c9:8a:11:0d:ba:
b7:5a:77:4d:88:6a:54:c0:9b:dd:b5:e2:57:70:46:
fa:8b:1d:11:7a:7b:93:cf:fe:49:ab:97:1f:be:59:
fc:cf:d6:b8:b9:c1:fa:92:b9:21:4b:42:ad:3b:2c:
dd:3b:a2:79:5e:b0:09:39:59:12:ac:0b:51:c8:fe:
61:b3:c1:b2:4c:54:44:63:d8:c6:a7:ee:1c:bf:54:
69:fe:0f:aa:79:ed:a0:ab:32:ce:7d:8b:ac:1d:7f:
6b:74:60:da:7c:f7:3d:9c:26:ba:91:b6:e0:a3:53:
f4:74:18:d7:c9:ac:58:76:8a:09:18:d5:dd:a2:a8:
52:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:FB:A3:54:33:AA:F4:3B:ED:B5:E3:DC:08:FE:35:5C:BE:27:66:D7
X509v3 Authority Key Identifier:
keyid:6E:E2:AC:A5:2E:33:AC:8D:58:9F:32:21:75:92:CD:1E:69:BF:70:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/buKspS4zrI1YnzIhdZLNHmm_cEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:60:f7:d1:ba:5e:6d:27:c0:79:68:c0:6e:31:4c:b2:e9:0b:
33:c8:e2:4c:dc:c3:6b:9f:8e:9b:a0:2d:99:12:3c:91:0f:e9:
b1:45:7d:fb:74:47:c7:0d:bf:4e:a3:6c:fb:cc:e5:86:b7:ce:
5a:23:4c:32:a0:c9:b0:12:29:33:53:57:c0:d5:5f:d7:d2:52:
22:bd:31:ad:61:38:1c:3b:83:7b:2c:79:ec:4e:ed:ed:08:56:
d2:42:25:cc:ba:98:a4:be:ff:8e:c1:64:2e:93:6f:e4:a3:bb:
7f:94:81:8b:2a:62:06:e8:96:18:da:d9:fb:51:6c:62:f5:74:
2d:3e:5b:78:59:5f:f7:04:7b:cc:c3:94:34:8d:f5:86:a8:97:
29:92:df:65:67:76:6b:87:92:08:e9:00:43:14:b2:e9:3e:15:
91:d9:87:a9:1c:10:ac:95:aa:0f:62:00:ef:78:eb:9c:26:df:
a9:fa:08:f6:32:12:aa:ed:80:20:a8:5c:64:84:dc:ac:06:7a:
50:9b:94:00:d7:67:ea:00:34:45:1f:cf:4c:77:b5:48:11:e6:
86:17:19:d9:92:a4:50:df:fb:57:7b:10:0a:a2:9a:87:f8:ae:
ce:c6:b1:52:5c:19:46:c2:55:f6:4d:b7:76:c4:82:cc:4e:77:
6a:da:5c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:41:58 2025 by rpki-client