Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
File: bRULQ4zGj2LcFdNZWTFh95neU68.mft (raw, json)
Hash identifier: hRG07q/RC1f3+KV+NfaT9QZn2wgjBLISgHoYkFGrt8c=
Subject key identifier: 34:61:DB:D6:2F:8C:80:C3:E1:02:A8:7D:12:D8:C9:88:7A:0F:9E:D1
Authority key identifier: 6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
Certificate issuer: /CN=6d150b438cc68f62dc15d359593161f799de53af
Certificate serial: 019673B01D89AD688E07695C7415466B4855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
Manifest number: 1513
Signing time: Sat 26 Apr 2025 20:00:43 +0000
Manifest this update: Sat 26 Apr 2025 20:00:43 +0000
Manifest next update: Sun 27 Apr 2025 20:00:43 +0000
Files and hashes: 1: bRULQ4zGj2LcFdNZWTFh95neU68.crl (hash: e3UYMJnK3Js3y0SWE8smM07QHEaYML4VN2BBDrdpOy4=)
2: eOJh9jPF2rg62QTnhjhlK1Lrg1w.roa (hash: r7IjyXmhMKmvdhLF1sofBUJOM+GxOvLawDA1jM5V0lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:b0:1d:89:ad:68:8e:07:69:5c:74:15:46:6b:48:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d150b438cc68f62dc15d359593161f799de53af
Validity
Not Before: Apr 26 20:00:43 2025 GMT
Not After : Apr 27 20:00:43 2025 GMT
Subject: CN=3461dbd62f8c80c3e102a87d12d8c9887a0f9ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:67:db:95:bc:86:74:ac:4d:6d:69:75:c7:7a:
8f:ae:75:6a:c8:b2:9c:e5:15:ef:e7:a2:9f:e8:c3:
32:9a:a1:37:6e:10:14:48:69:90:87:be:b0:4f:c6:
88:8c:5a:f2:6f:09:24:15:d1:92:df:18:1c:04:4a:
df:55:9c:79:23:d1:8f:b1:90:48:35:7a:f9:c4:74:
8d:5e:b6:9d:4d:17:33:85:2d:9b:e8:b7:ae:2d:e7:
9c:55:e0:cb:f9:c9:40:7f:39:0a:6c:ad:40:ec:a3:
3d:5b:9e:ac:fb:f4:26:0c:5f:2f:3d:2d:cc:77:17:
7f:0e:ba:13:67:10:26:04:c4:ca:60:fd:95:3c:72:
89:93:b4:e9:96:ac:8c:fc:99:27:a4:77:de:43:f6:
2e:2a:9a:2c:ac:c3:bf:f6:c3:e2:8f:5d:88:a0:98:
77:93:64:85:e5:94:94:f9:de:14:62:d2:e4:e4:29:
f1:06:03:d6:f9:e0:33:55:5f:48:a1:3a:36:49:f9:
b1:ea:71:7b:48:0a:a3:2b:14:a5:88:cb:cf:5f:16:
27:ac:62:b7:d0:2f:66:0c:1b:56:4a:b2:92:30:7c:
a9:91:62:9f:98:a8:0f:fe:b9:96:f8:69:0b:df:16:
61:e9:c6:64:16:7f:a0:de:56:66:b4:1e:0d:d3:11:
7d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:61:DB:D6:2F:8C:80:C3:E1:02:A8:7D:12:D8:C9:88:7A:0F:9E:D1
X509v3 Authority Key Identifier:
keyid:6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:db:f2:d6:26:6d:d2:ec:5f:ec:bc:de:0d:51:fe:48:46:8a:
1b:26:85:45:e8:41:6f:a5:cc:80:19:03:50:0e:88:cc:b5:5c:
33:2c:b8:48:b1:c0:80:70:d0:94:d8:89:46:5e:f4:a9:78:bb:
d2:2b:65:ba:db:1d:66:59:be:e3:6e:85:9d:60:54:55:93:26:
b9:7f:27:df:65:cd:08:ae:8c:f8:f1:2a:d8:82:a5:61:27:04:
fe:6d:0a:00:08:bf:9f:37:3a:36:87:11:29:b4:d4:a2:c4:f4:
c9:71:cf:13:9c:78:6f:4c:09:57:15:0c:b5:4b:56:86:c2:75:
87:76:83:9a:10:34:92:7d:61:e3:44:25:36:f4:74:79:d2:4a:
72:f5:22:d0:26:79:5a:73:23:f9:ce:e2:0f:63:03:b5:65:11:
87:05:9d:66:7d:96:d1:db:74:98:e6:db:53:73:0d:21:30:e5:
28:17:a4:82:79:1f:84:82:09:c2:2e:d5:05:fd:3b:68:3b:ed:
a6:8a:43:af:ed:7c:c0:58:d1:f1:f9:97:25:7a:b1:46:ce:88:
7c:51:55:dc:5a:fa:83:0c:df:d6:17:be:64:c8:3b:42:e5:48:
8c:04:5c:a3:96:37:82:72:db:14:66:98:7a:95:c1:37:ce:6f:
0b:16:fe:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:57 2025 by rpki-client