Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft
File: bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft (raw, json)
Hash identifier: EHUUPwsim3pIhA3CuU/cw+ASc1L1vnmqZb4oj8Ikf10=
Subject key identifier: 5E:36:E9:81:1F:9B:B6:69:34:B9:E4:2F:45:CF:E3:98:38:1F:5C:F8
Authority key identifier: 6D:85:06:13:61:B1:9F:21:2E:FE:90:C2:D8:CF:3E:EE:61:7F:20:E5
Certificate issuer: /CN=6d85061361b19f212efe90c2d8cf3eee617f20e5
Certificate serial: 0196556E90C23FDF640E0CC7EA3A0D4CB6CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft
Manifest number: 1218
Signing time: Sun 20 Apr 2025 23:00:31 +0000
Manifest this update: Sun 20 Apr 2025 23:00:31 +0000
Manifest next update: Mon 21 Apr 2025 23:00:31 +0000
Files and hashes: 1: bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl (hash: zcN0lCmybircDpIbr51pmwPcLpWJMW7jg1a6EtNSEdk=)
2: tI868MCQG893IS8cCKhA3Gnv9u4.roa (hash: AVSP0s3nbiSWpz8l7ynDbY6/apcfYdcvmQMyPra2nQw=)
3: vbdcw7rpmrydbe9PtiZ8KiYrMI4.roa (hash: 1hwqdUZaDaq1TdQxzfadCtp2CrZa+i6RSIuk/ctbIuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:90:c2:3f:df:64:0e:0c:c7:ea:3a:0d:4c:b6:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d85061361b19f212efe90c2d8cf3eee617f20e5
Validity
Not Before: Apr 20 23:00:31 2025 GMT
Not After : Apr 21 23:00:31 2025 GMT
Subject: CN=5e36e9811f9bb66934b9e42f45cfe398381f5cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:71:93:b3:eb:0a:5c:e9:4c:96:82:fc:8a:62:
f7:34:87:72:80:6d:87:38:8f:b1:c1:38:dd:46:30:
fb:c9:46:70:9b:e8:25:4b:18:4e:b7:05:ca:8a:4e:
c9:f9:5a:25:78:22:fe:08:e5:07:01:bb:3c:51:0c:
89:37:7f:64:b8:71:a8:02:d6:13:db:08:f4:3a:1d:
db:4f:13:85:32:36:c3:38:8a:95:d8:59:bc:0a:08:
17:5c:39:3c:85:2d:27:c2:ee:e0:4d:4a:49:40:50:
6c:23:5d:bc:81:2e:8b:f5:87:9b:d6:5a:47:6e:49:
49:e6:f9:1c:68:4b:49:51:82:ca:18:24:37:d2:58:
1a:66:a6:d3:f1:00:c3:b9:98:82:a0:00:bf:cd:15:
47:4f:88:21:44:ac:18:4d:36:59:d3:22:93:cc:5e:
af:f8:ff:47:2c:0d:11:83:e0:e8:9c:7f:43:09:ca:
da:19:25:92:b3:45:42:87:3b:0c:5c:3c:56:66:34:
ae:5c:cf:8e:0b:56:2f:75:2d:80:19:27:9f:d0:b4:
27:05:04:29:4e:30:8e:ab:86:6b:63:c0:b2:b4:11:
5c:a6:10:7d:ae:2d:eb:be:ee:7d:23:54:38:9d:c3:
df:ed:cf:97:f7:4d:2b:61:b9:8e:01:04:de:39:8e:
69:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:36:E9:81:1F:9B:B6:69:34:B9:E4:2F:45:CF:E3:98:38:1F:5C:F8
X509v3 Authority Key Identifier:
keyid:6D:85:06:13:61:B1:9F:21:2E:FE:90:C2:D8:CF:3E:EE:61:7F:20:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b7:17:d7:1a:8b:e4:d5:e7:fb:17:01:be:11:5e:2d:1e:72:
ce:06:6b:1d:af:36:4f:e9:2b:d8:f3:8f:64:ca:aa:86:8e:53:
69:13:b8:13:a7:31:38:d4:86:79:58:58:2b:b0:b8:c5:7a:37:
f8:5c:4b:25:cf:03:31:62:12:9e:69:ee:63:08:e0:26:f2:53:
30:a8:8b:ce:bd:2a:47:94:fa:fe:96:38:49:50:af:5b:28:3b:
a7:f9:26:b2:17:9d:8f:ec:dc:fb:77:87:90:70:71:15:2f:60:
fe:7b:ed:6c:47:b4:3b:02:bc:4a:a5:31:c9:2c:be:1b:a6:5e:
02:56:b2:c4:13:e1:fd:ce:c2:86:01:92:7c:5d:a6:ee:37:e1:
69:5e:0d:8a:24:51:6c:54:68:df:fa:bc:77:56:05:c4:9b:81:
00:d7:5a:35:ad:2f:49:9f:54:db:48:fe:a0:aa:f7:91:b8:81:
0a:de:86:9f:28:83:ed:90:b9:04:8a:38:5f:80:50:0d:6d:95:
d5:83:51:03:76:b5:f6:59:28:b5:cf:56:47:29:fa:8b:b0:60:
ca:91:0a:85:03:58:d1:fe:c2:8e:7b:80:b5:ed:87:17:02:a6:
75:70:f7:90:8e:75:c0:5d:f0:84:d1:08:d3:35:67:7a:e4:ee:
3f:2c:33:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:23:27 2025 by rpki-client