Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft
File: bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft (raw, json)
Hash identifier: UBcUTTnrlZw8oQu/MhgziYKfo89OBPGM2YSScSEPV9s=
Subject key identifier: 59:1B:AE:FD:64:F3:B4:97:31:62:2C:E9:DA:73:FE:9C:2B:8B:FC:01
Authority key identifier: 6D:85:06:13:61:B1:9F:21:2E:FE:90:C2:D8:CF:3E:EE:61:7F:20:E5
Certificate issuer: /CN=6d85061361b19f212efe90c2d8cf3eee617f20e5
Certificate serial: 01975E01A543B1475CEBEB579CE6827E65F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft
Manifest number: 12A1
Signing time: Wed 11 Jun 2025 08:00:55 +0000
Manifest this update: Wed 11 Jun 2025 08:00:55 +0000
Manifest next update: Thu 12 Jun 2025 08:00:55 +0000
Files and hashes: 1: bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl (hash: 3b/vSZ5efrSZe6ZQNSLyvz0VJr7fCqPZ9LYkbI1KfYs=)
2: tI868MCQG893IS8cCKhA3Gnv9u4.roa (hash: AVSP0s3nbiSWpz8l7ynDbY6/apcfYdcvmQMyPra2nQw=)
3: vbdcw7rpmrydbe9PtiZ8KiYrMI4.roa (hash: 1hwqdUZaDaq1TdQxzfadCtp2CrZa+i6RSIuk/ctbIuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:01:a5:43:b1:47:5c:eb:eb:57:9c:e6:82:7e:65:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d85061361b19f212efe90c2d8cf3eee617f20e5
Validity
Not Before: Jun 11 08:00:55 2025 GMT
Not After : Jun 12 08:00:55 2025 GMT
Subject: CN=591baefd64f3b49731622ce9da73fe9c2b8bfc01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a7:d3:83:59:2e:9c:62:bc:b7:41:3b:c9:7c:
77:eb:5f:a8:78:0b:70:38:5c:96:8c:b0:46:fc:e1:
c3:31:38:9b:b0:01:77:bb:1c:b6:41:e4:bb:3b:77:
d2:8d:79:ab:19:ad:95:66:91:d0:27:6b:4c:89:c4:
d8:fd:06:ac:57:23:28:81:72:49:8a:6c:3a:4c:76:
00:7a:83:ab:a8:e4:86:67:c6:75:2c:8a:8e:b9:df:
96:c8:32:95:3c:aa:d9:90:8d:f8:c2:83:0e:79:74:
3f:a2:07:1c:f0:f3:96:81:23:54:6e:1d:5c:b0:7c:
69:4e:58:90:04:ca:cd:f5:cb:e6:0d:77:df:76:38:
08:5d:7a:6f:57:ce:94:45:4c:8d:ad:a9:26:3c:fe:
ec:70:e7:8d:de:38:99:1b:9d:18:66:e1:68:32:dd:
ec:cf:af:d8:34:9b:08:7b:2c:23:98:f9:9f:25:6c:
d8:53:46:3e:76:de:b1:30:aa:cb:6e:e2:1c:46:4d:
08:28:d9:94:a9:fe:bc:fb:d4:50:d9:c3:b1:f9:be:
bc:0b:dc:88:d5:6e:8b:2c:76:53:0e:52:71:f3:89:
b5:40:98:15:5b:98:92:c5:e2:c6:58:ef:38:6c:5e:
e8:54:26:53:74:21:77:72:8a:da:d8:3b:dc:6a:72:
fc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1B:AE:FD:64:F3:B4:97:31:62:2C:E9:DA:73:FE:9C:2B:8B:FC:01
X509v3 Authority Key Identifier:
keyid:6D:85:06:13:61:B1:9F:21:2E:FE:90:C2:D8:CF:3E:EE:61:7F:20:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:eb:93:4d:05:78:c0:f1:cb:79:15:ea:41:c6:23:77:0a:4e:
d3:a7:21:a0:0a:ff:b5:8d:6f:5d:03:f9:0e:1a:0d:3a:34:7a:
7a:d4:d5:57:27:da:73:59:ba:80:4a:ab:45:72:83:ef:19:8b:
77:ad:47:5b:48:78:10:75:b1:a9:71:91:ed:33:77:13:aa:63:
5e:34:b3:75:75:22:37:6a:00:b6:99:1a:40:27:16:48:23:88:
4d:69:8e:79:33:b6:50:f8:6a:bd:28:28:43:51:de:95:6d:2b:
1e:1d:3a:58:01:44:3f:9d:1b:31:27:36:1b:7f:b8:9a:85:e2:
e6:26:6d:34:8d:a4:52:e1:54:1b:0c:e3:7e:a4:8c:f4:29:90:
b8:c0:ae:82:dc:04:e7:22:6a:14:2f:21:fc:e9:69:05:df:8e:
b1:0f:8c:cd:dc:8b:89:8f:31:4c:18:aa:1a:37:c4:e2:b3:8d:
28:7f:01:4e:47:bf:75:c5:0c:19:50:cf:bd:e1:45:69:c0:61:
b0:b1:7a:4a:86:f3:e9:e3:7c:31:9d:f5:f0:a0:bc:fe:41:88:
2f:ec:44:cd:ab:13:5e:66:a8:63:dd:4d:61:95:29:4e:ab:7b:
77:93:29:51:41:22:35:09:6c:69:93:85:d0:b9:4f:05:7f:06:
f1:8b:bf:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:32:49 2025 by rpki-client