Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft
File: bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft (raw, json)
Hash identifier: 5eRUScdMbYQQSoANhFtiQSP+6duHidY0/NK0ogtt1uY=
Subject key identifier: 95:90:01:B0:17:85:AC:A6:74:EA:A1:DD:E2:E9:3D:77:41:40:4F:7D
Authority key identifier: 6D:85:06:13:61:B1:9F:21:2E:FE:90:C2:D8:CF:3E:EE:61:7F:20:E5
Certificate issuer: /CN=6d85061361b19f212efe90c2d8cf3eee617f20e5
Certificate serial: 01975459F2924488C83BB6603046504C2C88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft
Manifest number: 129C
Signing time: Mon 09 Jun 2025 11:01:10 +0000
Manifest this update: Mon 09 Jun 2025 11:01:10 +0000
Manifest next update: Tue 10 Jun 2025 11:01:10 +0000
Files and hashes: 1: bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl (hash: E6NtNAWTXTGULN2uvCMujj2DZ6qb+5EuGGKeK3+U4uc=)
2: tI868MCQG893IS8cCKhA3Gnv9u4.roa (hash: AVSP0s3nbiSWpz8l7ynDbY6/apcfYdcvmQMyPra2nQw=)
3: vbdcw7rpmrydbe9PtiZ8KiYrMI4.roa (hash: 1hwqdUZaDaq1TdQxzfadCtp2CrZa+i6RSIuk/ctbIuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:59:f2:92:44:88:c8:3b:b6:60:30:46:50:4c:2c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d85061361b19f212efe90c2d8cf3eee617f20e5
Validity
Not Before: Jun 9 11:01:10 2025 GMT
Not After : Jun 10 11:01:10 2025 GMT
Subject: CN=959001b01785aca674eaa1dde2e93d7741404f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:17:e1:49:13:09:48:2a:ff:45:49:d3:9d:c8:
fb:53:66:d6:eb:d3:9e:ab:86:5e:61:b1:ad:f9:b0:
41:42:ad:55:11:72:b1:ca:43:7a:3d:b2:89:58:1a:
04:c3:8e:06:b8:b7:1c:85:ee:9e:0d:4e:64:ad:4b:
f7:95:b0:7c:55:dd:50:07:1c:71:b5:c2:a3:c0:6c:
4b:1a:a5:87:e5:61:02:c6:be:41:28:34:a4:71:8e:
4d:b2:0f:56:2a:3b:eb:f3:e3:56:2e:17:2a:87:e9:
e4:22:8f:63:f6:55:dc:74:f0:0d:46:33:5a:1e:cd:
e6:ca:ad:04:b6:8d:1d:60:c7:78:a3:f7:d3:89:bb:
cf:31:0e:39:c2:d4:39:0d:7c:41:46:7d:e8:e9:58:
95:06:bd:ea:db:9c:50:ec:c6:a3:33:ef:0b:90:3b:
34:9f:fa:11:61:89:1a:79:45:98:2a:f9:7f:f4:cd:
6b:cc:84:0d:5e:9a:72:c9:e3:8c:1a:17:a5:9c:97:
0d:4c:d5:33:40:94:29:59:6d:42:9b:f6:55:b1:99:
04:9d:ba:3c:b0:fd:90:de:4f:68:e6:2a:1e:3e:f1:
ee:bb:5b:da:a3:6c:e4:4f:ef:e0:b2:4c:e7:de:9f:
09:4e:1f:6f:c8:19:f6:1f:8c:4c:00:d3:e5:94:93:
57:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:90:01:B0:17:85:AC:A6:74:EA:A1:DD:E2:E9:3D:77:41:40:4F:7D
X509v3 Authority Key Identifier:
keyid:6D:85:06:13:61:B1:9F:21:2E:FE:90:C2:D8:CF:3E:EE:61:7F:20:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:1a:14:b7:40:d9:1f:78:d1:a0:04:8c:31:31:77:1f:48:1e:
76:5f:98:66:e8:d3:fa:93:39:93:ec:a1:a6:c2:38:2b:a7:04:
16:b4:a7:c5:40:d1:b4:97:3c:ca:c7:8d:4f:74:16:b7:74:a9:
9e:21:35:2c:07:ab:30:75:b2:b8:0b:cf:d3:58:f6:51:15:d9:
ea:02:68:39:07:73:51:69:36:b9:c3:19:91:4b:16:de:65:55:
a8:a6:ed:ea:e1:d9:e6:cb:54:bc:7f:48:62:48:94:d4:86:7f:
5e:df:c2:fa:a8:b7:de:a0:66:7b:4c:ca:10:9d:b0:8f:b7:d3:
27:27:fc:be:a1:43:70:39:c8:b6:31:a9:2e:c1:58:c9:f8:fa:
c8:fe:b2:ee:48:24:17:44:27:93:de:86:76:5d:6b:f2:22:6d:
7f:20:19:8b:5b:2a:9d:fa:a6:d5:a9:d4:7d:6c:60:72:b2:59:
76:ec:92:1f:6d:c0:14:12:2f:f9:c9:29:4b:f0:cf:b0:39:cc:
2b:20:6e:27:fc:19:dc:83:1b:09:37:67:7c:f9:0c:e8:b1:78:
18:48:48:a3:03:2e:ee:d1:33:de:b3:42:37:e1:58:38:04:13:
4b:46:d3:a5:8f:14:fb:9d:31:e3:b3:a8:d9:ad:39:b1:0e:2b:
d0:7e:67:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:39:39 2025 by rpki-client