Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/879c02-dbf4-4e40-a4ed-313754e64e13/1/bZYBl_5YkhTCJZ9q6olsThAH6YY.mft
File: bZYBl_5YkhTCJZ9q6olsThAH6YY.mft (raw, json)
Hash identifier: iMY3tkJujh7yl+o1OGO9UHqA6hupx2EG2ukCdi2Oio0=
Subject key identifier: 26:C2:94:66:FB:C0:38:D1:BA:B6:39:5A:D0:8D:F9:C1:68:B1:57:D4
Authority key identifier: 6D:96:01:97:FE:58:92:14:C2:25:9F:6A:EA:89:6C:4E:10:07:E9:86
Certificate issuer: /CN=6d960197fe589214c2259f6aea896c4e1007e986
Certificate serial: 0197469E56867EC3C7DB3FB095FED623A4AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bZYBl_5YkhTCJZ9q6olsThAH6YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/879c02-dbf4-4e40-a4ed-313754e64e13/1/bZYBl_5YkhTCJZ9q6olsThAH6YY.mft
Manifest number: 0818
Signing time: Fri 06 Jun 2025 19:01:11 +0000
Manifest this update: Fri 06 Jun 2025 19:01:11 +0000
Manifest next update: Sat 07 Jun 2025 19:01:11 +0000
Files and hashes: 1: bZYBl_5YkhTCJZ9q6olsThAH6YY.crl (hash: vVTq0Mg/xZjPvKDEiV+XXGmHD4yRGOczEdNXz/cntY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/879c02-dbf4-4e40-a4ed-313754e64e13/1/bZYBl_5YkhTCJZ9q6olsThAH6YY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/879c02-dbf4-4e40-a4ed-313754e64e13/1/bZYBl_5YkhTCJZ9q6olsThAH6YY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bZYBl_5YkhTCJZ9q6olsThAH6YY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:56:86:7e:c3:c7:db:3f:b0:95:fe:d6:23:a4:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d960197fe589214c2259f6aea896c4e1007e986
Validity
Not Before: Jun 6 19:01:11 2025 GMT
Not After : Jun 7 19:01:11 2025 GMT
Subject: CN=26c29466fbc038d1bab6395ad08df9c168b157d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6d:a3:ad:e1:98:33:c0:f9:2b:8f:fa:57:74:
d6:9f:01:49:ce:58:ad:fc:d7:d5:78:fd:8c:69:e0:
78:2b:01:cf:11:b6:87:fe:3c:91:3c:df:05:fd:80:
86:70:46:ad:a5:ef:25:4f:79:69:c7:09:2a:c0:8e:
b9:d2:90:b2:72:1a:96:09:ac:a9:d2:69:94:09:32:
2a:00:56:f6:9a:62:04:23:7b:55:83:3e:e6:91:88:
15:18:fc:df:97:f6:f8:b0:30:07:55:2b:f2:a6:8e:
d4:4b:31:b0:ff:8e:d5:d0:aa:65:5f:e3:b9:69:20:
42:af:b8:b5:94:08:5f:f7:f9:92:d7:c0:80:53:a4:
a8:49:50:e8:bf:39:3a:9d:59:f0:20:cd:d8:13:98:
bb:10:73:87:84:22:d8:f1:04:a6:0b:24:d7:f5:54:
8e:0d:8d:3e:85:b9:fe:8f:a9:6d:20:0b:a0:d6:f7:
50:35:97:11:c2:67:f4:cb:e2:e4:61:0e:64:31:2a:
7d:9b:1f:89:6f:15:d3:a4:6c:f9:b3:bc:ad:e0:c2:
4d:9f:f5:9e:82:a3:84:4d:2d:9f:da:39:a9:31:38:
e2:1f:af:a6:14:ed:a2:ae:db:6f:ec:a9:f2:74:cf:
dc:15:28:fd:f6:1a:1e:04:b0:d6:93:12:52:35:81:
48:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C2:94:66:FB:C0:38:D1:BA:B6:39:5A:D0:8D:F9:C1:68:B1:57:D4
X509v3 Authority Key Identifier:
keyid:6D:96:01:97:FE:58:92:14:C2:25:9F:6A:EA:89:6C:4E:10:07:E9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZYBl_5YkhTCJZ9q6olsThAH6YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/879c02-dbf4-4e40-a4ed-313754e64e13/1/bZYBl_5YkhTCJZ9q6olsThAH6YY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/879c02-dbf4-4e40-a4ed-313754e64e13/1/bZYBl_5YkhTCJZ9q6olsThAH6YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:7a:81:d2:c3:7b:29:a0:f7:9e:c6:59:18:63:06:fb:80:47:
92:38:ec:d5:3c:12:a0:4b:6b:38:f1:6d:5f:c4:8e:60:0e:cb:
92:61:22:af:2b:31:c7:07:c5:57:72:06:9b:ed:05:34:90:ac:
74:63:5b:36:4f:e5:7d:74:5f:5a:c1:11:68:40:d7:d4:bc:90:
d1:86:cc:73:8a:ab:66:18:a8:53:da:80:4b:54:3f:f8:f0:00:
fa:39:21:c5:0f:b1:8f:30:f3:02:27:6e:32:84:7b:9b:dc:92:
d9:44:f4:00:99:ac:1f:1e:43:e6:43:8f:1c:fd:9b:6d:32:e2:
7c:5d:e1:a5:2f:18:35:0d:f7:54:fb:f0:fc:ff:33:17:f7:a3:
c6:4c:8b:e1:37:20:22:7b:94:b0:25:a3:11:d1:ad:0e:d4:24:
84:7b:ca:36:a0:39:3b:da:3e:70:f7:18:7c:a0:ae:67:37:6c:
2e:3e:4a:4d:2c:04:7f:d5:bd:6e:45:c1:7c:36:06:f0:4f:b0:
4d:45:26:1a:0f:d0:60:6f:fd:c5:2f:0a:95:02:eb:7f:3f:87:
1c:5c:b2:a4:99:e8:25:98:d5:09:4e:84:50:a1:4f:7a:5a:9d:
d9:29:09:c5:e8:a0:53:ec:8d:59:2d:d4:3f:46:69:d2:f6:cf:
5c:aa:95:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:03:48 2025 by rpki-client