Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
File: bLyEAvCSNDucA9OGBpco-Jg-YAg.mft (raw, json)
Hash identifier: y/osyEaXFHj7kRrFtFgLaVoPMcjKNDDPvfP0vMf3mxM=
Subject key identifier: F0:AB:04:5D:1E:74:3A:89:3B:CD:58:62:6E:48:F0:F6:E8:8B:28:A7
Authority key identifier: 6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08
Certificate issuer: /CN=6cbc8402f092343b9c03d386069728f8983e6008
Certificate serial: 01964FDAA0080F2B15CB838C055CE6610F90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
Manifest number: 0D64
Signing time: Sat 19 Apr 2025 21:00:49 +0000
Manifest this update: Sat 19 Apr 2025 21:00:49 +0000
Manifest next update: Sun 20 Apr 2025 21:00:49 +0000
Files and hashes: 1: bLyEAvCSNDucA9OGBpco-Jg-YAg.crl (hash: 7SNlkiCuyO+9dFIEThGU8LbIhcpMu/AvHilQFAt7gf8=)
2: cdM459bUqR9CDHxK6hkgW3z_lyI.roa (hash: yGuDalXNxH1KMB1e5SARV7XMjke+R1A0tgbxBSQwq0g=)
3: gDWc6H7uj9ibkrZP4t2rHY2dAjc.roa (hash: kA5V7O8+i9I2snnuaBTFlKTpJopDxBn7UIT61zUY590=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:a0:08:0f:2b:15:cb:83:8c:05:5c:e6:61:0f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cbc8402f092343b9c03d386069728f8983e6008
Validity
Not Before: Apr 19 21:00:49 2025 GMT
Not After : Apr 20 21:00:49 2025 GMT
Subject: CN=f0ab045d1e743a893bcd58626e48f0f6e88b28a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7f:7c:3c:69:61:dc:3a:ad:f9:20:d5:f0:4b:
fe:7b:14:a7:2e:6b:eb:07:b8:8d:0a:5c:97:0a:e9:
c1:91:d7:db:6f:55:86:e6:61:81:f0:27:95:d5:06:
ba:1e:c0:f0:77:5e:c1:32:9b:64:1c:fe:8b:e5:a5:
f7:e1:8b:54:e2:db:05:e1:48:cb:7d:29:01:3f:31:
52:a4:9c:0b:a3:44:cf:4f:2b:61:f1:45:ac:4b:3c:
26:92:af:cc:2a:de:e0:54:55:41:82:a0:31:a6:0c:
2e:cc:c7:fc:4f:10:ad:96:6a:5d:17:6f:ec:df:dd:
da:37:a5:48:94:2c:e8:6d:0e:85:b5:5b:5e:54:cf:
fe:a7:8b:9a:74:1b:78:e9:05:56:55:95:c9:5b:cf:
3f:dd:01:c2:0b:39:b4:f1:b5:40:62:93:19:b3:fe:
3b:fb:e3:04:09:db:5e:2d:73:14:41:61:c9:a1:74:
a3:f2:5a:97:e4:f8:54:16:d2:9f:0e:78:e7:c8:8b:
cd:8c:90:7f:f3:1e:f9:e7:c0:7a:bb:6b:ed:0d:36:
1c:2c:c8:1e:88:dd:a2:c9:26:d1:0d:e2:8d:a8:f5:
32:62:2d:86:68:cf:f1:f6:fb:82:f7:f6:14:81:a1:
2b:64:21:bb:87:67:b7:04:a0:48:1d:b5:2d:88:4d:
df:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AB:04:5D:1E:74:3A:89:3B:CD:58:62:6E:48:F0:F6:E8:8B:28:A7
X509v3 Authority Key Identifier:
keyid:6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d0:f0:50:6d:25:c2:d1:1b:8d:86:6d:e1:6b:01:ab:91:b6:
7f:94:57:39:b6:d7:be:8e:48:29:d6:6d:93:52:e4:c5:02:1f:
3d:9b:e6:2c:02:c4:83:eb:cf:72:3a:70:4b:ea:46:93:aa:bf:
29:7b:1b:75:49:bf:66:50:31:aa:6d:04:0c:b3:e9:3e:f2:00:
34:95:89:84:88:57:a5:6f:a5:40:ee:98:b6:b2:3b:89:a3:f5:
36:bf:9d:2c:98:a6:01:2c:7f:7e:f6:f9:d4:a5:bd:5f:37:d5:
4b:ba:4c:bb:3b:7f:d0:e2:06:98:74:0c:2c:e5:51:b2:b5:d0:
28:a2:79:8d:06:d5:57:eb:0f:ef:78:8e:82:fc:1a:79:42:1a:
14:85:a4:38:88:e5:cb:2e:5d:29:7c:21:fb:74:1f:f4:2b:77:
da:98:97:e3:a0:b2:a7:2a:57:08:71:72:cb:24:09:c1:6d:c7:
e1:06:f3:4d:1f:87:d4:1f:9b:e4:bd:d0:a6:1c:4b:e3:95:72:
83:c2:51:07:62:44:2a:be:db:2f:e4:e0:3c:1d:16:5d:48:6e:
1a:05:23:9e:45:d3:ec:e5:ff:ed:b4:87:29:bd:7a:81:6f:4d:
ee:15:8c:41:33:67:a7:49:aa:9a:64:b9:a3:7c:35:10:39:57:
b5:64:5a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:36:02 2025 by rpki-client