Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft
File: bYQL-PLqRGpH22xjOQZmfGPtiG4.mft (raw, json)
Hash identifier: ga1opeFPvufUHAb9AbikF02nzhvzxg8Y+7IatxzkN/k=
Subject key identifier: A2:E0:BA:5A:8F:28:68:15:85:05:FC:F2:D0:7B:75:82:41:F1:F2:43
Authority key identifier: 6D:84:0B:F8:F2:EA:44:6A:47:DB:6C:63:39:06:66:7C:63:ED:88:6E
Certificate issuer: /CN=6d840bf8f2ea446a47db6c633906667c63ed886e
Certificate serial: 019747E7DC19EA4964B2290D74678F70C338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft
Manifest number: 0FD1
Signing time: Sat 07 Jun 2025 01:01:06 +0000
Manifest this update: Sat 07 Jun 2025 01:01:06 +0000
Manifest next update: Sun 08 Jun 2025 01:01:06 +0000
Files and hashes: 1: 9fXYfiecb8LKHLBc5hFULaPgfkc.roa (hash: 4n+9kukj7OWGzO7qg1Ocfcd3L1gAsSFqFZg+KnIOuRA=)
2: bYQL-PLqRGpH22xjOQZmfGPtiG4.crl (hash: Th9ZPU26f7Sh//hJRgM07OCBQKuKvFRNPC8d9JLsmxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:dc:19:ea:49:64:b2:29:0d:74:67:8f:70:c3:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d840bf8f2ea446a47db6c633906667c63ed886e
Validity
Not Before: Jun 7 01:01:06 2025 GMT
Not After : Jun 8 01:01:06 2025 GMT
Subject: CN=a2e0ba5a8f2868158505fcf2d07b758241f1f243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ee:71:28:00:96:db:df:e9:47:b7:cd:99:fb:
42:ba:6e:67:4f:06:bd:3e:22:c3:26:e5:92:29:1d:
ef:89:06:14:05:03:ce:62:1b:20:88:07:bc:65:97:
ed:4e:2d:3f:c7:eb:a3:b1:4b:c5:93:4e:57:46:b3:
ac:03:9b:c5:8e:80:06:7b:32:36:ce:40:9b:66:1a:
f7:f9:8d:79:d7:d9:a1:86:44:96:f9:92:92:76:75:
20:92:cc:25:14:c6:f4:f4:e4:97:20:5b:0d:03:73:
90:93:f3:aa:32:68:2c:b5:73:cc:51:d9:80:29:29:
e5:b5:7d:97:6d:8e:23:74:3f:fb:af:0e:9d:3b:45:
2d:b7:36:a9:77:a8:d1:05:00:6e:0b:75:9a:db:c1:
cc:12:1e:51:aa:f3:50:72:17:0e:1b:d5:7a:7b:65:
c1:52:ab:12:6b:86:e4:69:04:c1:e3:10:1f:f1:20:
15:55:f5:54:82:c7:82:79:7e:1b:59:e3:20:81:2b:
f8:84:85:bf:a0:74:f0:36:55:d6:3e:1b:17:5f:c6:
fd:c9:a6:d1:1b:88:9f:08:b5:bd:92:35:9e:7d:20:
b9:74:ea:00:15:b2:45:6d:43:c9:a6:4f:05:ab:71:
96:98:a5:21:7e:d7:50:9c:43:6b:7d:aa:1f:fb:0e:
73:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E0:BA:5A:8F:28:68:15:85:05:FC:F2:D0:7B:75:82:41:F1:F2:43
X509v3 Authority Key Identifier:
keyid:6D:84:0B:F8:F2:EA:44:6A:47:DB:6C:63:39:06:66:7C:63:ED:88:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f4:b0:5b:d9:48:ab:9c:ea:32:da:d0:c2:ed:2f:0b:cd:72:
d5:28:0f:be:66:4f:33:cc:9c:4c:d6:e2:35:51:dd:3d:5b:0b:
06:d3:23:d9:20:01:72:24:1f:12:2f:48:b0:86:3b:ac:83:0f:
0f:8a:c4:03:95:0e:2f:39:bc:88:98:c0:f4:08:6b:ad:d9:0e:
7b:80:6e:2f:70:d5:81:4f:60:35:2e:3b:a5:73:db:2b:24:2b:
32:bd:7f:14:91:bf:c2:6d:aa:02:59:d6:52:5f:0c:7f:2a:f3:
e6:4f:2e:bc:e4:30:2d:29:da:72:e0:6a:6c:1f:74:c4:c7:5a:
81:7b:44:0b:40:48:07:15:e6:3a:d5:2e:2f:ef:0c:c6:3a:62:
28:91:4d:f5:71:71:8f:c9:f7:1a:7c:10:30:84:58:70:17:4f:
b3:8d:5f:a2:48:27:c8:61:a5:30:b3:27:b7:e2:88:f1:78:eb:
39:9f:9f:7e:e1:52:a0:8e:82:6a:98:c2:93:0c:6a:2f:2e:49:
7f:47:df:c7:36:95:75:6b:87:d7:af:28:69:9e:81:0e:1d:f1:
c1:f6:a9:00:51:a1:44:ee:4f:24:03:8d:15:f6:bd:9c:c7:60:
56:3a:54:a0:c2:8b:eb:52:c1:09:7f:55:9c:5b:98:1e:78:48:
b6:a6:a3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:27:50 2025 by rpki-client