
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
File: Blyf7bW1RPaW7U2vE1sC3ubZevY.mft (raw, json)
Hash identifier: Wo87qyVgRUCkaR11xQTsv85CddYsm1/DRV6Uu8DoToU=
Subject key identifier: D0:52:DE:84:8D:15:71:6D:3C:0B:54:72:44:42:8A:5E:CB:FF:81:F1
Authority key identifier: 06:5C:9F:ED:B5:B5:44:F6:96:ED:4D:AF:13:5B:02:DE:E6:D9:7A:F6
Certificate issuer: /CN=065c9fedb5b544f696ed4daf135b02dee6d97af6
Certificate serial: 0196BF011E0263A5A26393343776A7F303D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 11:00:43 +0000
Manifest this update: Sun 11 May 2025 11:00:43 +0000
Manifest next update: Mon 12 May 2025 11:00:43 +0000
Files and hashes: 1: Blyf7bW1RPaW7U2vE1sC3ubZevY.crl (hash: WH5GVEFV35fRw6lw3MeLQqG41Dae1y8/rbv7YoqvYcc=)
2: UVnhMz4Jh2elkuvmMPm7Jt9svi8.roa (hash: he6S2b9IPHmcJG3wUgyxY2EilJ7c6oeB4o0eAPgBdLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:01:1e:02:63:a5:a2:63:93:34:37:76:a7:f3:03:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=065c9fedb5b544f696ed4daf135b02dee6d97af6
Validity
Not Before: May 11 11:00:43 2025 GMT
Not After : May 12 11:00:43 2025 GMT
Subject: CN=d052de848d15716d3c0b547244428a5ecbff81f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6f:04:aa:f9:b9:23:26:cf:17:42:38:89:ba:
af:22:26:d3:f3:8f:3f:00:ef:52:c1:e5:46:3e:5c:
e1:b8:68:14:fe:85:ae:a8:1d:89:91:52:85:13:62:
3a:09:d0:69:8e:f1:3d:d5:48:81:aa:1a:90:71:40:
8b:86:86:ce:a6:b1:9c:41:26:a0:f9:99:70:c7:ae:
c6:f5:8e:af:7d:1c:78:25:fc:50:f2:c8:15:c6:1b:
71:30:10:8a:4d:b6:04:36:e2:aa:4c:d8:71:74:ba:
f8:ae:3f:23:28:fb:fc:96:cc:a6:12:26:10:39:ae:
75:9d:75:21:a8:59:b9:3f:e8:77:bd:d8:ff:84:2f:
ff:de:aa:bf:a3:7e:dd:d4:0e:66:f3:59:9a:8e:1a:
ec:69:19:73:1f:36:57:f1:fe:1a:a9:bf:bc:b1:cb:
67:b2:f1:23:0e:32:e7:5b:42:eb:e3:16:4d:66:08:
88:78:df:19:ad:b6:2c:93:50:23:78:dc:69:9b:d4:
ff:86:1f:9b:09:21:66:b3:1e:bb:77:b1:8d:4c:ad:
cd:72:d5:49:2b:6d:40:48:c3:b8:54:f7:79:44:c4:
4c:da:ee:1d:5d:05:02:3c:ab:c6:25:19:51:32:47:
45:7e:a1:5e:34:c1:b5:87:a0:c3:ad:70:6a:1e:af:
f7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:52:DE:84:8D:15:71:6D:3C:0B:54:72:44:42:8A:5E:CB:FF:81:F1
X509v3 Authority Key Identifier:
keyid:06:5C:9F:ED:B5:B5:44:F6:96:ED:4D:AF:13:5B:02:DE:E6:D9:7A:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:44:2b:d1:89:84:40:02:08:0d:48:64:37:1d:57:4b:c3:1a:
01:fe:8d:2c:ad:94:97:6f:11:db:6f:f5:29:d5:b4:fb:5f:61:
06:50:9a:96:b1:a9:5d:5b:a3:bd:3b:53:c7:79:90:97:65:bb:
27:b9:90:0b:6c:e3:f4:13:c7:12:f9:61:3e:68:31:9c:ad:65:
b2:62:40:42:73:83:8c:2f:f6:f3:ac:4f:1d:23:ab:52:89:ec:
4a:5d:8b:2d:5b:7d:d6:a2:6e:dd:0f:dc:3c:e9:0c:ba:9c:b4:
15:c3:64:3c:92:48:c3:0e:e7:59:26:d4:fd:c4:95:d8:00:bd:
c0:1b:52:21:44:8d:c4:1a:32:c6:a2:09:36:4d:1f:77:06:16:
6a:ab:41:b2:52:ae:bc:29:5d:ff:ea:a0:bb:b3:67:f5:4f:ae:
b3:15:bc:59:07:14:d6:66:c3:93:6a:1e:8a:a0:77:09:a0:aa:
9d:e0:d7:9e:77:f0:61:8b:8a:e7:b0:2b:66:3b:a0:f6:7c:25:
91:5b:3c:0c:d2:2e:d6:ce:a2:2e:9e:67:f4:3c:95:03:6b:96:
da:f4:c2:c2:d5:64:e7:82:cb:d7:4c:f5:f0:10:21:e4:93:76:
90:d8:0e:8b:ea:d9:5c:fc:d6:0a:c9:36:c9:dc:a8:f6:3f:57:
60:40:e0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:53:45 2025 by rpki-client