Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft
File: y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft (raw, json)
Hash identifier: LGqN3giB2hgKnBPnPj+KG6U7+WTSxi9ss5zgXhv8ifQ=
Subject key identifier: 8F:00:15:17:38:5D:91:82:C6:23:7E:77:9D:F4:C9:76:B1:7C:B2:44
Authority key identifier: CB:83:FB:FC:17:6C:D4:8E:BE:2F:2C:DE:9F:4C:01:ED:25:3B:BB:2D
Certificate issuer: /CN=cb83fbfc176cd48ebe2f2cde9f4c01ed253bbb2d
Certificate serial: 0197B88F108F5CBA4D2EEDBA70F0F9D8FE09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4P7_Bds1I6-Lyzen0wB7SU7uy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 22:01:13 +0000
Manifest this update: Sat 28 Jun 2025 22:01:13 +0000
Manifest next update: Sun 29 Jun 2025 22:01:13 +0000
Files and hashes: 1: y4P7_Bds1I6-Lyzen0wB7SU7uy0.crl (hash: IaZu2UW2RuU5GyXGg29ERTvhdkNdnvYK40fneB0nY2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4P7_Bds1I6-Lyzen0wB7SU7uy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:10:8f:5c:ba:4d:2e:ed:ba:70:f0:f9:d8:fe:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb83fbfc176cd48ebe2f2cde9f4c01ed253bbb2d
Validity
Not Before: Jun 28 22:01:13 2025 GMT
Not After : Jun 29 22:01:13 2025 GMT
Subject: CN=8f001517385d9182c6237e779df4c976b17cb244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:61:b8:e8:d6:c8:a8:4b:34:48:c1:fd:2d:13:
4e:97:52:29:62:b6:39:2a:fc:3b:21:70:0d:62:97:
e1:b2:b4:24:37:a5:07:1e:aa:6d:6a:cc:92:1a:a2:
d3:85:ce:e8:51:95:be:cf:d4:aa:87:7b:d3:1e:7d:
98:a7:1d:18:f6:10:42:3a:02:81:ee:85:17:d6:cd:
d2:64:92:d6:67:06:74:b5:bb:fb:54:81:c8:63:4f:
b2:8e:dc:f3:6d:0a:10:52:db:10:e7:cb:c8:db:9b:
87:6a:29:03:53:1e:d7:30:44:ad:c1:66:23:5f:79:
83:b9:0b:a4:99:ae:ed:54:4e:f5:d7:b1:5c:28:f9:
ea:d2:90:9f:41:fe:c1:aa:4e:f7:de:c8:03:72:00:
f9:97:9e:27:32:26:bb:bf:fe:2b:63:58:c2:7a:fa:
e3:46:ef:36:3d:4b:a4:49:2b:a1:ca:70:a3:fa:fd:
ac:ee:ce:fa:9b:7a:72:84:18:19:27:5b:3e:ef:96:
f2:7e:29:de:6b:3d:8d:69:53:d4:39:8e:9e:cb:3f:
e3:89:91:ef:98:6f:f1:c8:1a:25:15:97:9d:9f:ab:
53:6e:34:da:f6:fd:4b:e0:a1:9a:f2:4e:49:3e:b5:
7e:cd:41:7b:74:97:de:c4:56:e9:70:d9:c3:8f:19:
97:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:00:15:17:38:5D:91:82:C6:23:7E:77:9D:F4:C9:76:B1:7C:B2:44
X509v3 Authority Key Identifier:
keyid:CB:83:FB:FC:17:6C:D4:8E:BE:2F:2C:DE:9F:4C:01:ED:25:3B:BB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4P7_Bds1I6-Lyzen0wB7SU7uy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c7:55:a9:03:04:89:f9:b7:b8:fa:b9:37:1f:e8:66:1b:94:
f1:0b:aa:08:ce:16:1b:c7:9b:2b:43:44:50:5b:cb:c0:41:d7:
c6:57:1d:0b:b2:ce:72:b1:c2:93:4b:4d:37:df:0a:ed:11:0e:
82:58:26:47:71:db:73:6b:e3:65:ec:fc:de:27:ad:8f:56:fe:
7e:1f:de:d5:8c:ce:14:27:bf:d1:12:28:3f:d3:de:fc:32:a9:
af:59:1c:2a:e3:e0:c7:08:fb:ef:31:70:d6:03:7a:a6:ea:22:
4b:26:7a:51:32:39:7a:0a:aa:db:8e:f1:07:0e:76:75:b8:ac:
ea:de:d9:43:88:fb:43:5c:bf:fc:1b:3f:ff:a8:63:62:88:2c:
12:7d:05:29:24:d8:9f:03:c3:de:aa:8d:17:bf:a2:73:e8:be:
2c:d7:7a:48:dc:04:75:50:5f:28:2e:30:93:e7:fd:82:50:14:
7d:e9:ca:73:8c:97:ce:e7:2e:b2:9f:91:56:3b:7d:23:9e:3b:
7d:e1:b3:0c:dc:30:4f:66:b8:5d:53:d4:6d:83:10:67:7a:d0:
db:7b:96:b5:41:ec:5a:86:44:57:35:9a:b0:97:37:a4:b3:d5:
72:65:81:3b:e7:50:47:e5:39:6a:c0:85:10:4b:bd:77:92:ab:
b2:1d:c5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:33 2025 by rpki-client