Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft
File: y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft (raw, json)
Hash identifier: BJ95csZ75fgy40aZI9y2f0Aa0VShbEBfJp0xW3ZtDtg=
Subject key identifier: 11:2D:5A:78:5E:F7:9A:53:51:6D:35:3F:B1:E4:98:8A:1A:AE:2F:3C
Authority key identifier: CB:83:FB:FC:17:6C:D4:8E:BE:2F:2C:DE:9F:4C:01:ED:25:3B:BB:2D
Certificate issuer: /CN=cb83fbfc176cd48ebe2f2cde9f4c01ed253bbb2d
Certificate serial: 0196C539F438C1BF22666DA0AA84AB2895EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4P7_Bds1I6-Lyzen0wB7SU7uy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 16:00:31 +0000
Manifest this update: Mon 12 May 2025 16:00:31 +0000
Manifest next update: Tue 13 May 2025 16:00:31 +0000
Files and hashes: 1: y4P7_Bds1I6-Lyzen0wB7SU7uy0.crl (hash: kwS7ZO6F84QpNAG27YrKTkOoPuq+uROrsIwuF3HFgfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4P7_Bds1I6-Lyzen0wB7SU7uy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:39:f4:38:c1:bf:22:66:6d:a0:aa:84:ab:28:95:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb83fbfc176cd48ebe2f2cde9f4c01ed253bbb2d
Validity
Not Before: May 12 16:00:31 2025 GMT
Not After : May 13 16:00:31 2025 GMT
Subject: CN=112d5a785ef79a53516d353fb1e4988a1aae2f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7f:1c:af:3e:f0:d8:a9:1f:83:44:f7:56:fd:
74:5d:fd:23:a6:e8:85:75:bc:d1:d3:5c:0f:ee:46:
fc:d8:07:90:3b:9f:1b:c4:64:ec:df:0b:bf:ad:cc:
bc:12:78:f7:39:77:73:5d:6b:d4:30:3e:64:e9:8f:
7b:e8:4e:26:39:2c:ce:0a:e6:6d:c0:49:90:47:f9:
c4:e3:6f:4b:c5:65:6b:53:1b:ab:61:ef:59:48:c6:
c8:cf:9e:69:8e:7e:ab:cb:be:1f:04:73:3b:02:d0:
bf:5d:c4:b8:54:b9:b4:53:da:04:48:59:a3:70:1a:
53:4a:c4:5d:8d:b8:f6:c8:01:c4:a3:dc:db:43:c3:
dc:8f:9c:15:3a:9d:44:aa:27:a3:52:d5:57:e5:b4:
06:96:be:65:ef:15:f3:21:e5:bc:89:9a:c3:1a:79:
e0:ca:2f:e1:a6:c7:1d:11:89:71:95:71:17:d1:6a:
08:d0:27:ca:76:1d:40:ef:26:fd:0c:13:30:76:75:
b8:75:9f:d7:fc:41:76:e8:ec:dc:94:73:7e:36:0c:
3a:6d:0f:b4:ab:6d:46:ff:f0:c2:1e:ff:ef:3e:4f:
3f:2e:89:ce:3b:f1:08:b7:68:cf:26:fe:2a:4f:75:
65:71:98:55:74:4e:4e:39:0b:b6:8e:72:b6:70:08:
c8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2D:5A:78:5E:F7:9A:53:51:6D:35:3F:B1:E4:98:8A:1A:AE:2F:3C
X509v3 Authority Key Identifier:
keyid:CB:83:FB:FC:17:6C:D4:8E:BE:2F:2C:DE:9F:4C:01:ED:25:3B:BB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4P7_Bds1I6-Lyzen0wB7SU7uy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d9:87:d0:d1:ad:79:1f:83:94:11:e7:11:af:7d:94:f5:31:
5a:3a:fd:22:3e:6d:0e:97:55:b6:26:a9:c7:a5:a5:90:97:a7:
2a:25:39:a3:81:2b:1c:6b:92:65:4c:3e:22:87:d4:32:86:4a:
00:ab:82:79:d2:bd:c9:dd:7e:65:2d:a0:1e:b0:5a:8c:3f:34:
b8:d9:b9:18:d6:91:67:36:ff:d8:65:ed:19:28:fa:5b:33:10:
36:5f:8f:7f:09:1b:dd:fd:bc:fb:b4:0e:75:c1:88:e1:1c:05:
9f:9d:11:68:09:99:37:7e:84:ea:f3:90:7b:d8:0d:b8:40:e3:
5d:3c:bd:10:a4:77:18:be:32:1c:85:ed:1c:e1:5e:e4:7f:51:
80:4e:44:fd:53:ae:5e:7e:09:eb:b6:26:ff:0a:d2:cc:95:d5:
6e:e4:aa:4a:95:ed:68:cf:4d:c5:7e:ff:fd:c0:5f:b1:94:56:
71:f9:c4:94:b1:69:f2:2b:9c:29:9e:d8:8a:61:db:55:f7:34:
ce:bc:90:28:cc:c9:f8:c3:43:e5:76:42:79:ff:e5:f5:af:25:
11:aa:98:f8:64:60:2c:c1:e9:e9:8a:47:50:4d:ce:f6:02:77:
20:15:09:50:dc:74:2f:77:ad:74:aa:8a:d1:a8:08:b5:37:da:
d6:9d:39:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:11:21 2025 by rpki-client