Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft
File: bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft (raw, json)
Hash identifier: rXdkp384+YSFQQxca3whQjhBp0HEhbMMAtFSivUmx2c=
Subject key identifier: B7:B6:7E:37:34:57:3F:B2:51:C9:1F:B3:9B:82:54:A0:D7:1A:51:23
Authority key identifier: 6D:85:06:13:61:B1:9F:21:2E:FE:90:C2:D8:CF:3E:EE:61:7F:20:E5
Certificate issuer: /CN=6d85061361b19f212efe90c2d8cf3eee617f20e5
Certificate serial: 0196C1941F5EC984ED69FA741BCAD271D512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft
Manifest number: 1250
Signing time: Sun 11 May 2025 23:00:31 +0000
Manifest this update: Sun 11 May 2025 23:00:31 +0000
Manifest next update: Mon 12 May 2025 23:00:31 +0000
Files and hashes: 1: bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl (hash: VOZMqxG+tobVS2/5zHpg+L4extusE5dc6ednW/dkDJY=)
2: tI868MCQG893IS8cCKhA3Gnv9u4.roa (hash: AVSP0s3nbiSWpz8l7ynDbY6/apcfYdcvmQMyPra2nQw=)
3: vbdcw7rpmrydbe9PtiZ8KiYrMI4.roa (hash: 1hwqdUZaDaq1TdQxzfadCtp2CrZa+i6RSIuk/ctbIuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:94:1f:5e:c9:84:ed:69:fa:74:1b:ca:d2:71:d5:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d85061361b19f212efe90c2d8cf3eee617f20e5
Validity
Not Before: May 11 23:00:31 2025 GMT
Not After : May 12 23:00:31 2025 GMT
Subject: CN=b7b67e3734573fb251c91fb39b8254a0d71a5123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:29:28:a6:47:bd:8e:41:cd:d3:f4:8c:3f:fe:
9b:e5:ee:d7:fa:08:d5:33:8a:32:23:13:60:9a:7c:
7b:18:6b:5e:23:76:36:e6:1c:d9:c1:c0:d5:39:90:
fa:d2:cb:3f:a8:d4:b1:08:08:64:79:ec:23:65:8b:
ce:03:f7:69:7c:02:93:22:b2:e9:e5:b5:75:27:9e:
9f:55:11:5c:17:fa:fc:c6:23:28:72:53:07:f7:4c:
11:74:7d:08:4a:63:b3:28:23:22:2e:28:27:a3:ba:
3f:31:7d:46:6c:12:f4:d6:91:2f:d8:fe:5f:d7:1c:
3b:0e:0e:f0:6a:fe:14:33:be:f2:5c:1d:f5:57:8b:
8f:6e:00:39:d6:c4:a4:12:f9:c0:5b:11:33:b7:53:
35:c9:ab:fa:c5:e5:bb:0c:60:32:74:b8:a5:41:6a:
5e:0d:73:22:5f:20:3f:fd:56:86:9f:21:a5:bc:8c:
79:e1:99:0b:2c:8f:ec:0d:6e:2f:96:a0:a4:29:04:
a0:69:13:61:ea:ef:a7:bf:52:9c:89:8a:a0:fb:8e:
18:8b:01:f1:f1:b8:06:29:55:51:ad:35:70:30:99:
16:46:09:69:7c:91:15:0e:95:2d:f2:58:58:41:c3:
bb:b6:f8:7a:e7:cc:92:ff:d7:50:06:d5:2d:e7:fb:
e4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B6:7E:37:34:57:3F:B2:51:C9:1F:B3:9B:82:54:A0:D7:1A:51:23
X509v3 Authority Key Identifier:
keyid:6D:85:06:13:61:B1:9F:21:2E:FE:90:C2:D8:CF:3E:EE:61:7F:20:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:2b:b7:f4:8c:e7:71:27:00:69:51:74:3d:57:ba:9f:65:67:
32:7b:c8:25:11:8e:01:17:85:44:99:91:80:b3:aa:9a:95:64:
ed:8f:74:a1:88:d3:f4:18:f9:10:b5:21:95:39:01:f6:e5:27:
f2:83:b5:61:65:e7:d7:26:a5:25:9d:9d:f3:bb:7d:e1:4c:fb:
37:f4:97:bf:44:21:90:64:5d:d2:11:69:72:44:59:fc:fd:5a:
6c:ab:94:3a:dd:e9:75:1b:2b:8c:a8:80:e8:a2:a3:38:8a:92:
2a:ef:08:0d:67:88:b3:78:89:3e:42:a7:c9:d9:9f:5b:f4:d2:
25:e7:49:2b:c0:92:e9:fb:fd:8b:25:03:fb:5a:8d:1a:39:d5:
d7:36:27:1c:1e:9e:5e:63:c2:99:56:a9:01:eb:eb:1d:7d:bf:
9e:6c:df:09:61:4b:56:ad:bb:ec:1c:1c:66:f8:b5:7b:67:29:
83:92:3d:31:2c:33:fe:70:7f:b4:ce:7c:7e:7a:c3:a2:4b:80:
f9:e5:0f:aa:2b:47:c4:91:de:21:04:a3:3e:ea:63:ce:c8:a2:
26:0b:b1:56:44:ac:92:22:0e:a2:48:92:9a:21:be:e0:0f:f8:
b1:75:46:12:78:df:4d:e8:bc:7f:08:14:b8:61:55:c1:e1:c5:
34:60:d2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:17:28 2025 by rpki-client