Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
File: BhYY9tMA3yz1ni35f_6flWoj5jw.mft (raw, json)
Hash identifier: gEyrqmWBsThzHM6JbZsWFeoASDMDWjDPCo614sds+Kc=
Subject key identifier: 64:59:6E:58:2F:0E:96:E3:A9:20:AE:D7:25:80:56:A5:10:29:C7:40
Authority key identifier: 06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C
Certificate issuer: /CN=061618f6d300df2cf59e2df97ffe9f956a23e63c
Certificate serial: 0196C5A84DDCCC00CCFE2CCE94CC7C3287DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 18:01:03 +0000
Manifest this update: Mon 12 May 2025 18:01:03 +0000
Manifest next update: Tue 13 May 2025 18:01:03 +0000
Files and hashes: 1: BhYY9tMA3yz1ni35f_6flWoj5jw.crl (hash: VBnUHM4CJWsoaoTzA/wby2IWo6lhQT9PN4rx7KpYyG4=)
2: PpLMyuWEi7GW-Zo7FScOzQEDqmw.roa (hash: tpDYLlf85669UfO2WjK12JWkdre1n2ZIYLt0uyeHU34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a8:4d:dc:cc:00:cc:fe:2c:ce:94:cc:7c:32:87:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061618f6d300df2cf59e2df97ffe9f956a23e63c
Validity
Not Before: May 12 18:01:03 2025 GMT
Not After : May 13 18:01:03 2025 GMT
Subject: CN=64596e582f0e96e3a920aed7258056a51029c740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:15:a2:a0:62:ac:19:58:a1:65:58:e7:a8:a4:
6a:88:dc:fe:4f:58:75:ca:46:9c:66:68:b8:e4:e9:
e9:50:00:7a:02:4b:8e:34:1a:e6:42:ff:17:61:8f:
bd:79:0a:1d:57:3d:d6:f2:f3:5d:23:83:18:86:7a:
73:bb:8e:ca:b9:ab:01:58:01:3f:2d:ba:78:8d:43:
e2:fe:ba:c3:11:a8:88:49:54:75:ce:ff:b7:9b:fd:
8c:7c:04:16:d9:2e:6b:61:1b:e8:66:54:04:6a:a9:
04:2b:22:7a:7f:bd:33:04:05:b2:94:7a:c2:f7:9d:
18:38:ef:f6:c9:66:b2:13:0a:6b:85:ab:34:5e:13:
01:41:59:40:f3:76:c6:0d:3e:95:fa:cb:00:ce:62:
28:99:42:71:c7:50:dc:a0:f2:ae:11:c1:eb:f4:0d:
16:c0:04:39:f7:03:34:79:43:e6:8f:09:be:bf:72:
7a:f7:1d:ab:7e:7f:18:7d:23:c0:02:be:5a:92:fd:
95:87:5e:be:d5:b3:65:21:2e:fe:a1:86:7b:38:a5:
e0:d0:d1:5e:b3:f5:d1:b3:5a:aa:80:a6:c3:db:b9:
32:35:e1:dd:fc:a5:b6:52:5d:76:6a:eb:26:b4:08:
ee:9c:a6:01:35:10:70:0d:60:e6:c9:76:18:29:bf:
72:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:59:6E:58:2F:0E:96:E3:A9:20:AE:D7:25:80:56:A5:10:29:C7:40
X509v3 Authority Key Identifier:
keyid:06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:45:43:1e:c8:b2:8d:83:77:d6:f4:48:95:9e:47:c1:f3:ab:
67:3a:b7:5c:81:f2:0a:61:9a:b9:e1:ff:46:f8:2d:33:38:1b:
3a:f4:40:8e:36:1f:7f:c7:fc:8e:35:4c:37:04:28:dd:73:21:
bc:d7:af:46:18:91:8f:a9:85:30:3f:5f:dc:16:42:63:c7:74:
b4:36:24:97:c3:07:76:3c:de:d9:29:f8:53:af:63:ba:c6:0f:
cd:99:cb:7f:ff:d5:b2:a4:e9:61:f7:7a:d5:cf:d8:a7:50:db:
8a:f0:db:5e:46:da:ec:7a:d3:e3:e3:e1:d9:36:78:bc:d2:34:
63:85:34:7b:d1:29:a5:9e:66:e9:04:9e:39:b1:03:91:e9:f9:
99:2f:9b:74:ac:06:4f:79:3f:97:63:b7:c9:f2:de:40:28:95:
a5:75:67:f8:96:77:20:11:58:91:8b:8b:74:72:7a:0e:88:7c:
df:0f:2c:78:7f:e4:1e:18:a5:91:1c:c4:53:55:88:b6:a8:54:
df:fc:f6:b1:4c:aa:0a:f7:00:e2:d3:ca:2a:ae:f8:eb:3d:5d:
83:6d:9e:62:04:d1:5d:53:9b:10:3b:8b:fb:22:7d:40:bc:7b:
05:4a:c8:65:bc:13:54:37:e2:a2:6e:10:b9:7e:70:72:66:95:
82:42:83:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 04:46:40 2025 by rpki-client