Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft
File: y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft (raw, json)
Hash identifier: /4/BmSioortTvy2TL4L6kDFJrR4+sYJ1U7hh2KSC6t0=
Subject key identifier: 1B:6F:6A:58:BF:8C:81:17:0C:5F:40:E5:6B:CE:77:9D:3C:0A:79:70
Authority key identifier: CB:83:FB:FC:17:6C:D4:8E:BE:2F:2C:DE:9F:4C:01:ED:25:3B:BB:2D
Certificate issuer: /CN=cb83fbfc176cd48ebe2f2cde9f4c01ed253bbb2d
Certificate serial: 0196857F4371C3756ECB2522A07F0C1504F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4P7_Bds1I6-Lyzen0wB7SU7uy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft
Manifest number: 1516
Signing time: Wed 30 Apr 2025 07:00:32 +0000
Manifest this update: Wed 30 Apr 2025 07:00:32 +0000
Manifest next update: Thu 01 May 2025 07:00:32 +0000
Files and hashes: 1: y4P7_Bds1I6-Lyzen0wB7SU7uy0.crl (hash: jZS4Ngio433iTLsJTp+BuQeLz6E9urrQr86iF9Xptp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4P7_Bds1I6-Lyzen0wB7SU7uy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:7f:43:71:c3:75:6e:cb:25:22:a0:7f:0c:15:04:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb83fbfc176cd48ebe2f2cde9f4c01ed253bbb2d
Validity
Not Before: Apr 30 07:00:32 2025 GMT
Not After : May 1 07:00:32 2025 GMT
Subject: CN=1b6f6a58bf8c81170c5f40e56bce779d3c0a7970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f1:fd:20:32:47:3b:16:06:d3:7e:1d:4e:de:
1d:3d:17:7a:13:22:ed:8a:48:ae:60:e4:80:cd:a8:
ff:36:76:ad:89:5a:4e:9e:d2:17:41:e7:15:a0:d9:
15:28:79:b1:eb:5c:c2:97:1d:e3:56:f1:7c:83:8b:
9f:fd:64:c5:d4:a0:e5:e9:ab:c6:1b:02:8b:4c:3a:
47:52:c6:43:f1:4b:3a:24:23:41:de:0a:9a:7b:50:
4e:d4:e1:d9:8a:b0:fa:1e:76:dd:5d:88:01:4c:57:
a7:b4:58:66:6b:25:42:87:f0:ac:29:00:5a:1a:c6:
23:1d:3a:7d:75:75:f1:1e:9c:b5:44:0d:24:ff:99:
62:8f:d6:d1:6a:1a:8b:ad:cd:ed:9a:8e:23:59:cc:
f0:f1:86:8c:1d:5c:68:47:58:8c:5f:d4:bb:41:40:
b7:b3:89:e4:6c:4a:8a:4b:7b:e7:91:a6:71:f4:f4:
1e:b8:83:d0:4e:ff:20:ec:39:18:ba:34:ce:ce:bf:
03:ba:2b:3a:b2:1f:b2:2c:0e:7f:f9:bc:6a:3e:6d:
e9:61:47:3b:02:ce:53:d5:67:a5:5e:9d:24:54:30:
c0:67:a9:02:48:c1:f0:7d:50:70:7b:14:e5:50:a9:
d7:0b:69:c2:a8:f9:77:68:19:e7:a3:b4:70:0c:a9:
76:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6F:6A:58:BF:8C:81:17:0C:5F:40:E5:6B:CE:77:9D:3C:0A:79:70
X509v3 Authority Key Identifier:
keyid:CB:83:FB:FC:17:6C:D4:8E:BE:2F:2C:DE:9F:4C:01:ED:25:3B:BB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4P7_Bds1I6-Lyzen0wB7SU7uy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:d3:b9:9b:dc:ac:90:f9:a4:1f:e3:fb:ad:1f:f8:5b:6c:8d:
7d:19:b7:6e:97:66:c1:69:cb:f6:60:c7:e7:11:2d:38:51:f9:
f0:3d:7e:4d:22:67:94:e1:80:7a:d4:5c:8e:97:c2:d6:fc:d7:
68:26:a4:eb:ac:91:25:79:f4:22:73:37:16:08:4c:b7:6b:f2:
e0:87:00:88:a4:39:b4:d2:4e:78:7c:36:bd:0b:17:93:bc:de:
26:e3:51:24:49:c0:e4:32:8a:c6:35:d8:28:4c:24:c8:19:0c:
fd:6f:ae:8e:e8:75:2b:ea:a1:73:09:30:dd:fd:6f:c4:a3:ac:
7c:8c:a1:f6:0d:f5:31:48:74:6c:cc:b0:b2:c0:40:15:67:50:
22:5b:bc:e1:f4:b5:3f:fa:e9:3c:05:74:2f:2a:47:62:e8:7e:
c9:ae:12:66:80:f9:dc:b9:c7:58:57:74:8f:39:a5:f6:22:0d:
28:8a:19:cf:78:03:47:fb:04:06:a2:62:24:19:00:12:5b:de:
f8:1d:ea:6b:3a:3f:ba:99:4a:26:d0:05:43:77:67:53:72:ca:
bf:a7:df:d6:aa:b6:7f:5e:d1:f2:bd:e0:24:d2:59:82:9e:d7:
0b:0f:f3:e9:a3:b6:5f:94:7c:6e:bd:58:ea:c4:ca:2d:02:33:
ca:3b:cf:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 10:10:43 2025 by rpki-client