Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft
File: bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft (raw, json)
Hash identifier: uX6OKYmXCr0gSQjMSwzSEWd9DiGvzHj2a0/EMILjhDo=
Subject key identifier: 28:51:74:0B:90:6F:15:21:1D:73:17:FE:CB:C3:0E:CE:17:31:68:77
Authority key identifier: 6D:85:06:13:61:B1:9F:21:2E:FE:90:C2:D8:CF:3E:EE:61:7F:20:E5
Certificate issuer: /CN=6d85061361b19f212efe90c2d8cf3eee617f20e5
Certificate serial: 01976D74535C2C880DEF5E5D39F0CC539E98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft
Manifest number: 12A9
Signing time: Sat 14 Jun 2025 08:00:29 +0000
Manifest this update: Sat 14 Jun 2025 08:00:29 +0000
Manifest next update: Sun 15 Jun 2025 08:00:29 +0000
Files and hashes: 1: bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl (hash: cHlSwRCn/ywqNSSdgwKKw8TTH/THyz4Cn/TElXmOhs8=)
2: tI868MCQG893IS8cCKhA3Gnv9u4.roa (hash: AVSP0s3nbiSWpz8l7ynDbY6/apcfYdcvmQMyPra2nQw=)
3: vbdcw7rpmrydbe9PtiZ8KiYrMI4.roa (hash: 1hwqdUZaDaq1TdQxzfadCtp2CrZa+i6RSIuk/ctbIuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:53:5c:2c:88:0d:ef:5e:5d:39:f0:cc:53:9e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d85061361b19f212efe90c2d8cf3eee617f20e5
Validity
Not Before: Jun 14 08:00:29 2025 GMT
Not After : Jun 15 08:00:29 2025 GMT
Subject: CN=2851740b906f15211d7317fecbc30ece17316877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f2:62:73:ed:0d:39:f3:a3:56:f0:44:b4:c7:
0e:21:f3:ae:fb:26:af:3b:8a:bc:0a:85:eb:bb:cd:
9d:5a:01:47:9e:35:fb:d7:9a:58:0a:d9:3f:fc:00:
73:b0:99:f2:6e:f7:b1:3d:1b:5c:88:22:80:54:e6:
2b:1e:37:b1:46:99:43:e3:d1:67:6a:e4:38:35:92:
2d:3e:c3:b6:e2:43:10:f9:cf:e5:da:88:98:af:da:
30:b9:a5:62:95:5d:de:67:69:3a:57:44:7f:62:bb:
22:9b:4c:10:77:d1:12:05:01:ce:a0:91:92:d7:cb:
fa:ae:44:f8:d5:99:37:e6:5c:57:f9:6f:b0:e7:0d:
b2:cd:24:c6:8d:c5:5c:28:91:87:4e:ba:e8:d4:4c:
7e:38:31:1b:b2:e7:d2:d9:e5:54:69:ae:85:a1:23:
3d:d8:45:10:57:4a:30:48:be:da:3d:40:ec:45:8a:
95:d6:1e:53:00:a1:c1:a9:60:c0:6d:d4:b3:92:0e:
77:4f:ad:e8:e0:cb:91:7f:0d:25:fd:6a:ea:9f:06:
13:04:82:d6:02:76:e7:f5:96:c1:79:fb:76:1b:d5:
79:3c:cf:76:7c:0c:e9:6a:93:98:5d:71:fb:e3:46:
9a:f4:fa:0c:02:1b:db:77:b9:a5:f5:b2:40:cb:9c:
03:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:51:74:0B:90:6F:15:21:1D:73:17:FE:CB:C3:0E:CE:17:31:68:77
X509v3 Authority Key Identifier:
keyid:6D:85:06:13:61:B1:9F:21:2E:FE:90:C2:D8:CF:3E:EE:61:7F:20:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:f0:fc:b0:a1:25:ae:77:49:01:ff:bc:d5:fa:74:c0:ab:66:
a8:c7:d3:d8:83:a9:8d:81:1d:e6:72:cb:0c:c7:7a:59:a8:0c:
86:32:f8:e2:f1:e7:d7:78:47:04:b5:8d:44:c5:08:9d:ad:19:
c4:8e:ca:36:ef:c6:50:ae:50:dd:6e:1e:f9:47:1b:d2:88:d9:
45:8a:20:d5:f1:2c:91:df:dd:48:61:d6:a7:6e:58:ed:39:70:
df:cc:5f:30:f5:0e:b5:16:77:a3:76:ed:23:5b:95:f8:e4:30:
6f:c8:5e:ee:00:dd:7d:e1:9f:bc:ee:1b:43:a2:19:1d:57:0b:
82:5d:af:de:23:52:f1:57:5b:b1:e0:8e:44:89:50:64:a6:b6:
17:5b:1f:23:02:92:9b:e8:8d:cf:50:50:05:e5:d6:d1:b3:d2:
9c:2a:73:9f:ae:d2:e6:a0:db:dc:37:4b:56:d8:a9:2b:c4:c0:
5f:55:b3:07:34:6c:93:ef:5e:99:0a:2a:d3:45:0f:8b:cc:29:
54:bb:9f:c3:e9:dd:2f:d8:6e:5d:d1:bc:24:29:bd:58:80:4e:
e5:17:14:7c:bc:55:b0:27:5d:5b:34:93:8c:db:fe:39:cf:4e:
2c:a0:ea:0b:df:a4:c3:bf:14:8e:0a:a9:9f:b9:dd:57:64:ba:
2c:df:39:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:43:43 2025 by rpki-client