Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/d4ef16-2795-4f39-9be9-6175e83c6a2b/1/BLYeUUDNiYT3_iAQ21nr2y8-1OY.mft
File: BLYeUUDNiYT3_iAQ21nr2y8-1OY.mft (raw, json)
Hash identifier: M+NPS1Pe5EVf2L2npZUeSHa7iNSC574XEujaopvXe1A=
Subject key identifier: 0A:47:27:15:B3:E5:D5:0A:5D:CD:CE:03:E3:D9:37:C1:31:A7:96:2C
Authority key identifier: 04:B6:1E:51:40:CD:89:84:F7:FE:20:10:DB:59:EB:DB:2F:3E:D4:E6
Certificate issuer: /CN=04b61e5140cd8984f7fe2010db59ebdb2f3ed4e6
Certificate serial: 019679EA1BB931311F7502050392DC972120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BLYeUUDNiYT3_iAQ21nr2y8-1OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/d4ef16-2795-4f39-9be9-6175e83c6a2b/1/BLYeUUDNiYT3_iAQ21nr2y8-1OY.mft
Manifest number: 0B69
Signing time: Mon 28 Apr 2025 01:01:47 +0000
Manifest this update: Mon 28 Apr 2025 01:01:47 +0000
Manifest next update: Tue 29 Apr 2025 01:01:47 +0000
Files and hashes: 1: BLYeUUDNiYT3_iAQ21nr2y8-1OY.crl (hash: xD3FL5JG9pS5gJVkfHiUSuCM2idoHcD6bvDerIaTKvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/d4ef16-2795-4f39-9be9-6175e83c6a2b/1/BLYeUUDNiYT3_iAQ21nr2y8-1OY.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/d4ef16-2795-4f39-9be9-6175e83c6a2b/1/BLYeUUDNiYT3_iAQ21nr2y8-1OY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BLYeUUDNiYT3_iAQ21nr2y8-1OY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:ea:1b:b9:31:31:1f:75:02:05:03:92:dc:97:21:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04b61e5140cd8984f7fe2010db59ebdb2f3ed4e6
Validity
Not Before: Apr 28 01:01:47 2025 GMT
Not After : Apr 29 01:01:47 2025 GMT
Subject: CN=0a472715b3e5d50a5dcdce03e3d937c131a7962c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4b:af:30:d8:6e:4c:03:f6:cd:32:0a:38:b7:
f0:78:21:be:3f:52:9f:d1:ec:26:bc:09:80:e6:37:
b0:76:a9:00:c1:15:b0:8b:2e:7e:a4:0b:3a:38:e7:
45:11:66:58:ce:7e:a8:20:63:fb:59:ec:8d:13:28:
17:46:88:e0:3d:ba:6d:48:10:53:3d:fc:d1:00:29:
9c:17:33:3f:c6:40:7a:6f:5c:1b:19:2a:24:f7:33:
d7:02:b4:ee:9d:50:4b:43:d0:f4:45:66:13:69:8a:
45:66:6f:5f:26:88:25:7b:43:59:b7:fa:53:de:3a:
a1:72:b3:d1:7f:05:f2:f4:5e:b3:69:34:08:7e:29:
bb:16:d7:e6:4e:3c:fa:49:76:3f:60:ac:3e:e8:75:
b4:cd:52:07:d1:8a:1a:9f:12:55:76:7d:91:1f:2d:
38:d2:2c:f5:b1:29:b8:74:06:39:96:07:cb:3a:39:
82:89:26:d7:e6:ef:9d:c5:1f:7e:fb:34:3d:15:5e:
f1:64:22:98:39:fd:bf:42:f9:ca:0f:a4:12:b4:98:
31:41:42:0b:8e:11:09:cc:01:85:ba:dc:30:0a:64:
00:c3:d9:ec:c0:6c:ce:ed:44:92:c1:87:8a:1f:80:
6d:74:12:61:a2:90:6f:57:69:5e:94:51:7a:81:85:
e0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:47:27:15:B3:E5:D5:0A:5D:CD:CE:03:E3:D9:37:C1:31:A7:96:2C
X509v3 Authority Key Identifier:
keyid:04:B6:1E:51:40:CD:89:84:F7:FE:20:10:DB:59:EB:DB:2F:3E:D4:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLYeUUDNiYT3_iAQ21nr2y8-1OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/d4ef16-2795-4f39-9be9-6175e83c6a2b/1/BLYeUUDNiYT3_iAQ21nr2y8-1OY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/d4ef16-2795-4f39-9be9-6175e83c6a2b/1/BLYeUUDNiYT3_iAQ21nr2y8-1OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:69:3b:44:3c:3d:f7:cc:d3:fe:a9:d8:f0:d5:cf:8a:05:0e:
6b:a5:bd:3f:a3:39:8c:85:be:a2:fc:82:30:34:be:78:2f:cb:
ed:da:eb:63:c4:2c:8c:45:75:bc:92:a5:ba:f0:c6:4c:c7:b9:
74:9b:6e:46:b7:26:c7:71:0e:ee:54:6b:d5:73:7e:d6:bf:c4:
ae:80:a6:39:02:c4:83:7a:7b:be:d2:aa:3b:7e:8d:41:40:44:
07:fd:5b:49:a3:dc:16:98:c8:29:b6:14:e0:73:4e:2e:4c:ce:
77:aa:84:26:9f:9f:81:b1:42:18:2f:0b:e6:bf:3b:a0:f7:4b:
05:d4:fe:4c:40:db:98:12:37:4d:dd:d0:3b:ef:9d:19:ea:c7:
0d:ff:30:5b:bb:bc:8a:d2:aa:a6:1b:30:c0:5e:6a:2f:3b:fe:
7a:06:04:66:86:c8:ef:0e:2b:63:27:74:53:eb:67:23:98:65:
65:39:43:24:29:6e:e4:4b:db:16:65:e3:f3:30:59:bc:49:31:
41:98:65:78:4f:c8:aa:4a:ae:d1:14:45:8a:5a:90:ee:51:2b:
39:a6:79:57:a1:70:2b:3e:f0:78:cd:1b:0c:c9:fc:4f:52:7c:
93:7b:2e:49:f1:83:2d:ed:92:2d:4b:46:e0:af:2d:f4:40:71:
05:52:01:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ56hu5MTEfdQIFA5LclyEgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YjYxZTUxNDBjZDg5ODRmN2ZlMjAxMGRiNTllYmRiMmYz
ZWQ0ZTYwHhcNMjUwNDI4MDEwMTQ3WhcNMjUwNDI5MDEwMTQ3WjAzMTEwLwYDVQQD
EygwYTQ3MjcxNWIzZTVkNTBhNWRjZGNlMDNlM2Q5MzdjMTMxYTc5NjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EuvMNhuTAP2zTIKOLfweCG+P1Kf
0ewmvAmA5jewdqkAwRWwiy5+pAs6OOdFEWZYzn6oIGP7WeyNEygXRojgPbptSBBT
PfzRACmcFzM/xkB6b1wbGSok9zPXArTunVBLQ9D0RWYTaYpFZm9fJogle0NZt/pT
3jqhcrPRfwXy9F6zaTQIfim7FtfmTjz6SXY/YKw+6HW0zVIH0YoanxJVdn2RHy04
0iz1sSm4dAY5lgfLOjmCiSbX5u+dxR9++zQ9FV7xZCKYOf2/QvnKD6QStJgxQUIL
jhEJzAGFutwwCmQAw9nswGzO7USSwYeKH4BtdBJhopBvV2lelFF6gYXgzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApHJxWz5dUKXc3OA+PZN8Exp5YsMB8GA1UdIwQY
MBaAFAS2HlFAzYmE9/4gENtZ69svPtTmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkxZZVVVRE5pWVQzX2lBUTIxbnIyeTgtMU9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9kNGVmMTYtMjc5NS00ZjM5LTliZTkt
NjE3NWU4M2M2YTJiLzEvQkxZZVVVRE5pWVQzX2lBUTIxbnIyeTgtMU9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9kNGVmMTYtMjc5NS00ZjM5LTliZTktNjE3NWU4M2M2YTJi
LzEvQkxZZVVVRE5pWVQzX2lBUTIxbnIyeTgtMU9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEWk7RDw9
98zT/qnY8NXPigUOa6W9P6M5jIW+ovyCMDS+eC/L7drrY8QsjEV1vJKluvDGTMe5
dJtuRrcmx3EO7lRr1XN+1r/EroCmOQLEg3p7vtKqO36NQUBEB/1bSaPcFpjIKbYU
4HNOLkzOd6qEJp+fgbFCGC8L5r87oPdLBdT+TEDbmBI3Td3QO++dGerHDf8wW7u8
itKqphswwF5qLzv+egYEZobI7w4rYyd0U+tnI5hlZTlDJClu5EvbFmXj8zBZvEkx
QZhleE/Iqkqu0RRFilqQ7lErOaZ5V6FwKz7weM0bDMn8T1J8k3suSfGDLe2SLUtG
4K8t9EBxBVIBFw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 03:57:21 2025 by rpki-client