Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft
File: bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft (raw, json)
Hash identifier: xbgc5puBZlGSmrSAzTV5uTyiFMVY2tjlTEKzB1nPfmY=
Subject key identifier: BD:9E:CC:51:84:93:B5:60:16:8B:1E:8E:67:3B:64:81:9D:40:9C:D5
Authority key identifier: 6C:51:61:4B:6B:FB:6C:61:87:83:67:69:11:BD:F3:BC:82:9F:97:D7
Certificate issuer: /CN=6c51614b6bfb6c618783676911bdf3bc829f97d7
Certificate serial: 019849D3512C7CA1D22B4F6ADA9CBBD910C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFFhS2v7bGGHg2dpEb3zvIKfl9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft
Manifest number: 1293
Signing time: Sun 27 Jul 2025 03:00:42 +0000
Manifest this update: Sun 27 Jul 2025 03:00:42 +0000
Manifest next update: Mon 28 Jul 2025 03:00:42 +0000
Files and hashes: 1: bFFhS2v7bGGHg2dpEb3zvIKfl9c.crl (hash: 1Qrg7q/mIyD+GHuXP+zm9Ev6RO+J7xJditdeHGbBo68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFFhS2v7bGGHg2dpEb3zvIKfl9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:51:2c:7c:a1:d2:2b:4f:6a:da:9c:bb:d9:10:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c51614b6bfb6c618783676911bdf3bc829f97d7
Validity
Not Before: Jul 27 03:00:42 2025 GMT
Not After : Jul 28 03:00:42 2025 GMT
Subject: CN=bd9ecc518493b560168b1e8e673b64819d409cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6c:58:f5:32:99:f5:22:6c:7c:e2:0c:42:13:
14:fe:8f:68:76:c1:18:fb:ea:7f:f6:78:36:07:58:
cd:ca:d2:5d:b8:a5:b4:f3:fe:8e:c8:69:a0:6a:55:
53:89:b6:92:8f:83:29:d9:5e:3b:b7:81:4b:32:b9:
0a:c8:68:b5:72:0e:63:2e:49:56:c3:37:2e:5f:d2:
1b:e4:5a:c6:d8:30:08:60:73:50:a6:86:05:8b:63:
f3:f5:d7:35:59:59:23:4c:ca:df:4d:56:97:4f:dc:
07:f2:ae:fc:59:41:8c:52:89:76:fc:48:c8:b9:63:
f5:56:3c:2d:cb:2e:81:a5:49:8d:ed:cc:cf:c1:4a:
5e:48:c1:31:8e:12:c4:a0:89:6d:22:84:6c:02:ec:
c0:15:cb:30:f5:16:22:7d:8c:5c:26:80:3d:b5:52:
49:5e:63:e7:5e:37:11:8a:2b:a8:a8:70:37:dc:73:
e9:41:08:7e:a2:da:48:29:e0:2a:9c:e4:39:b3:46:
b0:92:3c:fe:6a:86:36:31:a1:dd:9a:a4:d0:f9:d6:
1c:15:b4:fc:95:11:73:c7:25:ef:11:0e:51:99:9c:
4b:fb:a9:28:92:96:c5:04:77:33:fa:a6:ce:d6:8e:
f6:9c:83:05:3c:fa:63:6a:3d:b6:0f:91:0f:1c:ac:
aa:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9E:CC:51:84:93:B5:60:16:8B:1E:8E:67:3B:64:81:9D:40:9C:D5
X509v3 Authority Key Identifier:
keyid:6C:51:61:4B:6B:FB:6C:61:87:83:67:69:11:BD:F3:BC:82:9F:97:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFFhS2v7bGGHg2dpEb3zvIKfl9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:19:84:f1:a6:15:ef:0c:8a:a5:90:3a:98:45:0a:28:7b:0b:
aa:71:c3:66:b1:76:ee:84:4a:21:6d:b9:ed:3a:da:c1:c9:d8:
66:8a:15:e7:dd:d9:97:c1:f4:26:b1:49:dd:97:18:a2:af:64:
0d:17:3f:8f:2c:35:db:ce:2e:4a:9d:83:22:a0:c9:dd:7b:1a:
8e:4c:46:0b:f3:33:7e:89:39:be:c1:e5:5d:1a:20:4e:16:1e:
08:f8:79:bb:7c:84:61:59:f4:ae:f0:bd:67:04:98:81:3c:63:
93:5a:15:7e:4c:02:29:2c:8d:e4:62:84:61:ab:55:d3:18:0b:
8e:c4:b3:13:70:50:1b:ea:7b:9f:95:f7:6d:2b:d2:24:d2:86:
85:a7:62:32:8d:27:ea:b6:4a:16:1e:ca:7e:6b:57:a8:76:48:
95:bf:3c:87:87:81:f4:4d:e3:4c:7f:03:94:04:64:20:29:10:
80:c9:d8:3c:45:1e:b9:b2:5f:a0:4c:c8:aa:d9:5f:3e:c2:8f:
3d:be:78:48:21:fb:ba:97:46:7d:21:3e:aa:a9:34:69:d9:3b:
7e:37:20:d8:6b:a9:56:d0:ed:ba:af:b0:c9:66:21:fc:9b:e9:
12:9d:2a:df:a5:8b:35:18:a1:21:61:d5:12:91:08:5e:6d:6e:
c2:65:e6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:42:32 2025 by rpki-client