Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft
File: baDun_CcfPx-6XYfGjyPMO-sWEg.mft (raw, json)
Hash identifier: tBC8akLjkmfwfdzfvixJhciyJA+kuX6x1JJ397zbCMw=
Subject key identifier: 9A:36:BF:C8:E3:A5:70:91:C8:D6:03:BB:8F:18:B8:F6:1B:9F:4A:2C
Authority key identifier: 6D:A0:EE:9F:F0:9C:7C:FC:7E:E9:76:1F:1A:3C:8F:30:EF:AC:58:48
Certificate issuer: /CN=6da0ee9ff09c7cfc7ee9761f1a3c8f30efac5848
Certificate serial: 01984889804027FB78FFAC1455F3D1548598
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft
Manifest number: 0A3D
Signing time: Sat 26 Jul 2025 21:00:27 +0000
Manifest this update: Sat 26 Jul 2025 21:00:27 +0000
Manifest next update: Sun 27 Jul 2025 21:00:27 +0000
Files and hashes: 1: baDun_CcfPx-6XYfGjyPMO-sWEg.crl (hash: TXgFG2iFSMOiBOo9oN8Mrpfz7KSl9raeLrSZvslgVgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:80:40:27:fb:78:ff:ac:14:55:f3:d1:54:85:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6da0ee9ff09c7cfc7ee9761f1a3c8f30efac5848
Validity
Not Before: Jul 26 21:00:27 2025 GMT
Not After : Jul 27 21:00:27 2025 GMT
Subject: CN=9a36bfc8e3a57091c8d603bb8f18b8f61b9f4a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4e:fd:95:99:62:93:e6:df:3a:95:78:3d:94:
10:f6:92:5c:f9:38:fc:66:31:a2:64:7c:23:30:09:
c2:07:18:e7:ae:65:75:0c:f4:4d:05:a5:04:41:53:
26:73:cd:ce:d6:36:cf:02:90:f7:6e:7f:2c:2e:f5:
ea:ef:e3:0b:dc:9c:c8:84:53:03:0c:94:4c:5f:23:
92:0b:4d:7c:62:27:ce:72:77:c6:40:14:88:64:3a:
1e:29:5c:0f:19:1d:e3:60:58:05:58:05:96:89:e3:
01:60:8d:6e:52:8f:5e:fc:a0:44:73:5e:a6:45:b6:
81:0e:21:a2:20:67:36:8b:a3:fe:39:09:31:68:98:
b4:b3:b0:9c:45:64:b5:8c:a0:04:81:0c:eb:43:72:
b5:bc:a4:cc:29:18:9f:4e:11:53:7d:19:ec:5d:01:
2b:c1:eb:88:b2:41:72:b4:c7:f2:25:b8:a8:28:ac:
85:a1:90:a0:99:a8:10:fd:16:1b:3d:58:0f:3c:cd:
e8:47:e7:ff:80:d4:48:46:8a:bb:d6:9b:f1:6d:71:
01:ae:d9:aa:d2:dc:6d:f5:5f:0a:99:41:81:fe:e2:
d0:16:f1:6a:a0:75:f2:3f:a6:16:b6:0b:d3:69:fe:
95:2c:2d:f6:e2:99:92:65:f4:19:fa:cc:c8:0a:49:
4e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:36:BF:C8:E3:A5:70:91:C8:D6:03:BB:8F:18:B8:F6:1B:9F:4A:2C
X509v3 Authority Key Identifier:
keyid:6D:A0:EE:9F:F0:9C:7C:FC:7E:E9:76:1F:1A:3C:8F:30:EF:AC:58:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:96:59:e2:ab:da:b1:62:56:d9:e5:7b:59:e4:97:1d:5f:b1:
fa:e3:05:ee:b3:e8:e3:c2:49:eb:1f:5c:64:78:48:72:26:18:
41:71:c6:36:b5:4b:38:d5:aa:56:77:78:71:b5:0a:b0:60:a6:
f0:59:f5:b3:98:1a:a1:18:f2:84:8d:b2:1b:f0:58:15:e7:6f:
e9:cd:19:9b:0e:c5:16:f1:b5:91:11:e2:3e:62:e2:b0:51:ba:
ea:c7:0a:68:47:f9:59:c5:c4:b5:62:e8:2a:77:28:14:e6:6f:
43:e8:9a:a5:7f:23:c5:eb:e3:90:53:90:9c:ae:d9:cf:06:fa:
4b:66:ec:cb:9e:7d:b3:a6:71:fa:33:86:37:09:ad:9a:73:1b:
51:e0:58:97:a0:82:4e:ff:b9:98:39:7a:18:bc:f7:c7:e3:d9:
68:75:9d:47:66:14:5b:5d:dd:8b:53:3c:58:91:b0:2b:83:86:
31:b5:c1:30:84:2a:f0:36:65:d4:5c:b5:87:31:2e:31:2d:92:
0a:85:76:e6:0b:1e:67:f0:09:a2:4e:6b:f8:d5:95:46:e8:89:
2c:98:57:f1:35:98:5c:af:ec:cd:3b:10:77:3c:bf:2e:8c:a8:
68:ba:a0:a9:80:65:ab:6e:e9:69:86:76:48:71:17:0b:02:57:
56:41:8b:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIiYBAJ/t4/6wUVfPRVIWYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkYTBlZTlmZjA5YzdjZmM3ZWU5NzYxZjFhM2M4ZjMwZWZh
YzU4NDgwHhcNMjUwNzI2MjEwMDI3WhcNMjUwNzI3MjEwMDI3WjAzMTEwLwYDVQQD
Eyg5YTM2YmZjOGUzYTU3MDkxYzhkNjAzYmI4ZjE4YjhmNjFiOWY0YTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz079lZlik+bfOpV4PZQQ9pJc+Tj8
ZjGiZHwjMAnCBxjnrmV1DPRNBaUEQVMmc83O1jbPApD3bn8sLvXq7+ML3JzIhFMD
DJRMXyOSC018YifOcnfGQBSIZDoeKVwPGR3jYFgFWAWWieMBYI1uUo9e/KBEc16m
RbaBDiGiIGc2i6P+OQkxaJi0s7CcRWS1jKAEgQzrQ3K1vKTMKRifThFTfRnsXQEr
weuIskFytMfyJbioKKyFoZCgmagQ/RYbPVgPPM3oR+f/gNRIRoq71pvxbXEBrtmq
0txt9V8KmUGB/uLQFvFqoHXyP6YWtgvTaf6VLC324pmSZfQZ+szICklOWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJo2v8jjpXCRyNYDu48YuPYbn0osMB8GA1UdIwQY
MBaAFG2g7p/wnHz8ful2Hxo8jzDvrFhIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmFEdW5fQ2NmUHgtNlhZZkdqeVBNTy1zV0VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy80ZjdiYjktNGQ2OS00OWRlLTlhNDkt
YTRkOWRjNzZjMmI4LzEvYmFEdW5fQ2NmUHgtNlhZZkdqeVBNTy1zV0VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy80ZjdiYjktNGQ2OS00OWRlLTlhNDktYTRkOWRjNzZjMmI4
LzEvYmFEdW5fQ2NmUHgtNlhZZkdqeVBNTy1zV0VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnJZZ4qva
sWJW2eV7WeSXHV+x+uMF7rPo48JJ6x9cZHhIciYYQXHGNrVLONWqVnd4cbUKsGCm
8Fn1s5gaoRjyhI2yG/BYFedv6c0Zmw7FFvG1kRHiPmLisFG66scKaEf5WcXEtWLo
KncoFOZvQ+iapX8jxevjkFOQnK7Zzwb6S2bsy559s6Zx+jOGNwmtmnMbUeBYl6CC
Tv+5mDl6GLz3x+PZaHWdR2YUW13di1M8WJGwK4OGMbXBMIQq8DZl1Fy1hzEuMS2S
CoV25gseZ/AJok5r+NWVRuiJLJhX8TWYXK/szTsQdzy/LoyoaLqgqYBlq27paYZ2
SHEXCwJXVkGLsw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:21:49 2025 by rpki-client