Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
File: Be02xlZG2ssRSqcsG7y3QYG3_0M.mft (raw, json)
Hash identifier: 9m2faEoB61uGpLWbt21BsNxUdJZkjAC5DuMG1P9wq5Y=
Subject key identifier: 6B:CC:8A:DC:DC:D3:51:F0:E3:23:FA:AC:AF:08:4C:EE:24:28:D5:C2
Authority key identifier: 05:ED:36:C6:56:46:DA:CB:11:4A:A7:2C:1B:BC:B7:41:81:B7:FF:43
Certificate issuer: /CN=05ed36c65646dacb114aa72c1bbcb74181b7ff43
Certificate serial: 01976DE2CE28B1F7AD0ECAC477F87B10479E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
Manifest number: 10BC
Signing time: Sat 14 Jun 2025 10:01:09 +0000
Manifest this update: Sat 14 Jun 2025 10:01:09 +0000
Manifest next update: Sun 15 Jun 2025 10:01:09 +0000
Files and hashes: 1: Be02xlZG2ssRSqcsG7y3QYG3_0M.crl (hash: iIwiNhIx55J71WABtLaFPFVQDOVpVoZKRAb+dRv4oas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:e2:ce:28:b1:f7:ad:0e:ca:c4:77:f8:7b:10:47:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ed36c65646dacb114aa72c1bbcb74181b7ff43
Validity
Not Before: Jun 14 10:01:09 2025 GMT
Not After : Jun 15 10:01:09 2025 GMT
Subject: CN=6bcc8adcdcd351f0e323faacaf084cee2428d5c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:92:27:1d:28:29:24:83:00:c8:4c:59:01:c0:
80:73:08:e7:fe:83:5d:e3:ba:de:d2:b3:df:7d:fd:
df:16:b6:37:d1:67:86:76:c6:61:68:92:30:08:1a:
1f:49:35:cb:05:a3:52:d0:e8:a9:c0:e9:4a:be:e3:
be:37:a7:e4:8f:da:a0:c5:9f:48:0f:f8:57:2c:75:
58:d8:17:a8:08:e9:76:34:b0:5b:13:58:55:f5:b7:
eb:f6:5c:88:fe:b4:93:a4:e9:18:ba:9b:73:29:1a:
25:7a:e7:8a:0a:7f:18:56:71:4e:f4:b8:dd:84:98:
33:02:ae:69:e9:0f:00:a1:1a:88:16:aa:e3:b3:08:
f9:82:a3:b9:0a:3b:29:c7:32:92:d5:bf:cf:9f:ca:
2a:e5:7f:47:32:a7:fd:28:6b:b9:87:28:d7:7a:f4:
6c:5a:43:8e:ec:05:fb:0e:7b:70:17:7f:6c:d0:1e:
b3:a5:14:23:53:4f:03:fd:6f:4a:0f:a2:a0:69:37:
61:15:4d:78:bb:29:d6:3e:16:89:f0:d8:64:0e:2c:
ea:04:88:97:6b:0f:2a:b3:62:78:97:08:11:c1:60:
0b:94:db:ee:8c:c1:a7:08:96:eb:78:39:0f:c5:b5:
b4:5d:63:f9:fd:7e:6a:5c:06:34:d0:b9:0e:b7:8f:
66:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CC:8A:DC:DC:D3:51:F0:E3:23:FA:AC:AF:08:4C:EE:24:28:D5:C2
X509v3 Authority Key Identifier:
keyid:05:ED:36:C6:56:46:DA:CB:11:4A:A7:2C:1B:BC:B7:41:81:B7:FF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c6:5a:07:6b:17:e6:a3:d2:30:ca:7d:01:b1:ed:5b:6c:7d:
7d:4e:b9:23:67:24:8b:7d:b9:e9:22:98:d7:e2:fd:1e:61:fc:
58:d1:b4:36:57:d5:4e:2d:fb:45:5c:9a:76:43:dd:7c:85:21:
56:89:e4:a3:2c:2d:4d:10:1c:7e:1a:78:a2:ed:73:3e:ac:3c:
f5:7f:31:71:12:89:a6:08:22:12:96:a0:30:90:ec:d3:f5:d8:
ed:bb:18:65:24:78:24:c7:d5:00:84:f7:71:6c:9a:f8:cd:f6:
d1:64:e9:c6:cd:60:f3:d7:6b:35:83:1c:14:6b:22:17:17:ed:
31:4f:d0:90:e3:0d:62:7c:af:09:18:ec:30:ce:bc:b8:99:88:
65:1e:d5:94:18:48:db:43:72:18:1c:df:79:00:e5:ea:98:e0:
15:9f:bf:fd:bf:1c:b5:e7:8b:cd:48:0d:50:69:9b:d4:0e:fa:
31:a4:c0:c6:31:60:a5:1d:70:f2:c7:50:72:03:5e:db:51:00:
73:84:ce:f7:17:af:f6:a4:2e:a2:8b:1f:cb:f4:2c:09:3b:c9:
48:b6:d0:d6:71:15:67:1a:66:9a:24:2f:c8:8f:96:29:f7:9f:
43:d3:80:94:a6:84:1d:53:99:b4:ad:13:60:8e:5b:3e:4d:33:
c4:3a:86:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 16:30:06 2025 by rpki-client