Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
File: bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft (raw, json)
Hash identifier: FKJppeY0EJHCcaR0eYVRexX0Y2lMwecRzmgrb/FVAIo=
Subject key identifier: C3:4C:B3:5D:5C:62:D8:63:7F:1D:25:D8:B0:AB:51:38:FC:EB:E1:1B
Authority key identifier: 6D:00:51:98:B7:45:72:A1:56:AB:63:F2:30:85:89:7B:D3:CC:D4:1B
Certificate issuer: /CN=6d005198b74572a156ab63f23085897bd3ccd41b
Certificate serial: 019747E7CD453BE5068724CABBAFDB7D410B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
Manifest number: 01A0
Signing time: Sat 07 Jun 2025 01:01:03 +0000
Manifest this update: Sat 07 Jun 2025 01:01:03 +0000
Manifest next update: Sun 08 Jun 2025 01:01:03 +0000
Files and hashes: 1: bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl (hash: tRGkLwhIo5Zk+rtKrM4XE3+ljHvsv5hwpGoQomp4xpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:cd:45:3b:e5:06:87:24:ca:bb:af:db:7d:41:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d005198b74572a156ab63f23085897bd3ccd41b
Validity
Not Before: Jun 7 01:01:03 2025 GMT
Not After : Jun 8 01:01:03 2025 GMT
Subject: CN=c34cb35d5c62d8637f1d25d8b0ab5138fcebe11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:12:29:f7:64:86:1a:45:76:ed:ef:16:0e:48:
dd:41:71:b2:cf:ea:8b:db:51:59:cd:e3:f9:6a:81:
d7:89:53:63:d6:7e:3f:77:da:06:86:9c:b8:43:ed:
2a:f4:07:e9:64:47:17:76:70:5b:a6:e5:35:be:e8:
62:cb:66:ed:90:99:c1:99:e2:f4:12:60:b4:e4:2c:
e8:6c:8f:59:b5:0e:55:f6:b5:17:e4:af:82:97:2e:
88:bf:03:41:93:3b:96:3d:5e:24:32:d5:75:d2:10:
16:ed:4e:f3:04:7e:a6:22:8b:45:75:d4:9b:e2:79:
25:2b:79:66:34:dc:12:65:ea:2f:1f:b1:c3:4d:72:
15:fb:7f:15:5a:ba:58:c7:cf:c5:ae:4a:cd:70:7e:
49:9b:a5:c7:22:92:b1:eb:bb:17:1f:12:90:60:ee:
6d:4d:35:3e:dd:ca:2b:c4:76:8c:a5:cd:0c:c6:c7:
83:eb:2f:c7:e3:b2:71:ed:70:9a:33:e2:1f:12:07:
07:c4:43:2e:dc:4a:5d:5a:73:82:18:85:1b:aa:79:
8f:f6:62:c7:10:b0:dd:cb:64:1b:48:9f:18:7a:f2:
46:8f:46:a6:37:97:11:f9:55:25:3c:9a:e1:d7:f4:
95:63:5b:cb:fe:51:6e:13:8b:9d:c7:c1:82:6a:d1:
bc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:4C:B3:5D:5C:62:D8:63:7F:1D:25:D8:B0:AB:51:38:FC:EB:E1:1B
X509v3 Authority Key Identifier:
keyid:6D:00:51:98:B7:45:72:A1:56:AB:63:F2:30:85:89:7B:D3:CC:D4:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:8a:49:df:62:88:81:12:fd:79:24:e1:ff:15:a7:41:c4:65:
5c:10:93:8b:d1:78:2c:bb:62:e1:e8:9d:1a:f6:25:36:82:88:
2a:eb:04:3f:78:57:2e:a0:6f:50:07:c2:30:90:d3:d1:bc:a7:
88:ed:76:1d:1a:0f:d1:05:60:c7:15:f7:48:b2:2e:26:a0:8c:
86:31:a5:9f:94:eb:c5:40:fc:ae:17:6a:cc:44:40:50:c6:62:
9c:9a:2e:e6:1b:21:77:97:42:c6:35:51:c2:0e:5c:1e:21:66:
f2:2a:64:89:61:85:71:dd:13:03:a2:fb:94:98:8b:eb:ce:c9:
83:b4:3c:86:6f:85:66:a9:73:0e:70:1d:97:6f:fe:16:f9:eb:
fe:e0:d2:3d:32:b9:c5:41:6c:97:6c:b0:b0:c2:ec:74:65:f2:
68:d0:08:25:c7:06:8d:91:4f:64:8b:84:7d:ff:61:5f:d7:74:
6e:c5:ba:7f:d7:75:24:c7:3b:16:b8:00:99:34:02:aa:2a:57:
ef:11:bd:30:af:6a:5e:2c:9b:8f:a3:17:da:36:31:4e:c3:b5:
00:87:ce:39:0b:7a:6b:41:4e:be:98:cf:7f:5a:9b:35:57:51:
aa:1b:97:a6:15:bd:8a:24:c4:5d:35:21:b8:3e:d7:d6:a3:a7:
ba:41:1e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:01:29 2025 by rpki-client