Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/67a63a-1a03-4822-ac9e-3d4205f5e2d3/1/a_CO0PpuGTufOlC_cmtB0MMpspc.mft
File: a_CO0PpuGTufOlC_cmtB0MMpspc.mft (raw, json)
Hash identifier: iByF83v0XrNnM+45w90wMlP7X+9hcF9JJn6vT57ZVf4=
Subject key identifier: BF:95:4A:A7:EC:E4:0E:CA:D3:23:AF:B1:78:6E:86:0A:4A:98:8B:23
Authority key identifier: 6B:F0:8E:D0:FA:6E:19:3B:9F:3A:50:BF:72:6B:41:D0:C3:29:B2:97
Certificate issuer: /CN=6bf08ed0fa6e193b9f3a50bf726b41d0c329b297
Certificate serial: 0197481E4CFECF6C73E43B599CF7934F4FEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_CO0PpuGTufOlC_cmtB0MMpspc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/67a63a-1a03-4822-ac9e-3d4205f5e2d3/1/a_CO0PpuGTufOlC_cmtB0MMpspc.mft
Manifest number: 016B
Signing time: Sat 07 Jun 2025 02:00:34 +0000
Manifest this update: Sat 07 Jun 2025 02:00:34 +0000
Manifest next update: Sun 08 Jun 2025 02:00:34 +0000
Files and hashes: 1: a_CO0PpuGTufOlC_cmtB0MMpspc.crl (hash: yEYv9AIlXy0dRoO9sBZ/8llQy6jsYOuGZcxYsHWhdsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/67a63a-1a03-4822-ac9e-3d4205f5e2d3/1/a_CO0PpuGTufOlC_cmtB0MMpspc.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/67a63a-1a03-4822-ac9e-3d4205f5e2d3/1/a_CO0PpuGTufOlC_cmtB0MMpspc.mft
rsync://rpki.ripe.net/repository/DEFAULT/a_CO0PpuGTufOlC_cmtB0MMpspc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:4c:fe:cf:6c:73:e4:3b:59:9c:f7:93:4f:4f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bf08ed0fa6e193b9f3a50bf726b41d0c329b297
Validity
Not Before: Jun 7 02:00:34 2025 GMT
Not After : Jun 8 02:00:34 2025 GMT
Subject: CN=bf954aa7ece40ecad323afb1786e860a4a988b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d5:70:44:53:73:2f:3b:21:df:a5:df:06:56:
1d:58:2c:15:66:dd:90:dd:7e:b1:dc:82:30:b0:f4:
ae:01:db:28:d0:8f:7b:6f:7f:7d:63:fb:a5:f9:a5:
bd:6d:5c:c9:b5:16:c5:9f:e1:03:c9:52:3a:a1:7f:
5f:d5:06:53:b8:92:9a:4a:5a:2b:16:8f:85:e5:b9:
23:27:40:9d:15:b1:59:c4:db:76:12:42:8b:54:69:
06:19:16:cd:ae:93:db:94:24:24:3f:cd:5c:de:56:
bb:d0:29:a8:bb:cd:43:24:3c:29:ee:97:0e:75:be:
65:68:b3:1c:98:8b:7e:3b:53:22:15:5d:80:6e:fe:
cc:d1:71:b2:75:39:64:7d:b5:a0:d1:01:de:34:70:
a3:9a:82:9b:db:91:fb:bd:bc:00:34:47:0f:a0:d1:
fa:66:cb:51:75:e9:9a:46:be:5a:1b:5c:1d:d9:2c:
6f:cf:f1:63:80:4e:a6:21:6f:ef:c7:de:08:65:28:
1a:12:1f:8f:8d:df:f1:c9:f9:98:a6:cc:24:db:a1:
a2:19:2b:f1:29:5b:82:7d:15:35:e9:75:45:14:55:
f9:da:46:9b:30:f1:bf:e2:be:d4:74:cc:93:ee:5e:
79:b2:a1:5b:16:a3:3b:56:68:f9:c2:d5:40:61:7e:
4b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:95:4A:A7:EC:E4:0E:CA:D3:23:AF:B1:78:6E:86:0A:4A:98:8B:23
X509v3 Authority Key Identifier:
keyid:6B:F0:8E:D0:FA:6E:19:3B:9F:3A:50:BF:72:6B:41:D0:C3:29:B2:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_CO0PpuGTufOlC_cmtB0MMpspc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/67a63a-1a03-4822-ac9e-3d4205f5e2d3/1/a_CO0PpuGTufOlC_cmtB0MMpspc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/67a63a-1a03-4822-ac9e-3d4205f5e2d3/1/a_CO0PpuGTufOlC_cmtB0MMpspc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:a4:f0:b9:93:cb:5e:27:a5:01:31:09:b1:ed:9d:e7:e8:42:
68:df:f8:64:8a:9d:92:09:8c:cf:30:1d:3e:67:0f:20:48:e7:
b0:07:ff:7e:66:24:c0:3a:a4:26:e6:29:c8:2f:bf:98:a4:dd:
05:77:e4:a6:0a:82:bc:4e:81:c4:fc:df:61:68:67:bf:39:df:
68:ba:42:0a:b2:2f:9d:40:99:bd:e2:4a:78:b9:50:9c:93:61:
50:0f:4a:d0:f2:40:26:d9:9b:b8:60:31:70:76:50:8d:76:19:
e1:f7:e3:8a:d5:5b:00:e1:8d:e8:48:d7:c2:7e:0b:b4:49:e9:
16:c0:0f:77:b6:f0:d1:f3:b5:7f:7f:df:9d:db:df:3c:26:67:
90:80:c5:78:74:02:ec:7f:7d:5e:73:50:7b:9c:d9:b0:d8:ee:
74:40:33:de:4f:82:d9:15:f1:0d:3f:1f:90:cb:2a:36:db:77:
f5:29:4e:14:04:48:80:f4:e3:11:bb:ea:b3:20:0f:ac:92:5a:
cd:bd:d0:5a:f6:08:71:2d:65:2c:7a:c5:60:0a:a8:f3:c8:fb:
ee:2a:7b:2e:2e:87:5c:d3:c8:74:cb:20:39:d0:18:99:ec:4d:
13:56:b0:dd:4e:38:81:ce:5f:8c:18:a8:c8:30:0e:ab:22:2b:
c6:e2:9f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:12:52 2025 by rpki-client