Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.mft
File: buKspS4zrI1YnzIhdZLNHmm_cEw.mft (raw, json)
Hash identifier: xHZklp76vhDirBUzBW6cCNcLpOPQA7TLB4nQcH/J04g=
Subject key identifier: 31:C9:2D:CD:12:F3:8F:9F:13:CC:4F:A4:99:34:CC:10:08:96:63:EA
Authority key identifier: 6E:E2:AC:A5:2E:33:AC:8D:58:9F:32:21:75:92:CD:1E:69:BF:70:4C
Certificate issuer: /CN=6ee2aca52e33ac8d589f32217592cd1e69bf704c
Certificate serial: 01984A0A52E395482767AE15E1A228DA6F24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/buKspS4zrI1YnzIhdZLNHmm_cEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.mft
Manifest number: 15FE
Signing time: Sun 27 Jul 2025 04:00:47 +0000
Manifest this update: Sun 27 Jul 2025 04:00:47 +0000
Manifest next update: Mon 28 Jul 2025 04:00:47 +0000
Files and hashes: 1: buKspS4zrI1YnzIhdZLNHmm_cEw.crl (hash: RrzdAcePqBFOWBdhE1eKAlzeRChmgP3HL/q2BBaiWZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/buKspS4zrI1YnzIhdZLNHmm_cEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:52:e3:95:48:27:67:ae:15:e1:a2:28:da:6f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ee2aca52e33ac8d589f32217592cd1e69bf704c
Validity
Not Before: Jul 27 04:00:47 2025 GMT
Not After : Jul 28 04:00:47 2025 GMT
Subject: CN=31c92dcd12f38f9f13cc4fa49934cc10089663ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3b:cc:15:96:9c:d7:32:c2:e1:66:03:72:80:
a2:17:17:44:6c:8c:4f:6a:4c:9f:80:f6:1e:0c:59:
34:c5:e2:6b:6f:f8:34:08:01:85:d9:71:e4:33:e9:
f2:00:3b:72:2c:70:0d:82:bc:44:82:85:64:23:5b:
4b:c0:26:57:4f:c4:33:d3:7a:00:85:e0:65:ab:98:
88:27:64:0a:03:e4:26:09:8f:6e:1f:50:9e:e4:49:
63:08:b4:92:4d:11:90:64:84:84:c3:e4:e7:8f:bd:
f1:f6:e9:16:6f:e8:81:77:dd:be:8b:05:d1:fc:3b:
65:df:6e:ff:1d:7b:e0:d7:e3:54:ea:42:9d:db:fb:
5a:31:62:83:7f:66:65:0c:9a:eb:fd:30:23:cb:16:
4e:50:bf:e2:2b:38:eb:00:28:46:d4:69:2b:0e:3e:
12:02:dc:49:ea:98:74:dc:e4:5f:5b:79:44:31:42:
79:1b:67:af:a5:ee:7e:72:4c:0d:23:38:1c:c4:a8:
41:a5:7f:5a:ac:8a:35:bc:ed:a8:7d:95:7f:e9:e3:
73:53:ad:d1:ef:95:1a:2b:fd:30:47:8d:38:05:79:
6a:6d:f5:fe:3b:f6:06:bf:2b:d9:17:72:75:f9:27:
34:af:65:9f:97:90:0c:cc:c9:ae:43:44:d3:0a:88:
14:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C9:2D:CD:12:F3:8F:9F:13:CC:4F:A4:99:34:CC:10:08:96:63:EA
X509v3 Authority Key Identifier:
keyid:6E:E2:AC:A5:2E:33:AC:8D:58:9F:32:21:75:92:CD:1E:69:BF:70:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/buKspS4zrI1YnzIhdZLNHmm_cEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ef:b9:b2:b4:9b:3a:83:05:a9:ea:f4:fb:54:fd:7e:56:8f:45:
be:6f:c8:a1:d3:a0:a6:10:f2:71:27:ea:c2:a6:ac:7a:b9:a6:
a8:89:37:8d:bc:39:7a:0b:4e:25:0f:21:b2:59:74:71:de:39:
da:03:aa:b6:7d:7d:6c:91:a5:17:8a:e4:a5:9c:fb:12:cd:e4:
2b:30:d7:0d:40:cc:f4:ad:96:4c:fe:30:ae:ae:d8:6a:ec:00:
da:be:ee:47:28:4d:af:60:b2:4a:69:14:db:21:72:6e:41:3a:
e7:68:2f:8e:64:7e:ab:d5:85:26:f9:02:57:42:56:3e:57:f8:
0d:c6:f6:e8:0a:33:b9:31:a5:64:50:87:6d:7c:4c:5a:02:cd:
fd:b1:04:f4:0f:03:5a:f8:d2:2b:89:df:a0:b6:00:f4:6d:01:
bc:44:17:ea:af:36:da:6a:3d:d0:e4:d7:64:4a:7d:10:82:13:
b8:f0:28:99:49:c4:a4:0b:fb:f3:fa:a7:1e:28:a2:6f:0b:bf:
8f:98:f7:f9:22:01:5f:e6:03:0f:81:8b:4d:75:f1:bf:28:e0:
51:28:98:76:8e:96:9b:e4:4c:e6:d4:ab:ce:a4:02:0e:29:16:
c1:d9:80:bf:b3:1b:38:ef:48:88:e9:71:3f:6f:97:e5:86:4e:
05:7b:14:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:21:45 2025 by rpki-client