Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft
File: BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft (raw, json)
Hash identifier: 00i3Lx49NXrjnd1SbX5ZbBN9ZbHZL96KDONYkof/O58=
Subject key identifier: 72:AE:01:AE:4F:96:1B:95:D0:5C:EC:4D:B7:AC:4A:56:2D:25:E1:4A
Authority key identifier: 06:E4:2D:89:7E:96:89:5C:70:F4:3C:A0:35:0D:0F:F4:4B:84:89:53
Certificate issuer: /CN=06e42d897e96895c70f43ca0350d0ff44b848953
Certificate serial: 01976772F190E29C729AA30F7EFC0D664078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuQtiX6WiVxw9DygNQ0P9EuEiVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 04:01:15 +0000
Manifest this update: Fri 13 Jun 2025 04:01:15 +0000
Manifest next update: Sat 14 Jun 2025 04:01:15 +0000
Files and hashes: 1: BuQtiX6WiVxw9DygNQ0P9EuEiVM.crl (hash: wVNjuY8vNvXvh55kA/bIOBWGb31TMZ/XYx0zqqhuzo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BuQtiX6WiVxw9DygNQ0P9EuEiVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:72:f1:90:e2:9c:72:9a:a3:0f:7e:fc:0d:66:40:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06e42d897e96895c70f43ca0350d0ff44b848953
Validity
Not Before: Jun 13 04:01:15 2025 GMT
Not After : Jun 14 04:01:15 2025 GMT
Subject: CN=72ae01ae4f961b95d05cec4db7ac4a562d25e14a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0b:56:a9:52:64:0b:25:8a:62:48:22:29:8e:
b4:a1:c0:84:91:b6:4c:ef:d4:df:5d:4f:3e:74:23:
74:63:49:b9:3c:9b:f3:2b:cb:52:7f:a7:99:2b:63:
17:1d:6c:9c:9b:0a:4f:35:d4:0a:ab:d0:26:26:f8:
e2:02:52:7c:aa:27:35:04:26:ed:11:c8:49:c9:21:
4f:2a:d5:6e:38:57:39:a3:50:96:cb:1f:d2:68:f3:
63:9f:95:a7:71:c0:e9:02:eb:c1:86:58:8b:fa:59:
79:18:4c:8e:1a:67:35:98:54:56:27:25:74:5b:80:
4d:75:d0:bb:b0:5c:70:90:0d:09:77:da:6a:5f:06:
df:0c:4a:e8:fa:b0:13:45:f5:93:1f:c7:1d:a6:43:
bb:c5:51:86:13:7f:1d:22:5f:95:59:c6:e9:9d:1a:
8f:cc:82:18:5c:c5:da:84:b2:9c:30:b9:a2:8f:e9:
1a:97:91:63:23:80:98:3e:31:96:90:89:55:ab:f3:
0f:00:87:fd:e8:24:02:b2:4f:d3:26:d8:c3:d7:1a:
60:a4:83:49:d2:3a:c2:d7:5a:5d:c0:b6:8d:bc:a2:
6d:80:81:0d:2c:7a:fc:c1:4f:48:34:0f:e6:1e:18:
a3:ec:c0:f5:7a:18:6d:61:6d:36:3e:e9:83:1b:08:
ce:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AE:01:AE:4F:96:1B:95:D0:5C:EC:4D:B7:AC:4A:56:2D:25:E1:4A
X509v3 Authority Key Identifier:
keyid:06:E4:2D:89:7E:96:89:5C:70:F4:3C:A0:35:0D:0F:F4:4B:84:89:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuQtiX6WiVxw9DygNQ0P9EuEiVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:57:c4:af:e1:fd:e0:0a:83:70:b5:a6:eb:3d:ab:e4:f6:66:
ef:2f:7a:f0:5b:f3:cf:8f:3d:da:fc:7e:58:0e:4e:d7:66:22:
72:f8:40:56:c5:18:9f:51:82:48:9f:fe:b1:c8:31:c6:4b:4b:
c4:17:11:93:c3:b2:a1:50:cf:99:3e:72:7e:63:d1:e3:7d:15:
e7:df:99:8e:dd:9e:b3:76:15:24:92:6a:16:53:1b:3b:7c:6a:
fc:1d:de:c9:10:62:15:13:29:05:1a:5c:3b:ed:1d:df:18:81:
61:87:75:55:95:df:f5:fa:e8:91:05:1e:e4:c6:3e:3f:1e:e7:
8b:b8:ea:91:07:cf:cb:9b:11:c3:a5:16:27:8b:0b:cf:b6:da:
92:a5:06:54:48:e6:a9:25:4c:4a:76:b1:57:b9:de:f4:b7:b4:
ce:c5:38:13:dd:51:0c:b2:98:45:8e:fc:9e:09:0b:52:43:cc:
eb:eb:64:d0:ab:dd:5d:81:21:b5:41:45:a7:50:3d:04:1b:33:
cf:46:aa:f0:59:9d:39:4b:ed:96:0f:4d:48:ac:77:ed:58:81:
95:d0:f5:e7:77:f3:ac:7d:f4:14:34:a0:b7:66:ac:11:a7:16:
36:56:18:41:38:44:c5:02:bb:ea:53:9d:c0:8a:f9:a7:fc:14:
e3:28:f5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 10:12:10 2025 by rpki-client