Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft
File: BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft (raw, json)
Hash identifier: LOh4KUdxZcvnx2dGt/s01DdFe7QMwBIzo3+A4ZxKcMM=
Subject key identifier: 99:73:44:A6:1A:91:00:C5:21:24:73:73:A1:CE:E8:77:51:44:C0:D0
Authority key identifier: 06:E4:2D:89:7E:96:89:5C:70:F4:3C:A0:35:0D:0F:F4:4B:84:89:53
Certificate issuer: /CN=06e42d897e96895c70f43ca0350d0ff44b848953
Certificate serial: 0197561170F712DE604899E51C77E75DEAB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuQtiX6WiVxw9DygNQ0P9EuEiVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft
Manifest number: 1583
Signing time: Mon 09 Jun 2025 19:01:12 +0000
Manifest this update: Mon 09 Jun 2025 19:01:12 +0000
Manifest next update: Tue 10 Jun 2025 19:01:12 +0000
Files and hashes: 1: BuQtiX6WiVxw9DygNQ0P9EuEiVM.crl (hash: SBCMx64I7U8k6OhztQY9MTjFhy1se4Zyb2M5ulfLmvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BuQtiX6WiVxw9DygNQ0P9EuEiVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 19:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:11:70:f7:12:de:60:48:99:e5:1c:77:e7:5d:ea:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06e42d897e96895c70f43ca0350d0ff44b848953
Validity
Not Before: Jun 9 19:01:12 2025 GMT
Not After : Jun 10 19:01:12 2025 GMT
Subject: CN=997344a61a9100c521247373a1cee8775144c0d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4a:25:b4:32:31:fe:05:33:d1:d1:b4:84:cf:
73:23:33:5d:e2:20:3a:f5:0d:31:2e:ee:6a:7c:92:
19:3d:c5:60:64:32:1d:47:41:eb:32:8c:fb:d1:31:
0a:a3:7e:a0:96:ac:72:cc:98:a1:d2:85:b0:84:b9:
40:b2:53:71:ad:18:56:69:09:51:21:0f:20:2a:3f:
4b:93:51:3b:7d:8d:81:02:d5:2a:81:7d:d5:d6:f7:
a4:59:5c:18:4d:34:13:db:43:7f:9b:ed:7c:9e:c7:
54:b7:88:ec:96:9b:44:13:eb:15:9a:4f:bd:6a:95:
b9:ad:29:ab:17:7e:73:01:c1:07:d4:d8:b1:fa:d9:
fd:bf:ac:13:8b:55:6b:be:d1:e1:f9:ef:0b:82:9e:
5b:c6:5d:43:ad:12:c2:fe:a5:c9:d9:d7:5d:fe:3e:
c4:61:19:be:2b:11:74:ba:ec:cf:57:bd:42:95:18:
bb:de:8e:ba:05:ad:2e:19:da:bc:15:ad:08:62:de:
b0:c7:3b:36:50:af:14:10:1d:92:4c:e6:b7:de:df:
e5:49:24:10:ca:dd:74:8d:a4:23:dc:5a:3c:1d:2f:
cc:55:e4:c7:a6:26:5c:31:b5:5b:94:16:cf:84:23:
df:b5:58:5f:99:5a:55:ee:39:46:c5:35:00:81:b7:
77:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:73:44:A6:1A:91:00:C5:21:24:73:73:A1:CE:E8:77:51:44:C0:D0
X509v3 Authority Key Identifier:
keyid:06:E4:2D:89:7E:96:89:5C:70:F4:3C:A0:35:0D:0F:F4:4B:84:89:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuQtiX6WiVxw9DygNQ0P9EuEiVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:33:af:d2:99:6e:3f:cc:0f:d1:27:ee:b2:04:b5:c2:3c:4a:
e0:3a:c0:09:01:97:05:60:b2:bc:2b:07:3c:1e:56:a0:1d:09:
e8:64:80:7c:8f:8d:0a:3c:fa:78:5c:8b:12:3b:f4:91:5a:18:
ea:b1:2f:42:4d:b7:57:f1:45:0f:89:87:1e:93:a0:85:ae:4f:
39:df:0a:37:9b:ef:c9:41:ea:14:bc:91:1a:0d:b7:48:00:34:
cb:41:7c:23:d8:c6:27:f5:f8:f3:51:6b:e2:a7:60:9f:dd:89:
93:2c:5d:17:17:17:67:2f:41:83:a3:22:69:bc:e8:dd:1b:c4:
b3:43:90:78:85:d4:8c:e1:5b:97:c4:13:8d:40:69:0c:0d:04:
13:30:c2:e9:33:44:50:04:da:b1:cc:2b:22:80:21:f5:33:02:
b9:33:96:b0:29:ce:ec:f7:ec:ea:05:63:e3:40:fe:3e:c3:9e:
39:92:7e:76:ff:d6:49:7f:94:70:09:f5:bd:04:48:8b:f7:23:
e3:a3:46:6d:38:92:f9:6e:2e:03:a0:29:40:03:d3:c1:4d:c6:
85:3e:a4:4f:40:7d:11:e8:d5:45:4c:85:0a:93:c9:06:5e:ad:
fd:4b:b7:83:d9:f0:7a:20:ea:5d:f8:22:0b:c9:01:3c:b3:70:
9e:40:cb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 02:06:04 2025 by rpki-client