Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
File: bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft (raw, json)
Hash identifier: DSXI4cUYn0KVD7oQSWYvpaz6uMFhKLGLSjvAokPk6TE=
Subject key identifier: 73:00:C5:FE:B0:80:5D:17:28:68:18:57:A8:54:CC:C0:28:12:91:8C
Authority key identifier: 6E:4B:35:10:F0:04:E4:54:DF:BC:1F:1A:28:C4:59:D9:18:D1:51:3C
Certificate issuer: /CN=6e4b3510f004e454dfbc1f1a28c459d918d1513c
Certificate serial: 019746D4D999F5D43DF7A2795FB09FC22396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
Manifest number: 1577
Signing time: Fri 06 Jun 2025 20:00:43 +0000
Manifest this update: Fri 06 Jun 2025 20:00:43 +0000
Manifest next update: Sat 07 Jun 2025 20:00:43 +0000
Files and hashes: 1: bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl (hash: Ddu9KPULmO1T96TIEoaHg1ClnIGN3/RPIIVXFL58DR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:d9:99:f5:d4:3d:f7:a2:79:5f:b0:9f:c2:23:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e4b3510f004e454dfbc1f1a28c459d918d1513c
Validity
Not Before: Jun 6 20:00:43 2025 GMT
Not After : Jun 7 20:00:43 2025 GMT
Subject: CN=7300c5feb0805d1728681857a854ccc02812918c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f3:04:c0:f1:44:78:d6:61:f7:84:ff:16:fa:
37:2a:17:38:52:70:5e:42:13:43:31:71:a1:7e:ee:
1e:55:1f:34:0d:9a:46:87:3e:e3:1f:fe:2d:52:8a:
d9:59:ad:19:d8:33:db:b8:2e:74:90:56:d2:12:27:
bf:0c:43:06:a8:cb:68:c4:c9:57:e0:df:86:b7:c2:
d4:80:7b:48:f6:46:68:a2:4b:45:42:10:fe:a1:83:
db:ba:df:a2:7d:93:5a:dc:16:b8:00:96:33:c5:72:
3c:4b:79:83:8b:0a:cf:20:ab:9d:f5:11:aa:af:09:
be:af:be:c3:33:c7:51:b2:c5:b6:38:71:1e:72:a3:
4f:c2:f0:af:df:a4:6c:41:f4:5f:8f:b7:63:03:d5:
5a:68:2d:53:d3:fa:d7:2f:c3:57:d4:c5:93:45:10:
21:4e:df:4d:e3:34:10:bc:2f:6c:8c:63:df:e4:73:
94:ca:8b:e9:52:4a:a9:3f:57:ef:0b:be:9a:f2:ec:
f9:f4:9c:fa:31:f5:5c:b5:67:f8:dc:d0:8e:13:f6:
27:d8:94:2a:36:cb:a1:66:28:9b:ff:3e:d3:65:d8:
66:34:63:ca:79:df:2a:a8:9c:6e:ed:ba:e9:80:73:
18:7b:7a:89:fd:b7:21:b7:3d:14:7d:e5:a8:94:a6:
7e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:00:C5:FE:B0:80:5D:17:28:68:18:57:A8:54:CC:C0:28:12:91:8C
X509v3 Authority Key Identifier:
keyid:6E:4B:35:10:F0:04:E4:54:DF:BC:1F:1A:28:C4:59:D9:18:D1:51:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c7:63:20:c3:45:b4:ac:4e:01:f7:1a:eb:1f:7e:69:ab:33:
e8:2c:9d:d4:62:45:ad:ad:48:ca:fe:be:42:c2:03:24:6c:e1:
1e:06:1e:0a:a3:63:21:69:61:11:45:e7:f7:15:9e:96:47:1e:
75:a3:82:c6:f7:19:9e:f8:52:2f:aa:50:1a:f7:a1:90:58:91:
00:cd:52:bd:d9:ef:0d:fe:bd:8a:2e:5c:88:74:f5:59:4d:72:
6f:17:e6:9a:be:28:47:bc:bd:e3:01:a8:28:ed:15:c5:55:a5:
6e:f4:98:0e:98:cf:6f:ce:9c:67:ce:be:9c:c9:49:ca:ff:4f:
7b:01:6b:74:5a:dc:93:13:64:46:20:6e:83:ef:78:06:cc:9b:
fb:26:c2:78:01:2d:a9:2f:fb:e0:89:c5:b2:cb:f9:72:54:ca:
85:65:af:94:58:a5:07:8f:8b:7d:12:ef:a4:d6:29:c8:e0:8f:
e7:14:5a:69:9b:36:80:37:ac:38:c3:38:66:66:f3:5b:37:2d:
31:9b:5c:06:fc:7e:f6:68:e8:02:93:6d:d9:0d:cc:e7:3b:70:
de:8c:75:f3:bf:83:bb:69:08:c3:f8:13:98:3d:8b:58:81:bd:
c9:b2:73:8b:e2:d2:4f:1c:5f:76:73:08:03:da:a9:3c:89:65:
c6:e1:4b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:08:45 2025 by rpki-client