Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft
File: bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft (raw, json)
Hash identifier: 0yIGEReIGrgJ6mWSRMgH1cj+MWh9DWkTQQJ8RnQf/8Q=
Subject key identifier: 97:F4:9C:53:A0:9F:40:04:97:06:FE:37:EB:B0:19:D9:C0:24:03:A8
Authority key identifier: 6C:29:24:4A:C4:02:67:EE:C4:7A:91:70:8F:89:CF:53:66:EA:A8:D7
Certificate issuer: /CN=6c29244ac40267eec47a91708f89cf5366eaa8d7
Certificate serial: 019847778608EF28BD12B8E3F7DA2D0E63B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bCkkSsQCZ-7EepFwj4nPU2bqqNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft
Manifest number: 0E94
Signing time: Sat 26 Jul 2025 16:01:12 +0000
Manifest this update: Sat 26 Jul 2025 16:01:12 +0000
Manifest next update: Sun 27 Jul 2025 16:01:12 +0000
Files and hashes: 1: bCkkSsQCZ-7EepFwj4nPU2bqqNc.crl (hash: AMBVb/617QmWC9XABzvB6O4NltD6A/HdUgVw9MOygx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bCkkSsQCZ-7EepFwj4nPU2bqqNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:86:08:ef:28:bd:12:b8:e3:f7:da:2d:0e:63:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c29244ac40267eec47a91708f89cf5366eaa8d7
Validity
Not Before: Jul 26 16:01:12 2025 GMT
Not After : Jul 27 16:01:12 2025 GMT
Subject: CN=97f49c53a09f40049706fe37ebb019d9c02403a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9f:06:4b:a4:cd:07:1d:9a:eb:f0:ee:c5:dc:
d2:e8:78:aa:b0:c7:04:82:30:bc:45:ae:b1:a7:51:
92:4e:22:4d:74:04:b5:9a:a0:74:38:6a:f3:c0:f9:
54:3d:db:f2:6f:72:65:80:5f:f8:4e:d5:23:ad:a6:
55:cf:da:19:70:91:54:b9:a1:84:38:c3:16:22:7b:
9d:2b:8b:cc:9c:27:9d:ec:29:72:06:49:56:0b:ca:
58:19:89:63:22:a1:9b:b1:6d:eb:7d:f3:13:c7:06:
97:28:c6:22:ba:e5:87:1b:bb:22:26:71:91:2d:9a:
21:aa:f8:fa:81:80:39:48:99:94:d0:1e:83:fe:81:
1d:9c:76:08:a3:a0:c8:88:e2:10:d7:85:83:82:2b:
c6:6b:de:92:ef:ea:ae:1f:9c:a2:ee:73:8c:38:fe:
ee:cc:9a:fa:b7:72:2c:95:f8:ea:c4:de:4b:bd:38:
0a:89:56:83:08:5f:d0:b3:ef:ca:59:94:3f:98:ab:
40:b5:42:f5:58:35:64:96:76:38:21:3f:eb:3c:e4:
2e:17:f6:55:4b:18:cb:14:6f:59:83:65:bd:96:44:
b9:0b:35:7d:99:24:07:83:52:4a:1d:2f:76:80:e1:
84:26:f8:c0:9e:3a:e5:48:5b:10:3c:c8:ec:71:95:
43:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F4:9C:53:A0:9F:40:04:97:06:FE:37:EB:B0:19:D9:C0:24:03:A8
X509v3 Authority Key Identifier:
keyid:6C:29:24:4A:C4:02:67:EE:C4:7A:91:70:8F:89:CF:53:66:EA:A8:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bCkkSsQCZ-7EepFwj4nPU2bqqNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:0e:b6:3b:30:77:27:fd:6b:25:31:88:aa:44:c8:22:14:e3:
f1:75:7e:7b:6d:73:6e:44:c9:c3:fc:c0:87:c0:72:b9:a5:60:
90:84:d4:92:fa:b0:69:b3:9b:0f:9d:bc:1f:2e:87:7f:88:54:
24:03:b9:72:de:63:ea:42:50:ff:17:7a:a1:25:0e:48:0a:48:
6d:60:de:a8:0d:f2:61:67:75:d1:1a:90:33:f9:fe:35:b5:8d:
aa:b3:72:ed:df:94:e5:da:2c:80:a9:f4:3f:ed:1a:a7:f4:e9:
ba:b9:4d:0e:2c:33:40:18:25:c0:74:9b:14:3d:f2:ba:59:57:
bb:08:7b:27:c3:b3:e2:5c:1a:00:d5:0f:88:2c:48:c9:af:5f:
d6:59:5b:64:a1:ff:7a:ba:fa:62:41:b3:9a:6f:01:ec:63:bf:
f1:f1:ae:14:d9:a5:5b:f4:4e:d0:59:31:a1:c9:02:50:73:a0:
0b:5b:4b:62:84:4a:0c:48:0c:f4:dd:54:2c:6c:9d:31:48:b3:
09:ab:d8:d1:4d:46:f5:18:d2:75:ef:fa:a6:e6:13:b5:fd:90:
10:40:34:8f:9c:38:77:1e:73:cf:5a:de:12:67:cd:94:45:b7:
63:82:59:95:81:5c:8e:20:79:b5:7d:19:32:6d:68:ad:47:07:
45:8c:25:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:50:23 2025 by rpki-client