Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
File: bq0LWp5EY4gC_LRukPqjrbUWv4g.mft (raw, json)
Hash identifier: T6J+aQSuPbHTtKMp7bI3lgM1IjO2rLPM5ZxTj/qHaKk=
Subject key identifier: 18:67:B1:0B:16:C5:02:3C:08:F3:F4:24:6F:BF:D7:90:7D:92:F0:29
Authority key identifier: 6E:AD:0B:5A:9E:44:63:88:02:FC:B4:6E:90:FA:A3:AD:B5:16:BF:88
Certificate issuer: /CN=6ead0b5a9e44638802fcb46e90faa3adb516bf88
Certificate serial: 01974C69E0448017B9567A58D6B14CF2EB38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 22:01:36 +0000
Manifest this update: Sat 07 Jun 2025 22:01:36 +0000
Manifest next update: Sun 08 Jun 2025 22:01:36 +0000
Files and hashes: 1: bq0LWp5EY4gC_LRukPqjrbUWv4g.crl (hash: oxSmkCbmNgIrR0qIxkQBbIiGtpe9ZJwNeXqQulJHj/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 22:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:e0:44:80:17:b9:56:7a:58:d6:b1:4c:f2:eb:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ead0b5a9e44638802fcb46e90faa3adb516bf88
Validity
Not Before: Jun 7 22:01:36 2025 GMT
Not After : Jun 8 22:01:36 2025 GMT
Subject: CN=1867b10b16c5023c08f3f4246fbfd7907d92f029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:98:75:c6:a0:52:75:66:a7:aa:82:99:0c:e3:
dc:cc:20:3a:12:b9:43:b1:61:4f:33:77:d9:f3:93:
19:ca:b9:98:7c:fd:0f:41:ed:be:a0:fd:9f:eb:77:
1a:c2:77:61:cd:f6:b4:3d:1c:91:e7:6e:3c:6d:96:
42:56:34:c9:72:8e:7a:55:7f:7b:f5:ae:5d:ae:06:
1a:1b:76:7a:5e:33:d8:f0:a4:a4:aa:5e:15:c8:61:
eb:11:70:24:c8:80:da:3e:e3:29:43:d0:cb:57:45:
ad:fa:62:25:84:43:47:56:ad:ac:67:72:c4:3b:21:
53:49:bf:cf:68:c5:b7:6b:93:de:54:41:27:5b:c1:
40:61:ca:a8:27:a6:9c:59:58:d1:37:f5:31:16:91:
cf:5e:35:c0:8b:2e:94:80:8c:2c:22:c4:37:58:35:
1c:75:a0:1a:a9:36:b0:67:7e:89:0c:8a:05:0e:5a:
25:c6:9a:46:d9:23:1e:d0:c9:5e:a4:37:6e:ce:df:
26:a9:d1:f0:36:71:08:07:52:71:b7:24:c8:73:2e:
2b:38:06:05:c1:f7:60:11:c7:94:6c:cd:d2:ef:d2:
21:52:7e:8a:e5:93:7a:4c:e5:48:0c:c8:84:6e:11:
7b:a6:2e:fc:54:ac:da:29:c8:24:f8:c5:b1:4e:03:
ae:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:67:B1:0B:16:C5:02:3C:08:F3:F4:24:6F:BF:D7:90:7D:92:F0:29
X509v3 Authority Key Identifier:
keyid:6E:AD:0B:5A:9E:44:63:88:02:FC:B4:6E:90:FA:A3:AD:B5:16:BF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:59:7d:91:c5:d6:54:c7:26:a6:e5:9b:9f:18:3f:00:dd:a4:
52:eb:fe:8a:85:f1:06:48:5a:09:13:2f:1f:96:22:e6:ca:ce:
35:5d:f0:d1:b7:77:71:ab:49:06:11:eb:09:93:c9:96:91:d2:
df:58:a2:75:13:13:d1:3b:6d:92:e9:7b:c5:23:0f:01:52:ed:
bd:87:81:1f:cd:e0:c2:89:a8:3a:2a:7f:b4:f4:ca:48:8d:26:
4f:58:72:7d:01:3d:c0:db:6c:d4:ab:96:1a:34:52:69:2b:84:
fd:f8:12:c0:c6:aa:04:f0:a4:41:0d:0e:e2:99:50:ba:c4:1c:
4f:dc:e2:f4:12:ca:64:ca:26:5d:45:83:a2:e0:b9:89:f8:5b:
1c:5b:a8:21:05:50:2d:eb:24:db:40:6d:ce:e6:70:f8:64:65:
c1:8f:5f:53:e7:cb:fa:fe:5c:b4:79:7d:f4:58:c4:a1:1f:83:
b9:54:6f:5c:af:e2:59:3b:29:50:2d:ac:bf:6f:6e:e1:6e:45:
c4:b3:bd:da:84:f1:51:d9:51:d7:7c:fd:89:ae:4a:8d:ba:8b:
ce:76:cd:27:92:5f:08:d8:db:11:6b:25:87:c3:e6:39:99:91:
2b:f9:9a:0b:27:2e:3d:4c:38:34:2f:6a:f8:bc:f6:8e:18:67:
52:f1:d2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:04:55 2025 by rpki-client