Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft
File: baDun_CcfPx-6XYfGjyPMO-sWEg.mft (raw, json)
Hash identifier: O2Yz4KPXRKLN84nzYggamfvdDX5/w4I9ehuoXl4XaC0=
Subject key identifier: 5C:02:14:41:15:21:7C:EF:08:1C:91:DB:F4:6C:D9:11:59:6B:58:FA
Authority key identifier: 6D:A0:EE:9F:F0:9C:7C:FC:7E:E9:76:1F:1A:3C:8F:30:EF:AC:58:48
Certificate issuer: /CN=6da0ee9ff09c7cfc7ee9761f1a3c8f30efac5848
Certificate serial: 0197499F5B4F1B6E3DF68FC7A899380A6CDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft
Manifest number: 09B9
Signing time: Sat 07 Jun 2025 09:01:09 +0000
Manifest this update: Sat 07 Jun 2025 09:01:09 +0000
Manifest next update: Sun 08 Jun 2025 09:01:09 +0000
Files and hashes: 1: baDun_CcfPx-6XYfGjyPMO-sWEg.crl (hash: x0O4gcfHve3iDf/dok1K1XclXiRqub4zh1T4fAP+cI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:5b:4f:1b:6e:3d:f6:8f:c7:a8:99:38:0a:6c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6da0ee9ff09c7cfc7ee9761f1a3c8f30efac5848
Validity
Not Before: Jun 7 09:01:09 2025 GMT
Not After : Jun 8 09:01:09 2025 GMT
Subject: CN=5c02144115217cef081c91dbf46cd911596b58fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6d:3d:37:15:44:b0:40:e8:a0:03:1d:ff:1b:
47:e8:83:ef:2c:56:c9:c0:32:81:ac:1f:44:66:cd:
d0:93:56:ce:92:bc:5b:8f:a3:6d:80:0b:2f:a1:ff:
44:60:d0:5c:d8:b4:94:62:d7:d9:98:71:b2:3e:61:
a5:f5:46:fe:36:bb:3e:59:d4:1a:f7:09:d2:92:17:
d0:7b:2d:2f:cb:71:ea:86:04:3a:29:06:13:28:d2:
ef:95:c1:ef:c8:f9:2e:79:c0:96:07:24:6e:4e:46:
05:cb:42:75:8a:9e:d3:92:c7:6a:b3:d7:60:79:2c:
14:f5:b0:7d:85:41:89:c6:c0:70:86:e2:4a:19:88:
ac:e3:09:ca:7f:b2:07:ba:6f:64:ec:f7:6f:62:f1:
d4:76:01:c8:48:27:64:49:ea:41:71:c4:fb:58:d8:
73:06:74:ff:af:e1:7c:c3:39:21:33:9f:65:cb:3e:
7d:42:9c:f7:d1:be:16:5f:04:d1:11:a7:ff:3a:f7:
5e:e9:c5:c4:e4:36:db:52:40:69:4d:ca:a0:92:f0:
da:c7:40:e9:9a:dd:26:b0:83:57:db:e4:8b:35:cb:
d6:33:be:09:69:92:cc:95:55:45:09:92:1a:3d:33:
d8:31:ee:03:f2:f5:1d:b2:ea:db:3a:49:2e:81:d8:
2d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:02:14:41:15:21:7C:EF:08:1C:91:DB:F4:6C:D9:11:59:6B:58:FA
X509v3 Authority Key Identifier:
keyid:6D:A0:EE:9F:F0:9C:7C:FC:7E:E9:76:1F:1A:3C:8F:30:EF:AC:58:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:82:8d:9e:24:18:8a:67:90:b7:52:81:8d:19:41:bd:38:45:
51:91:7c:6d:61:79:95:37:4f:e6:b0:77:10:4f:12:22:00:18:
74:30:b5:f7:7a:5e:3e:f7:23:92:cd:52:83:6f:a9:fc:0c:63:
e5:bf:bd:6e:ad:9a:07:76:5e:6b:8f:5b:83:e0:c1:47:cd:38:
20:e8:46:2b:c1:16:b0:18:58:61:1d:d9:01:05:29:a7:83:7b:
0d:50:a2:ac:39:b6:e6:18:77:6c:c9:bf:7f:d9:c9:41:6c:a3:
df:88:c5:fa:b6:5d:2c:1c:b5:f9:9d:13:4b:32:92:43:b9:27:
51:4d:76:38:33:b2:9f:1b:62:0d:87:a6:9f:bf:b1:d5:bf:c3:
d6:bc:3e:cd:f6:55:21:52:05:ff:6c:90:d0:77:7c:43:54:3d:
45:fc:d1:30:65:e8:52:a7:09:30:1a:84:db:db:d8:ae:a6:d0:
79:15:cc:90:c6:45:e5:4d:27:96:22:ba:94:76:f9:ea:65:f3:
e4:10:91:16:45:e5:60:21:e4:b9:c4:10:74:eb:62:5d:23:37:
df:44:8f:cb:7d:bb:3e:4f:24:ba:81:66:c1:43:0a:99:70:2b:
9f:1e:68:6a:a6:cb:0b:8f:63:41:95:6d:c6:cf:18:b8:e4:60:
72:83:15:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:16:32 2025 by rpki-client