Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft
File: baDun_CcfPx-6XYfGjyPMO-sWEg.mft (raw, json)
Hash identifier: BHbMxWk6CfbV332/i//NyEANtnDBfRo9P7CBfxIrYA8=
Subject key identifier: AD:2A:A1:18:FB:FC:48:49:32:6F:D7:04:0E:B6:0C:B3:C7:42:97:9C
Authority key identifier: 6D:A0:EE:9F:F0:9C:7C:FC:7E:E9:76:1F:1A:3C:8F:30:EF:AC:58:48
Certificate issuer: /CN=6da0ee9ff09c7cfc7ee9761f1a3c8f30efac5848
Certificate serial: 019A72CA87E25171ABFC3EC92D6B9F09DCF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft
Manifest number: 0B5C
Signing time: Tue 11 Nov 2025 12:01:06 +0000
Manifest this update: Tue 11 Nov 2025 12:01:06 +0000
Manifest next update: Wed 12 Nov 2025 12:01:06 +0000
Files and hashes: 1: baDun_CcfPx-6XYfGjyPMO-sWEg.crl (hash: BBmtTqKdy7tls4MXdld1TOgPxIvjyjNW7BPjyIvgfoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:87:e2:51:71:ab:fc:3e:c9:2d:6b:9f:09:dc:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6da0ee9ff09c7cfc7ee9761f1a3c8f30efac5848
Validity
Not Before: Nov 11 12:01:06 2025 GMT
Not After : Nov 12 12:01:06 2025 GMT
Subject: CN=ad2aa118fbfc4849326fd7040eb60cb3c742979c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5c:7c:fa:c8:6d:3e:42:f5:12:da:9b:50:b8:
83:00:eb:be:87:25:d3:7c:bb:1b:f7:b9:c1:a8:77:
5f:6b:c8:0d:ea:7d:8a:11:09:f4:d3:7f:99:f2:1d:
d2:cc:22:4c:3b:e6:14:fa:c2:96:9b:b3:ce:52:a3:
98:e1:77:b6:4b:ad:07:3b:63:8d:b8:44:04:9c:b5:
09:78:bb:7a:87:e8:ab:31:e8:2e:5d:03:93:6f:cf:
6a:6e:bd:6e:2d:f5:62:1f:33:49:2f:04:bf:a2:ee:
66:80:1c:28:cd:a8:ba:26:6e:4b:d8:6b:3d:15:cd:
c0:69:b7:94:f4:7d:06:96:73:b7:29:97:f5:cd:33:
0d:92:0b:20:ad:08:20:ea:99:1a:37:db:0c:05:64:
c0:8b:52:20:2e:a3:0a:6b:d0:b8:4e:ef:fc:8d:0b:
26:d8:6f:9c:6c:43:14:b1:71:d5:5a:f5:e8:56:b9:
3e:69:eb:9d:8d:c2:a9:58:1a:a8:ed:fe:f3:bb:b5:
02:48:30:b4:07:60:af:22:22:0b:02:69:85:71:e6:
a8:8d:a5:82:7e:19:b4:7f:30:24:a3:03:55:41:bd:
45:df:ff:31:57:7b:fe:84:cc:41:5c:90:d3:98:d2:
b8:a8:4b:20:8a:3c:34:3a:c2:d8:24:28:4c:00:ff:
f3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:2A:A1:18:FB:FC:48:49:32:6F:D7:04:0E:B6:0C:B3:C7:42:97:9C
X509v3 Authority Key Identifier:
keyid:6D:A0:EE:9F:F0:9C:7C:FC:7E:E9:76:1F:1A:3C:8F:30:EF:AC:58:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:4f:08:69:ec:8f:89:11:f1:63:fd:cc:bb:16:aa:1d:5a:62:
84:13:34:10:bd:62:38:d4:0b:5d:15:dd:47:c3:5d:5a:45:07:
f5:97:4e:83:f6:e6:14:04:c4:b8:d6:4a:67:17:be:f6:0d:37:
b2:08:3c:87:22:ab:44:cd:f0:06:2a:62:49:2b:96:22:f0:41:
92:a4:21:4b:af:94:7d:67:15:e2:90:46:d0:99:8e:e0:0c:d4:
76:65:3c:40:2f:ae:cd:8c:5d:b7:52:ed:b7:59:50:07:a0:db:
e8:6a:b6:9c:01:03:87:e9:04:9a:fe:b0:6d:82:a2:a6:67:73:
ca:7f:63:2d:34:20:68:b4:19:57:76:71:1c:47:50:ce:28:42:
a6:97:26:15:b1:ea:0a:a5:2d:8c:50:e2:bc:1e:5f:2e:fc:c4:
13:a4:18:b5:14:cc:0e:40:16:af:e3:f1:6b:fa:fe:d7:e5:3f:
6a:45:cc:7d:9c:07:c4:01:95:e5:eb:7b:be:0a:e2:9c:95:a6:
a8:c0:6b:26:e5:12:2d:53:ad:1c:88:46:fb:60:9a:dd:f3:d7:
ae:a3:59:2a:63:c7:76:8c:1a:51:48:a2:47:9c:17:8f:4d:5b:
c1:2a:d1:f4:96:c2:c0:56:09:d5:64:e3:4d:5a:1e:81:e0:cc:
45:e7:d6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:06:05 2025 by rpki-client