Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft
File: bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft (raw, json)
Hash identifier: 3X1AHJf1TGERImyApYctuvTtxMMgredAj/zyFtlyyZo=
Subject key identifier: AD:C2:D9:64:4B:4E:5A:A1:C7:52:32:90:FC:93:09:2F:0F:E2:34:6A
Authority key identifier: 6E:68:C1:B9:0E:45:F9:1B:AB:8D:60:78:8E:ED:25:CB:4A:01:0F:E8
Certificate issuer: /CN=6e68c1b90e45f91bab8d60788eed25cb4a010fe8
Certificate serial: 019771512F0B6E6D1AE61F5EACD0371137AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmjBuQ5F-RurjWB4ju0ly0oBD-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft
Manifest number: 04DD
Signing time: Sun 15 Jun 2025 02:00:35 +0000
Manifest this update: Sun 15 Jun 2025 02:00:35 +0000
Manifest next update: Mon 16 Jun 2025 02:00:35 +0000
Files and hashes: 1: bmjBuQ5F-RurjWB4ju0ly0oBD-g.crl (hash: 0qibKt0MSCbJKe6HQVQ+VZb6PqCfFcBuJeN9tkb2/OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmjBuQ5F-RurjWB4ju0ly0oBD-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:2f:0b:6e:6d:1a:e6:1f:5e:ac:d0:37:11:37:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e68c1b90e45f91bab8d60788eed25cb4a010fe8
Validity
Not Before: Jun 15 02:00:35 2025 GMT
Not After : Jun 16 02:00:35 2025 GMT
Subject: CN=adc2d9644b4e5aa1c7523290fc93092f0fe2346a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d3:30:98:25:2b:d1:18:11:b0:f0:35:0e:9b:
94:a9:a4:4c:ff:c6:af:de:aa:4b:9d:7f:67:ef:6d:
a3:39:80:9d:3a:a0:23:28:fb:7b:48:9d:c9:f3:91:
3c:f9:6e:43:ae:90:63:4f:a9:42:4f:4b:a6:7d:ca:
58:b6:3e:7c:c6:f6:dc:8b:ba:3a:1d:db:28:a8:d1:
fd:62:86:95:2d:06:ce:45:fd:38:f8:65:0c:f6:b1:
5c:59:e5:a9:e4:b4:b1:61:09:9e:dc:fb:94:98:75:
62:7f:45:25:a2:0e:1f:a4:64:48:e5:c0:38:07:17:
a3:f1:3b:3d:13:b0:39:22:01:c3:c4:13:b6:f7:2d:
06:1f:f9:62:33:71:c1:99:10:f1:3f:3a:b9:3b:01:
b9:79:fb:a1:94:b3:51:95:c5:bf:30:07:21:d8:97:
6d:c5:24:cf:a0:e1:90:a5:98:2f:97:5d:12:fe:83:
17:cd:99:35:09:14:54:84:f2:af:dc:95:4b:24:5e:
91:21:d7:96:57:f2:95:a1:de:28:fc:e9:e7:5a:26:
37:4c:e7:a7:ef:32:3c:c9:8d:69:84:60:48:69:b0:
f7:9f:86:df:12:ce:b7:b0:cc:f9:24:3d:33:35:85:
f1:6b:24:b9:0e:2a:3d:c1:68:6d:1f:5c:99:89:d1:
1a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C2:D9:64:4B:4E:5A:A1:C7:52:32:90:FC:93:09:2F:0F:E2:34:6A
X509v3 Authority Key Identifier:
keyid:6E:68:C1:B9:0E:45:F9:1B:AB:8D:60:78:8E:ED:25:CB:4A:01:0F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmjBuQ5F-RurjWB4ju0ly0oBD-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:8e:a1:0c:31:da:53:da:38:d4:cd:0d:a4:cd:68:8b:90:c1:
e0:a3:be:c9:8c:d7:d3:13:45:ea:83:63:ab:98:99:21:f3:5b:
95:48:ef:22:dc:c8:51:bf:cc:0e:84:ba:51:4d:37:ee:51:6d:
a3:5f:13:59:cd:56:fd:b5:69:4f:d5:ea:74:85:e5:aa:6e:cb:
4a:c0:07:a0:ad:f0:18:1c:1c:c0:04:b0:f0:34:b6:ea:60:95:
ee:1a:06:77:2c:b6:21:74:10:3d:01:41:b1:d1:2b:5f:19:3f:
99:6d:0b:78:95:8a:bd:aa:e6:94:9f:b9:29:77:19:9c:13:2a:
40:44:d4:6e:b5:66:91:32:cd:df:45:e5:f7:7c:e6:43:3c:21:
d5:26:df:23:ff:59:a0:df:e8:5e:8f:0e:b3:9f:c3:6c:9d:e2:
fb:c1:f3:65:e4:0a:fb:46:fe:00:6f:90:46:57:b6:63:67:e5:
c2:89:82:f2:c4:74:86:ec:3d:93:9b:fe:66:9f:de:59:88:e9:
ca:2b:51:a7:05:17:76:de:72:d2:57:34:4b:57:52:e9:6e:39:
84:e9:d1:84:fc:f2:5f:24:08:0e:52:a8:cf:85:90:b4:47:c4:
d3:e5:f0:96:48:7c:42:f7:dd:85:7a:c5:d3:30:11:1f:20:83:
b6:bd:c1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:52:17 2025 by rpki-client