Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft
File: bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft (raw, json)
Hash identifier: jzUL9h+eKJ381yun6WtlXf8qkSghTfyML679PaRU2xo=
Subject key identifier: E9:6B:9E:4E:3E:8C:99:FF:28:EB:8D:73:03:1E:9F:F5:41:51:60:36
Authority key identifier: 6E:68:C1:B9:0E:45:F9:1B:AB:8D:60:78:8E:ED:25:CB:4A:01:0F:E8
Certificate issuer: /CN=6e68c1b90e45f91bab8d60788eed25cb4a010fe8
Certificate serial: 01976D7438E5566985EBCB35FADA91D5DCD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmjBuQ5F-RurjWB4ju0ly0oBD-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft
Manifest number: 04DB
Signing time: Sat 14 Jun 2025 08:00:22 +0000
Manifest this update: Sat 14 Jun 2025 08:00:22 +0000
Manifest next update: Sun 15 Jun 2025 08:00:22 +0000
Files and hashes: 1: bmjBuQ5F-RurjWB4ju0ly0oBD-g.crl (hash: l607IC1bKonh4KnP8KMCDH9xBQHe9yBdLc1x8n2ornE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmjBuQ5F-RurjWB4ju0ly0oBD-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:38:e5:56:69:85:eb:cb:35:fa:da:91:d5:dc:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e68c1b90e45f91bab8d60788eed25cb4a010fe8
Validity
Not Before: Jun 14 08:00:22 2025 GMT
Not After : Jun 15 08:00:22 2025 GMT
Subject: CN=e96b9e4e3e8c99ff28eb8d73031e9ff541516036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e6:32:24:a2:33:aa:b0:88:94:39:01:48:01:
da:41:78:dd:3c:c8:28:38:90:f9:c6:97:ef:f4:b7:
0a:b1:b6:33:d8:76:3d:c8:3d:45:e8:c5:42:ef:29:
fa:b8:7f:ee:ce:ce:98:c2:df:cd:22:25:b0:29:8f:
c9:d2:87:27:47:4a:82:b3:db:82:57:28:a5:92:2e:
12:6f:37:21:b3:a4:4f:81:77:30:c7:4c:94:f0:4f:
ac:89:11:bf:9f:51:6c:ab:26:76:6f:35:94:70:4f:
ab:71:3d:0f:99:49:db:27:b5:7f:b5:15:e5:9a:6e:
05:6a:f9:d4:8e:23:d8:f1:8d:77:a6:50:27:44:58:
ab:fd:63:a8:21:2e:2a:86:0e:26:78:78:9e:48:4c:
f5:ca:a8:70:53:d7:13:57:e2:5e:3c:46:c2:b3:a9:
07:00:da:4e:62:36:a2:71:73:fa:88:c6:f6:2a:d4:
74:35:0f:cc:4b:a9:3b:d8:6c:46:55:96:55:42:69:
5d:bf:f8:31:95:83:10:36:99:7e:b7:11:aa:3f:db:
32:aa:6b:79:f7:2f:8d:98:18:22:de:82:76:eb:4d:
71:b7:c8:f0:43:9d:b1:f6:a7:0f:6e:1a:d1:a7:5b:
0f:41:0f:96:79:df:47:cf:6b:de:46:a0:d0:73:ba:
ac:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:6B:9E:4E:3E:8C:99:FF:28:EB:8D:73:03:1E:9F:F5:41:51:60:36
X509v3 Authority Key Identifier:
keyid:6E:68:C1:B9:0E:45:F9:1B:AB:8D:60:78:8E:ED:25:CB:4A:01:0F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmjBuQ5F-RurjWB4ju0ly0oBD-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:4f:62:3f:61:14:da:8e:e4:2c:c5:9d:70:3e:82:a7:56:a4:
7d:8f:7f:d7:ed:3f:38:e5:d7:ad:eb:63:96:47:fd:bd:8f:25:
09:ef:a5:16:5d:9e:86:f9:c2:14:83:3e:06:7e:30:dd:0c:e5:
2f:b1:af:1e:ac:f3:0b:f8:09:6e:93:30:c7:2a:98:31:00:7f:
70:de:e0:af:e1:a2:a4:a6:1f:b0:fb:35:42:08:e5:eb:e9:0d:
3e:16:ef:c6:55:86:b2:ad:db:0f:e6:3c:2f:f7:99:f5:05:6f:
02:e4:fa:c6:e4:71:f3:06:c0:b4:24:46:dc:9a:dd:39:d8:06:
a9:df:07:7f:15:e5:13:da:5b:2d:bd:d7:1d:64:48:87:9b:ba:
dd:eb:3f:7c:9f:3f:06:bb:2d:c8:55:e5:2f:c0:1b:a7:56:f8:
1e:fa:d5:d6:21:20:31:37:0f:e7:9e:4d:44:ed:ce:6b:50:fa:
c7:96:87:52:a3:8c:0a:5a:db:0b:5a:ee:46:60:37:79:d2:88:
61:1c:5f:ca:6d:84:c5:8f:4f:55:98:94:b9:3d:82:82:a5:7c:
9e:58:05:aa:6e:06:ec:16:05:1c:3a:38:60:3f:5a:bf:a5:02:
21:05:55:2d:f9:40:80:e6:a0:63:6a:3f:c2:52:1b:57:d8:81:
93:c5:6a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:55:58 2025 by rpki-client