Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft
File: bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft (raw, json)
Hash identifier: WnweMOsuJ7Zi/fqXcOxcLKweuBkD1NtVXdLcY0J+NQA=
Subject key identifier: 01:F9:69:B8:B8:99:4B:FE:92:0D:9F:83:DF:9C:92:FD:46:57:1C:4F
Authority key identifier: 6E:68:C1:B9:0E:45:F9:1B:AB:8D:60:78:8E:ED:25:CB:4A:01:0F:E8
Certificate issuer: /CN=6e68c1b90e45f91bab8d60788eed25cb4a010fe8
Certificate serial: 01975A245F29EC185D53114E172500FF0360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmjBuQ5F-RurjWB4ju0ly0oBD-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft
Manifest number: 04D1
Signing time: Tue 10 Jun 2025 14:00:22 +0000
Manifest this update: Tue 10 Jun 2025 14:00:22 +0000
Manifest next update: Wed 11 Jun 2025 14:00:22 +0000
Files and hashes: 1: bmjBuQ5F-RurjWB4ju0ly0oBD-g.crl (hash: JFXfQ0Lpu3C8aMChw/YyGofIRUBBivwMV5yJExJSsPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmjBuQ5F-RurjWB4ju0ly0oBD-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:24:5f:29:ec:18:5d:53:11:4e:17:25:00:ff:03:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e68c1b90e45f91bab8d60788eed25cb4a010fe8
Validity
Not Before: Jun 10 14:00:22 2025 GMT
Not After : Jun 11 14:00:22 2025 GMT
Subject: CN=01f969b8b8994bfe920d9f83df9c92fd46571c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ba:bf:6f:f2:9e:d4:33:d5:d4:41:13:23:31:
52:99:38:76:b2:3e:6e:80:81:77:3a:aa:9a:64:f4:
db:ee:15:59:81:9a:bf:ed:68:8f:0d:9c:cd:f4:2b:
a1:e6:21:85:93:b9:8c:09:cc:ba:9e:c6:10:81:c6:
7b:b2:47:87:4a:67:a4:80:33:fc:fe:b9:bd:2c:14:
e8:96:78:f4:b8:4e:a7:73:35:30:59:93:1b:34:1e:
72:71:6e:d1:79:5e:65:73:a7:d1:0e:30:ac:2f:7f:
db:b5:80:ed:b0:26:56:21:9b:b5:90:9c:d2:37:58:
15:02:42:44:2f:96:b7:7f:08:84:04:18:11:d3:85:
fc:ea:e0:70:10:4e:8f:47:53:89:f0:0c:c1:c1:4c:
bd:ce:fb:f4:b3:52:80:f8:b2:d9:11:4e:4a:51:73:
24:60:30:16:5f:25:ee:3e:82:82:f8:3c:fd:66:6d:
2b:b0:9e:e2:a8:8e:b9:92:da:54:2e:6e:0f:37:92:
9c:9a:27:3a:75:70:33:24:a1:09:59:c3:b0:1b:73:
e6:a9:e8:c3:99:b7:8b:1f:dd:22:a7:d2:df:50:e4:
7a:cc:67:48:87:ee:db:92:de:6f:c7:45:93:5c:50:
e3:3d:23:59:44:69:5b:c5:df:b2:2d:9c:9b:c3:8f:
8c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F9:69:B8:B8:99:4B:FE:92:0D:9F:83:DF:9C:92:FD:46:57:1C:4F
X509v3 Authority Key Identifier:
keyid:6E:68:C1:B9:0E:45:F9:1B:AB:8D:60:78:8E:ED:25:CB:4A:01:0F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmjBuQ5F-RurjWB4ju0ly0oBD-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e0:15:10:c3:12:1a:a6:8e:65:56:a9:e3:14:36:4c:c0:ec:
0b:c2:e0:a0:67:f8:79:65:e0:25:b9:34:d0:c3:27:50:09:a8:
09:78:d3:39:c4:b0:a0:83:be:9e:c5:57:8a:93:cc:fc:27:74:
61:05:8b:26:49:48:a1:e7:61:bf:87:73:cc:a0:51:88:49:0f:
4d:3e:c4:72:30:69:d7:cc:d5:89:fb:27:07:ab:67:e0:c3:90:
3a:c5:f4:a2:11:2e:ee:5a:13:d8:5c:de:b3:2c:85:25:28:25:
60:5f:2b:45:7f:24:09:d7:18:02:f8:db:01:21:68:45:07:ec:
85:f7:dc:74:8c:19:3f:7d:3f:92:66:ea:25:7d:9f:e2:94:ec:
69:d9:81:da:bc:36:31:a5:8a:ab:a4:35:e9:c3:30:39:e0:d0:
4f:5d:2f:d6:ca:79:89:07:51:c9:9c:f1:14:4f:70:f0:05:24:
20:f1:49:33:d8:b7:b7:9a:f9:40:18:5a:f7:53:6f:34:2b:15:
4b:40:00:73:d6:58:25:3a:2e:61:87:b6:03:94:5d:27:0f:14:
3a:54:83:6b:a9:43:84:b0:28:17:d5:94:3a:38:77:f8:a9:2a:
35:b1:a1:8c:4b:3b:ae:80:74:f6:9d:89:77:cd:f5:e3:a5:bf:
4b:1a:a6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:14:03 2025 by rpki-client