Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
File: BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft (raw, json)
Hash identifier: /si9kbJ2xvc5vUFf80v+h4bYOio6RIVUjuIy8268srs=
Subject key identifier: BB:3F:FE:85:8D:F9:06:9F:C5:E6:A9:C3:EB:5D:5B:34:2B:8D:63:3E
Authority key identifier: 05:77:BB:93:24:FC:75:0A:53:E0:55:84:8E:F0:69:03:41:6C:3E:08
Certificate issuer: /CN=0577bb9324fc750a53e055848ef06903416c3e08
Certificate serial: 0197469EA743FE1349A5F7FBCBFC66ABDCD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
Manifest number: 1576
Signing time: Fri 06 Jun 2025 19:01:31 +0000
Manifest this update: Fri 06 Jun 2025 19:01:31 +0000
Manifest next update: Sat 07 Jun 2025 19:01:31 +0000
Files and hashes: 1: BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl (hash: 6tzrPFqTq6huV8Wbjq1+NFXqO+nIXti+I/bgW3iG5GE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:a7:43:fe:13:49:a5:f7:fb:cb:fc:66:ab:dc:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0577bb9324fc750a53e055848ef06903416c3e08
Validity
Not Before: Jun 6 19:01:31 2025 GMT
Not After : Jun 7 19:01:31 2025 GMT
Subject: CN=bb3ffe858df9069fc5e6a9c3eb5d5b342b8d633e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ee:17:90:58:04:d1:b9:90:64:0b:99:8a:d3:
98:74:e6:33:04:9e:cf:2f:2c:28:c3:41:df:fe:34:
b0:6f:83:36:20:e1:b6:0c:c7:62:2c:5f:d7:7d:8b:
5a:90:6d:01:3f:e5:4a:29:04:d6:00:7b:36:a9:c8:
b5:d4:5f:ca:e4:3b:e3:88:f1:f2:e9:5c:59:88:d4:
a0:f3:16:37:1c:fa:52:1e:2d:c8:9b:77:70:02:ca:
21:c6:13:ce:74:87:60:c3:74:c9:c2:2c:fa:4f:cd:
9b:a6:f9:df:4e:f6:0e:0e:e0:3b:b6:2f:fa:1a:15:
a9:eb:f4:d6:42:d3:eb:1c:98:d1:22:e2:4a:75:f2:
fa:16:12:80:74:b0:11:88:b5:0d:e8:78:ed:1b:6f:
5c:cd:48:d7:f8:a7:c3:07:95:0a:95:1f:29:73:8b:
c6:ea:45:6a:f5:62:d5:bb:c5:f7:3c:ec:e1:b2:41:
b9:71:30:56:34:5f:99:e8:c2:81:19:d1:7b:22:a7:
c6:a4:cb:a2:6e:41:33:23:ee:c3:6b:0e:de:14:70:
5c:0a:b3:5d:a9:ac:75:b9:39:af:91:bb:2f:31:87:
ea:06:51:0f:0f:e8:ef:2e:f6:b3:17:1b:6c:9f:ed:
d1:04:61:88:78:ab:41:f3:b1:4a:0f:7e:a8:2a:3e:
2c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:3F:FE:85:8D:F9:06:9F:C5:E6:A9:C3:EB:5D:5B:34:2B:8D:63:3E
X509v3 Authority Key Identifier:
keyid:05:77:BB:93:24:FC:75:0A:53:E0:55:84:8E:F0:69:03:41:6C:3E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:3b:88:9f:07:fc:56:9b:60:29:eb:4e:a8:75:40:94:48:30:
22:1b:15:d8:50:73:00:d8:fc:de:1d:d4:1b:b4:c7:69:2d:ec:
e3:05:66:56:c6:8c:31:a2:25:7d:9c:b8:ef:9f:9c:c1:26:7d:
02:0a:c1:db:97:7e:36:9e:44:b2:0e:33:8d:88:dd:ea:c1:a2:
fb:b6:c5:ad:a0:ef:4f:9f:7c:43:63:cb:6b:77:76:36:65:dd:
68:d2:9e:31:d4:f6:cb:9b:47:18:b1:6c:60:2a:86:46:a5:b4:
d3:66:24:6e:80:83:21:3e:f6:99:3f:db:ac:91:83:6a:79:b2:
da:03:f8:63:91:d2:c2:cb:6b:9d:38:89:27:e6:a7:02:b0:0f:
32:ef:55:e2:17:b3:62:32:6e:2c:4a:cb:ce:77:37:a5:ed:5d:
96:63:4d:cf:bf:c4:77:8f:c3:c5:ce:5a:05:84:6f:61:fe:8a:
d5:02:bf:40:0a:e8:27:8b:be:b0:26:ac:62:15:0b:a8:13:3a:
5e:b2:9b:ab:44:72:b0:1f:7d:7a:4f:da:f5:c4:b7:17:3c:e2:
f1:96:e3:65:18:59:00:fb:37:27:d3:0e:85:3a:84:d3:dd:0e:
18:fe:1a:a7:d5:db:cb:72:c6:98:fb:44:5b:0f:8f:77:89:43:
33:9c:ca:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:50:06 2025 by rpki-client