
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
File: BDjuFv-LwYTI-qF62vWZ4_rwynE.mft (raw, json)
Hash identifier: KqFkq02x8YjMxrekc8GZGkcIoox+MrT0FtCnT9UEBeM=
Subject key identifier: 67:DE:1A:CE:E9:E6:ED:C6:27:15:E9:05:78:9F:1C:BC:A5:B8:9E:24
Authority key identifier: 04:38:EE:16:FF:8B:C1:84:C8:FA:A1:7A:DA:F5:99:E3:FA:F0:CA:71
Certificate issuer: /CN=0438ee16ff8bc184c8faa17adaf599e3faf0ca71
Certificate serial: 0197493110B71DBF52673EF2F857DAAB4209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
Manifest number: 0B3F
Signing time: Sat 07 Jun 2025 07:00:41 +0000
Manifest this update: Sat 07 Jun 2025 07:00:41 +0000
Manifest next update: Sun 08 Jun 2025 07:00:41 +0000
Files and hashes: 1: BDjuFv-LwYTI-qF62vWZ4_rwynE.crl (hash: s3WRNqNTAH6uv+T5awZdJMYK96+BaXVHD6n1nae27H4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:10:b7:1d:bf:52:67:3e:f2:f8:57:da:ab:42:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0438ee16ff8bc184c8faa17adaf599e3faf0ca71
Validity
Not Before: Jun 7 07:00:41 2025 GMT
Not After : Jun 8 07:00:41 2025 GMT
Subject: CN=67de1acee9e6edc62715e905789f1cbca5b89e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3d:37:2e:1f:bb:e3:c2:b2:8b:7e:c8:db:c3:
b6:02:c8:1c:d4:90:39:8a:93:e7:ff:bc:bf:78:82:
fe:6c:ad:58:23:5e:a8:b2:1c:0b:c8:d6:75:78:f4:
12:72:ab:56:53:40:36:d0:e0:d4:74:89:31:41:b7:
81:da:66:a1:62:f3:42:b5:eb:34:3b:b2:b0:97:72:
b9:ef:0c:65:78:f3:10:1f:c1:5e:c2:2b:37:f9:17:
48:b8:1e:2d:95:51:c7:1e:0f:51:2b:0f:24:74:0e:
76:a1:29:57:a8:88:67:b2:04:03:3d:9a:c2:d8:78:
d7:ba:e6:dc:f9:da:d2:ad:02:c4:52:94:34:8c:df:
9e:e2:dd:c8:fb:29:2f:aa:e9:bb:d8:f7:37:b4:69:
fb:97:ad:7e:87:9c:bd:02:0f:be:83:11:6b:c1:87:
0e:98:63:00:31:30:86:25:17:63:40:a9:ba:26:90:
2a:4b:36:9f:24:04:07:ec:d7:ad:4f:58:d0:1b:d4:
a9:0f:00:75:b2:3f:07:d0:37:86:b1:16:ac:c9:18:
e5:46:80:f7:58:78:d8:85:92:b2:5b:1f:d8:9d:b5:
bc:b3:a5:48:96:f7:43:48:f5:86:e4:f9:00:55:e4:
75:ec:65:21:f4:c2:0a:fb:fb:54:7c:e1:1d:2a:92:
28:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DE:1A:CE:E9:E6:ED:C6:27:15:E9:05:78:9F:1C:BC:A5:B8:9E:24
X509v3 Authority Key Identifier:
keyid:04:38:EE:16:FF:8B:C1:84:C8:FA:A1:7A:DA:F5:99:E3:FA:F0:CA:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:66:ab:38:66:f9:dc:97:5d:b2:9e:c2:24:c7:df:11:b6:62:
2c:4d:e2:53:e9:b5:a5:0d:1f:4a:71:26:b7:dc:60:65:c1:54:
32:bd:89:44:ca:80:fc:6a:74:9d:77:9c:9f:9c:fe:08:30:d8:
5b:ea:18:1e:8d:bf:cb:be:a8:22:10:3d:87:bd:79:d5:a4:7a:
e0:fd:2d:45:4d:3d:9e:b8:b6:ec:1e:2f:61:4d:b7:7e:96:38:
ed:d5:7c:94:69:29:ba:73:2c:58:1d:c0:2b:14:d1:98:bd:70:
bc:8a:bf:29:85:8b:bf:18:14:24:1c:99:84:62:07:65:9e:7f:
6f:d4:2a:fe:9b:b4:e5:f2:00:09:ae:80:1d:71:98:fc:d4:e0:
6c:86:14:5b:5f:6e:e8:f2:cd:49:97:56:61:d7:3f:97:f8:d6:
2e:bd:1d:8d:12:1c:c6:ce:c3:f2:bb:92:ea:11:f9:42:af:d0:
c2:07:34:a8:64:89:3a:ea:63:4f:5c:4b:56:f8:d7:22:b8:b7:
a3:0f:66:02:35:8a:bd:3c:71:8d:4f:93:20:78:69:7a:46:bf:
1a:ca:16:b9:f5:35:1d:57:2b:13:55:a0:4b:28:66:0d:1a:86:
04:73:55:c2:a1:5e:f2:6c:f1:fe:c5:fd:14:5d:61:d8:c4:54:
6b:43:e8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:46:26 2025 by rpki-client