Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft
File: vMBbyedz38ikm7QwgluXRt1BxPE.mft (raw, json)
Hash identifier: RAwKTi9zSVXmkm1ldy+S1RUaN7HOPezP5e94UXuPpX8=
Subject key identifier: 47:5F:8B:55:66:A0:63:CF:66:EE:70:8E:0E:BF:50:09:1B:22:DC:8A
Authority key identifier: BC:C0:5B:C9:E7:73:DF:C8:A4:9B:B4:30:82:5B:97:46:DD:41:C4:F1
Certificate issuer: /CN=bcc05bc9e773dfc8a49bb430825b9746dd41c4f1
Certificate serial: 0197B6A1171F07DC80486FADA756708F5D7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMBbyedz38ikm7QwgluXRt1BxPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 13:01:39 +0000
Manifest this update: Sat 28 Jun 2025 13:01:39 +0000
Manifest next update: Sun 29 Jun 2025 13:01:39 +0000
Files and hashes: 1: vMBbyedz38ikm7QwgluXRt1BxPE.crl (hash: 9c9fmsbtu/qGioHwTADmIU5Fj6Rp5Ub3wmhni/GTvK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMBbyedz38ikm7QwgluXRt1BxPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:17:1f:07:dc:80:48:6f:ad:a7:56:70:8f:5d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc05bc9e773dfc8a49bb430825b9746dd41c4f1
Validity
Not Before: Jun 28 13:01:39 2025 GMT
Not After : Jun 29 13:01:39 2025 GMT
Subject: CN=475f8b5566a063cf66ee708e0ebf50091b22dc8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:93:27:a9:c9:af:d1:e0:52:be:d5:23:9b:2d:
81:53:4a:22:fd:94:d9:3c:64:ee:fc:4b:32:fc:09:
0a:76:26:15:4f:d1:e7:c1:8f:53:cf:38:3c:87:37:
b2:7a:82:96:5b:f9:24:07:1b:53:a7:eb:7d:08:a8:
f7:49:ba:89:27:12:a6:03:d1:67:5f:0b:77:cd:cf:
3b:b1:39:22:52:96:67:cb:38:6a:55:fa:b7:fb:1d:
97:d5:1e:74:20:2b:c6:2f:4c:62:e4:8d:cf:b1:2d:
2e:2b:1f:23:73:a6:68:45:b5:b9:95:8c:7a:69:90:
3c:34:08:dc:8e:87:ce:4f:45:6e:dd:7d:09:a6:0f:
01:59:71:ee:55:96:2f:c5:56:aa:c8:77:95:91:43:
63:0c:4a:f7:50:8a:5b:54:3b:52:f2:85:4a:6f:b9:
37:57:73:6d:d3:ea:d5:ac:ec:91:4e:6b:ec:33:76:
f0:d2:ed:56:b5:63:06:46:b9:df:2d:35:e5:ef:38:
45:1d:30:7a:c9:be:45:0e:67:62:a8:38:16:e4:7b:
9f:21:7f:45:ed:b0:87:5e:d1:ec:42:d0:45:ab:d8:
92:4a:53:49:61:06:25:e6:88:2b:d3:06:5b:a6:4d:
fa:a5:ce:a7:5e:e8:f9:b1:33:5b:75:1a:57:d9:9d:
ac:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:5F:8B:55:66:A0:63:CF:66:EE:70:8E:0E:BF:50:09:1B:22:DC:8A
X509v3 Authority Key Identifier:
keyid:BC:C0:5B:C9:E7:73:DF:C8:A4:9B:B4:30:82:5B:97:46:DD:41:C4:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMBbyedz38ikm7QwgluXRt1BxPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:04:18:28:5a:f4:e6:5c:b4:34:32:ef:8a:1d:37:13:83:31:
81:8f:58:f4:75:33:70:b1:b3:20:97:34:0f:99:22:d5:0f:1f:
26:87:e0:a2:b6:50:fe:d4:cf:15:50:90:93:ba:5e:01:5a:eb:
fc:b2:89:28:6b:55:e8:4c:99:21:73:5e:37:46:ab:06:0b:07:
cc:50:03:b7:a8:2b:72:cf:9f:65:d3:c6:de:25:a1:f1:98:58:
1d:e2:f5:60:13:91:45:11:f5:dc:54:2f:f3:71:59:c0:a0:a2:
92:f0:08:ed:82:f7:8d:64:37:1a:bc:d6:e9:8a:84:5a:8f:34:
9b:ba:90:c5:33:8b:56:88:66:b1:dc:d9:2f:dd:e3:72:6d:c9:
e6:6a:f8:d4:71:8c:b2:93:fc:e2:f2:0a:e4:34:00:6a:ae:b0:
0e:f6:82:34:53:a8:13:1b:26:c5:b9:60:d4:8a:35:68:5f:0f:
79:f6:36:6c:1b:6a:77:47:a6:e2:54:94:67:a8:58:6a:cc:74:
a9:be:f0:0d:14:55:bb:b5:91:78:37:9d:01:af:39:30:e3:6e:
fa:39:8f:43:9a:1d:3b:4a:63:7a:10:1e:04:2f:cc:0b:d5:b6:
00:c6:db:af:da:c3:82:4a:5b:9e:bf:c9:b7:ba:1a:7d:78:62:
20:2c:3c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:23 2025 by rpki-client