Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9d28dd-d203-4b4f-af97-59d20318cf91/1/bCjEbAuUE8313if9HJ9rRnMnfHs.mft
File: bCjEbAuUE8313if9HJ9rRnMnfHs.mft (raw, json)
Hash identifier: lfjLXoIIcOhzZqbN2Oe3+bzXSmMhCKrzBhal84/+olc=
Subject key identifier: D5:21:6E:2D:BE:68:EF:EA:91:0D:DD:AE:4F:44:67:C6:54:EC:74:C3
Authority key identifier: 6C:28:C4:6C:0B:94:13:CD:F5:DE:27:FD:1C:9F:6B:46:73:27:7C:7B
Certificate issuer: /CN=6c28c46c0b9413cdf5de27fd1c9f6b4673277c7b
Certificate serial: 0198D65FA76388536B26B5A2A123B0CABF2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bCjEbAuUE8313if9HJ9rRnMnfHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/9d28dd-d203-4b4f-af97-59d20318cf91/1/bCjEbAuUE8313if9HJ9rRnMnfHs.mft
Manifest number: 09E0
Signing time: Sat 23 Aug 2025 10:00:49 +0000
Manifest this update: Sat 23 Aug 2025 10:00:49 +0000
Manifest next update: Sun 24 Aug 2025 10:00:49 +0000
Files and hashes: 1: bCjEbAuUE8313if9HJ9rRnMnfHs.crl (hash: 16pfWPiDchOZnWKYNkE2mjv9zZJa4Ww6KUgCdSMdKtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/9d28dd-d203-4b4f-af97-59d20318cf91/1/bCjEbAuUE8313if9HJ9rRnMnfHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/9d28dd-d203-4b4f-af97-59d20318cf91/1/bCjEbAuUE8313if9HJ9rRnMnfHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bCjEbAuUE8313if9HJ9rRnMnfHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:a7:63:88:53:6b:26:b5:a2:a1:23:b0:ca:bf:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c28c46c0b9413cdf5de27fd1c9f6b4673277c7b
Validity
Not Before: Aug 23 10:00:49 2025 GMT
Not After : Aug 24 10:00:49 2025 GMT
Subject: CN=d5216e2dbe68efea910dddae4f4467c654ec74c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:15:27:93:4c:e6:9e:c9:49:0e:f9:2c:59:b9:
f3:4f:57:51:5f:de:a0:a3:4d:47:27:c7:66:b7:30:
a7:12:58:7e:65:4c:7d:52:6b:80:b4:8e:e1:43:0f:
f3:a3:9d:b3:8c:50:dd:57:a6:41:b1:e6:38:e6:b2:
69:c9:b7:6c:2b:0a:9b:5c:66:86:c1:e0:3a:e3:67:
43:ca:7b:5f:fb:20:f0:ed:93:07:c1:f0:5e:12:25:
18:3c:64:f6:b5:a7:51:d7:b4:9e:95:85:c3:d2:58:
83:9c:49:0b:f7:ad:9d:cf:14:3e:66:d4:e9:a5:22:
c8:58:21:50:4f:4e:cc:b2:96:ad:79:a3:db:38:77:
1f:dd:d5:7b:71:1f:13:6c:20:6c:cb:1a:3e:2e:90:
17:c9:82:8b:cb:e4:64:47:7b:2a:69:7d:b0:c0:41:
4e:c9:58:ee:52:f1:32:38:73:a4:a1:6d:99:dd:94:
42:ff:30:63:ee:ed:c1:1b:10:74:21:fa:dd:a9:cb:
12:d0:45:78:b1:cd:5d:9c:48:96:30:ea:30:98:37:
b1:68:50:22:c9:5c:87:a1:06:c9:55:e8:4a:49:f7:
13:3a:74:a2:d6:f8:9d:8f:fd:17:1e:dd:16:cc:09:
e3:7e:2c:40:11:6c:fe:fd:02:a7:ae:9c:ab:9c:90:
9d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:21:6E:2D:BE:68:EF:EA:91:0D:DD:AE:4F:44:67:C6:54:EC:74:C3
X509v3 Authority Key Identifier:
keyid:6C:28:C4:6C:0B:94:13:CD:F5:DE:27:FD:1C:9F:6B:46:73:27:7C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bCjEbAuUE8313if9HJ9rRnMnfHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9d28dd-d203-4b4f-af97-59d20318cf91/1/bCjEbAuUE8313if9HJ9rRnMnfHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9d28dd-d203-4b4f-af97-59d20318cf91/1/bCjEbAuUE8313if9HJ9rRnMnfHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:07:29:df:54:2b:3d:f6:57:bf:65:3f:4c:4d:50:9d:f4:d3:
36:b6:af:43:31:0c:ce:9b:b8:14:88:7f:65:b6:b3:92:17:3b:
da:3f:35:35:67:b6:fd:52:00:e9:7c:b5:6f:b7:6c:12:89:ea:
5e:61:6f:0b:33:70:bf:05:fa:75:85:8d:58:e4:21:7e:79:3f:
a7:fc:dd:36:1c:0d:6b:8d:07:ac:69:4d:8e:d8:d7:bd:29:2c:
6f:80:4a:d6:22:b1:98:7e:49:10:5b:62:da:41:7c:2b:41:4a:
34:16:7d:9b:2d:61:98:e6:b4:8b:8d:9e:37:86:b4:64:17:1c:
96:db:06:12:9f:58:9e:5f:3f:4c:7d:2c:8f:ef:2b:c0:2a:66:
26:9e:ed:fb:8a:f5:7a:f9:06:0b:57:0e:27:36:4c:b8:1c:eb:
a8:55:1a:b9:17:72:c5:f5:10:5c:d1:8d:39:3d:52:7b:16:26:
be:ae:dc:2d:1e:e8:ac:86:c2:0e:85:0a:d3:2d:33:5c:35:d0:
1e:7c:8e:59:6e:aa:c4:8e:eb:0b:42:8e:27:98:b0:e7:0f:34:
79:70:84:b2:b6:a0:a6:05:8c:b4:cd:85:a9:22:59:27:d0:a2:
12:e6:53:58:a5:a2:07:b4:56:0e:df:ee:bf:7e:c6:01:04:f1:
43:ed:86:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:48 2025 by rpki-client