Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
File: Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft (raw, json)
Hash identifier: VQcThPk27BHCIDAXsGgH/7prh+K9/Vyr2BP2lTUC2V8=
Subject key identifier: 99:BF:5F:79:7A:DE:84:9C:0A:1B:FA:A0:80:79:81:63:A2:25:89:57
Authority key identifier: 07:1D:63:9C:1E:02:ED:A2:53:8D:34:B0:C8:B4:52:13:C6:4D:6A:3C
Certificate issuer: /CN=071d639c1e02eda2538d34b0c8b45213c64d6a3c
Certificate serial: 0197B7EA9A1D85AAF3E101D357D02AFEC551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
Manifest number: 1201
Signing time: Sat 28 Jun 2025 19:01:34 +0000
Manifest this update: Sat 28 Jun 2025 19:01:34 +0000
Manifest next update: Sun 29 Jun 2025 19:01:34 +0000
Files and hashes: 1: Bx1jnB4C7aJTjTSwyLRSE8ZNajw.crl (hash: AnJbkuv6tJ1Bfrc6LGCnN9M136v70eo3CU9E0F+xc9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:9a:1d:85:aa:f3:e1:01:d3:57:d0:2a:fe:c5:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=071d639c1e02eda2538d34b0c8b45213c64d6a3c
Validity
Not Before: Jun 28 19:01:34 2025 GMT
Not After : Jun 29 19:01:34 2025 GMT
Subject: CN=99bf5f797ade849c0a1bfaa080798163a2258957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9a:e1:3f:3b:67:d3:b2:47:8d:c1:71:90:66:
0a:b4:dc:2a:e9:1f:05:57:db:cc:cf:38:bd:b3:82:
66:53:06:6c:4d:57:67:f2:96:f5:aa:5f:b9:41:26:
0e:5f:90:f9:ac:7c:fb:bc:2d:fa:77:e3:8e:90:cb:
f0:7d:f6:dd:2b:87:e1:71:88:99:24:40:4a:87:fe:
d6:1b:f4:16:e2:e7:31:70:5d:8a:dc:f2:7a:3d:78:
52:ae:48:db:46:16:87:01:3d:7d:f8:65:33:39:56:
3a:dd:23:a2:07:4d:fb:85:8e:ed:7f:36:6c:60:66:
fa:08:9a:18:05:ce:50:03:05:59:dd:51:ed:a2:02:
11:34:cf:39:6a:59:d2:c9:fa:a2:ba:b1:48:8c:47:
d4:dd:91:ec:ca:20:86:5d:13:e8:72:5e:d6:80:4c:
64:54:bf:80:6e:f2:6b:9d:b5:2c:ea:66:99:cc:70:
e2:72:6d:29:ee:80:17:95:8d:eb:03:44:e6:cd:fc:
5e:14:d9:f8:e3:f8:bb:3c:a8:eb:e1:e0:c8:a5:df:
13:51:7e:a7:b2:1b:13:68:58:4c:00:24:4f:5a:8a:
67:f8:00:ef:8f:c3:ce:ad:93:20:b6:8f:9a:51:8d:
77:be:d3:c1:11:00:70:27:d5:3a:ca:45:e7:ed:fc:
2c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BF:5F:79:7A:DE:84:9C:0A:1B:FA:A0:80:79:81:63:A2:25:89:57
X509v3 Authority Key Identifier:
keyid:07:1D:63:9C:1E:02:ED:A2:53:8D:34:B0:C8:B4:52:13:C6:4D:6A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:6a:33:a5:54:57:7b:5b:d7:ad:ac:1a:43:0b:c3:cc:bc:6f:
08:1e:c0:1a:3f:30:e3:5e:8d:42:04:db:b3:f4:4e:a3:1d:6a:
f3:35:c3:6e:4d:ad:d3:8b:ba:2b:35:c0:98:53:f5:0c:1e:5d:
3e:72:75:89:aa:46:6c:42:d8:ee:b1:97:c5:2f:2a:32:a2:5f:
73:19:09:74:9e:60:1d:3f:62:99:ad:45:54:78:32:42:88:58:
5d:f2:06:9a:ec:ee:44:a9:21:67:b8:9f:72:94:bf:5d:4a:27:
e6:51:18:68:b6:4f:b0:2a:0f:f4:ab:69:be:c7:44:47:f5:08:
47:75:e8:0e:7d:08:da:f6:36:cf:0b:e2:d1:17:63:6d:e3:a3:
bf:02:32:ac:75:e2:73:1d:a2:c3:52:cf:87:cf:11:4d:e1:9a:
10:7c:e4:53:2a:eb:6c:6d:2c:aa:cb:b5:aa:de:f6:3e:1a:58:
24:e7:c6:e9:23:a7:92:64:ac:d2:c5:b6:0e:15:d6:46:e3:5e:
b4:c2:c2:39:ff:d8:dc:08:b5:03:8d:54:52:1f:45:79:66:cf:
c9:66:20:32:9c:fc:57:20:41:7f:b4:9c:56:84:93:f0:b9:e6:
5c:1d:ab:57:04:8b:b3:0a:f6:a5:20:ee:c3:c7:e1:8b:74:cc:
52:f4:84:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:56 2025 by rpki-client