Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft
File: bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft (raw, json)
Hash identifier: rcOh2vwHL3G+h0vSNKgynrZK3n9kD7GI4b+Os4CWgkM=
Subject key identifier: A8:4B:23:DA:79:81:39:E2:E5:84:3B:00:AA:B0:07:4F:52:E2:62:6F
Authority key identifier: 6C:29:24:4A:C4:02:67:EE:C4:7A:91:70:8F:89:CF:53:66:EA:A8:D7
Certificate issuer: /CN=6c29244ac40267eec47a91708f89cf5366eaa8d7
Certificate serial: 0197B6A1F6198B5277128536563692EBD987
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bCkkSsQCZ-7EepFwj4nPU2bqqNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft
Manifest number: 0E49
Signing time: Sat 28 Jun 2025 13:02:37 +0000
Manifest this update: Sat 28 Jun 2025 13:02:37 +0000
Manifest next update: Sun 29 Jun 2025 13:02:37 +0000
Files and hashes: 1: bCkkSsQCZ-7EepFwj4nPU2bqqNc.crl (hash: bPbtNoGb3aSu55AyeproYpxYsTdIOzh5cjDG5nwLO8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bCkkSsQCZ-7EepFwj4nPU2bqqNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:f6:19:8b:52:77:12:85:36:56:36:92:eb:d9:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c29244ac40267eec47a91708f89cf5366eaa8d7
Validity
Not Before: Jun 28 13:02:37 2025 GMT
Not After : Jun 29 13:02:37 2025 GMT
Subject: CN=a84b23da798139e2e5843b00aab0074f52e2626f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7e:12:43:5d:25:57:d1:fb:e6:08:b1:07:be:
67:0f:bb:5e:21:ca:53:d0:9e:56:61:1e:45:ff:a6:
ad:43:75:18:2c:67:e8:59:a8:1d:fc:3a:22:89:55:
69:c9:e1:4f:e7:ce:3f:cf:5d:2a:23:f4:eb:45:8c:
6c:46:b7:53:38:5a:f1:28:52:ab:79:00:94:d6:90:
27:0d:6c:bc:5b:48:bc:fa:0d:81:d1:bc:37:fa:58:
b0:6b:c3:86:79:1a:58:fa:0d:8a:3e:6d:d9:11:0d:
72:67:46:ea:db:5b:48:60:be:9b:9b:b0:da:e3:f1:
d1:47:94:2b:61:fc:c0:60:91:72:ba:80:86:56:ba:
71:a9:54:33:49:ea:b3:26:0f:f6:35:f8:94:f7:6f:
54:b1:30:55:5f:ec:aa:72:90:b4:fc:78:06:aa:e8:
ca:df:0a:03:b0:1d:f3:91:66:70:04:08:bf:0e:98:
f0:6c:ac:0e:d0:b3:56:4b:8e:c5:73:20:08:4d:5c:
24:89:8a:f0:28:1c:c1:c0:84:dd:c4:f6:bc:6b:a0:
a3:95:6e:14:08:97:c3:d5:bf:f2:29:1d:00:29:a2:
8e:3f:00:d4:7d:b6:99:9d:d0:64:cc:35:ba:9e:34:
01:94:8e:16:d9:1b:07:bb:71:84:01:92:61:f2:0c:
58:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4B:23:DA:79:81:39:E2:E5:84:3B:00:AA:B0:07:4F:52:E2:62:6F
X509v3 Authority Key Identifier:
keyid:6C:29:24:4A:C4:02:67:EE:C4:7A:91:70:8F:89:CF:53:66:EA:A8:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bCkkSsQCZ-7EepFwj4nPU2bqqNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:9a:de:38:cc:6a:22:1a:55:26:30:de:e0:b8:1e:5d:ff:9f:
9f:c2:a5:b1:3c:d1:71:3c:0a:4f:c2:4c:af:a2:de:4e:27:f0:
fe:c1:26:dc:12:e1:ef:28:87:af:77:19:d8:e1:38:d9:f5:aa:
77:15:09:3d:b2:32:cf:52:57:bc:44:1c:2d:3c:0f:9a:3e:ec:
3c:17:eb:6c:eb:1a:b1:57:51:85:5b:a8:fc:66:c3:2c:ee:ea:
ec:52:79:f6:d9:67:ca:16:f7:95:c1:3b:15:07:4a:3a:91:75:
b6:6a:89:ca:63:95:f2:82:d7:58:72:60:60:79:5f:05:95:ce:
4c:8a:ef:79:32:ab:31:8d:0a:17:fc:b7:c0:f8:4a:6c:fa:52:
da:c9:c6:5b:8a:ce:0d:39:a1:22:38:92:d0:15:2e:76:16:c0:
a7:2a:b0:10:ed:ec:b8:02:8a:40:08:42:a6:d4:ba:e8:f5:0c:
89:f7:0e:8a:71:56:5f:03:14:8b:38:dc:7a:eb:3e:48:0a:27:
b0:bb:e3:7d:04:32:67:70:55:98:62:09:ee:b3:ef:bf:fe:94:
82:41:0a:50:e8:99:37:74:ac:2b:4e:30:4d:52:aa:6f:b6:c4:
db:ad:4b:80:0d:20:55:05:ca:c9:fa:fb:bf:3e:55:d2:55:9c:
d1:ca:23:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:41:44 2025 by rpki-client