Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
File: bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft (raw, json)
Hash identifier: pOOjiDPoLv1/Tow1f49y5muoIV8M4syWLo+O1562vMI=
Subject key identifier: 03:28:6C:AB:CB:2E:51:F9:E7:8D:6F:CA:2F:36:08:3C:80:9B:AB:2B
Authority key identifier: 6C:CC:71:37:70:4B:26:30:19:17:56:3F:2A:84:67:1E:F6:75:80:06
Certificate issuer: /CN=6ccc7137704b26301917563f2a84671ef6758006
Certificate serial: 0197C4C9D690E108C819587CF70F836CAD41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
Manifest number: 04A3
Signing time: Tue 01 Jul 2025 07:00:51 +0000
Manifest this update: Tue 01 Jul 2025 07:00:51 +0000
Manifest next update: Wed 02 Jul 2025 07:00:51 +0000
Files and hashes: 1: bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl (hash: G9KwtqLO9nEggJG0gbVtDpVreTUNFBjHBEjul9658k0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:c9:d6:90:e1:08:c8:19:58:7c:f7:0f:83:6c:ad:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccc7137704b26301917563f2a84671ef6758006
Validity
Not Before: Jul 1 07:00:51 2025 GMT
Not After : Jul 2 07:00:51 2025 GMT
Subject: CN=03286cabcb2e51f9e78d6fca2f36083c809bab2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bf:97:1a:69:34:ea:a8:7f:18:3a:47:bf:19:
05:19:e5:08:e4:58:f0:63:55:06:a3:0e:d7:1e:c8:
7a:be:ab:67:1a:7b:3c:0b:1b:4d:c2:14:28:22:5b:
13:74:12:c3:bb:c7:9e:69:50:40:26:9e:47:dd:d4:
a5:e5:c1:e7:14:ab:b8:b8:f4:d3:13:57:5e:dc:3f:
4a:36:74:37:fa:40:18:2c:f3:5a:38:37:22:2b:02:
03:ee:d7:50:b6:6b:1e:f0:05:b7:42:c2:cc:02:25:
17:1f:4f:4f:e6:09:44:e9:17:48:06:c3:6e:93:a6:
d1:a0:6d:63:21:1a:9b:df:f7:80:54:58:1c:21:fc:
2b:49:28:03:4c:54:9d:08:15:af:48:cb:22:7a:40:
6f:48:d9:de:f3:c1:93:3d:b7:78:7c:61:65:da:e1:
a3:87:46:c6:83:90:66:24:11:65:64:59:65:77:e1:
74:2b:89:03:fd:be:77:80:14:fd:be:65:48:ed:0c:
1f:b0:3d:d0:6a:14:1d:f6:34:40:ea:76:e8:c2:c2:
a1:5c:30:be:d2:06:b1:30:b7:9b:8e:d1:5c:b3:3b:
3a:bb:59:e6:f5:0d:e3:38:2a:d2:39:19:0c:e7:15:
78:b0:1a:5d:47:8f:21:fb:52:74:d4:4c:e5:c1:45:
b8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:28:6C:AB:CB:2E:51:F9:E7:8D:6F:CA:2F:36:08:3C:80:9B:AB:2B
X509v3 Authority Key Identifier:
keyid:6C:CC:71:37:70:4B:26:30:19:17:56:3F:2A:84:67:1E:F6:75:80:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:61:a9:8b:ab:f4:a9:da:51:39:53:0a:3f:b5:30:29:6b:76:
5a:91:8a:46:4a:44:05:f5:99:1a:3f:72:62:fc:74:16:01:1b:
36:d8:22:23:a5:4c:75:1a:4f:fe:f6:57:4b:aa:3e:24:e1:94:
f5:ae:c5:f2:53:89:5c:7c:62:e0:c5:25:28:68:9e:be:06:07:
d1:1c:cb:80:a6:3a:42:57:2e:2e:ad:e2:c2:b9:20:03:cb:16:
86:0d:4d:09:8e:ab:57:4f:0a:df:91:93:c2:fd:f0:96:27:5b:
76:22:da:09:b4:c4:ac:a4:4e:df:3a:db:6a:4f:67:97:8b:01:
2a:83:62:be:8a:77:a1:c9:d6:5f:a6:b3:cd:83:3a:c2:1c:d7:
a7:c4:08:ac:67:56:4c:c8:2a:71:44:f9:fd:2a:84:9e:3b:c3:
e3:5c:ca:e8:4a:d3:69:97:4a:e9:1b:d6:bc:85:f2:d5:85:3f:
a0:8d:db:30:76:dc:61:16:fd:fa:c4:ed:a5:4c:2d:d5:b3:73:
d0:6c:70:d6:4d:b8:23:17:f4:96:15:47:94:7b:26:e6:fa:ce:
03:93:a1:67:90:b1:9c:00:16:c8:e6:46:f9:05:a6:a4:78:94:
33:d2:1e:60:86:bd:25:a7:e1:81:83:c2:af:a0:6f:7c:56:f1:
d8:9b:f3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:02:35 2025 by rpki-client