Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
File: bq0LWp5EY4gC_LRukPqjrbUWv4g.mft (raw, json)
Hash identifier: JGI0S2JgyUa13VGyRZTK7kHxsLzI/Mk49P7kCRqe1CY=
Subject key identifier: 42:3B:A0:97:CF:BA:FE:A4:59:B1:62:7F:40:AE:51:4A:9D:99:3F:FD
Authority key identifier: 6E:AD:0B:5A:9E:44:63:88:02:FC:B4:6E:90:FA:A3:AD:B5:16:BF:88
Certificate issuer: /CN=6ead0b5a9e44638802fcb46e90faa3adb516bf88
Certificate serial: 0197BA7EB982630BB1DBC482201B63DBB165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
Manifest number: 15B5
Signing time: Sun 29 Jun 2025 07:02:36 +0000
Manifest this update: Sun 29 Jun 2025 07:02:36 +0000
Manifest next update: Mon 30 Jun 2025 07:02:36 +0000
Files and hashes: 1: bq0LWp5EY4gC_LRukPqjrbUWv4g.crl (hash: GIRvRtplR4K7OdI8e3Lw6Va9tySLtbi9AA+qrOUMyfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7e:b9:82:63:0b:b1:db:c4:82:20:1b:63:db:b1:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ead0b5a9e44638802fcb46e90faa3adb516bf88
Validity
Not Before: Jun 29 07:02:36 2025 GMT
Not After : Jun 30 07:02:36 2025 GMT
Subject: CN=423ba097cfbafea459b1627f40ae514a9d993ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:61:81:59:c0:3d:a9:07:85:d1:e0:d5:4e:aa:
1a:8b:0f:fa:5c:81:60:e7:0b:b5:08:30:3a:e9:66:
7d:fa:c3:db:ef:c1:23:1d:1f:1c:43:46:75:e5:ee:
88:fe:03:0a:79:fa:56:67:cc:e9:4f:35:ff:35:32:
e4:df:e9:c6:06:ce:81:49:65:ce:00:2a:4d:fb:01:
25:ac:4f:fd:46:38:35:ff:e5:d9:c0:ae:bb:9a:18:
fa:00:9a:b6:f3:d8:18:7f:93:9f:94:80:b1:0d:10:
b2:ef:52:d5:2b:cc:71:2c:63:77:56:fa:69:07:60:
b0:31:b5:02:01:6c:91:2c:ba:f7:e3:15:59:20:44:
9b:ed:a7:2b:55:a4:d7:3e:40:ef:e6:e1:5a:bd:88:
46:cb:3d:6f:9b:65:80:d0:cf:09:a9:f1:5b:65:a5:
31:15:17:fa:44:42:56:c6:5d:97:99:50:53:b4:92:
e3:da:8e:a4:dc:94:bc:00:73:ce:f8:87:9c:ce:d4:
e6:9c:ea:e5:6a:d1:7d:d1:1a:14:83:c9:7b:16:b0:
64:ea:12:3a:7f:da:d2:1f:f4:60:ac:30:ac:d5:c3:
24:07:5b:15:1e:56:1a:2c:2d:6d:05:b5:0d:20:f4:
c0:43:d1:6a:c2:97:1d:c3:2a:51:58:57:a1:1e:c3:
fc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:3B:A0:97:CF:BA:FE:A4:59:B1:62:7F:40:AE:51:4A:9D:99:3F:FD
X509v3 Authority Key Identifier:
keyid:6E:AD:0B:5A:9E:44:63:88:02:FC:B4:6E:90:FA:A3:AD:B5:16:BF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:47:2b:53:6f:2a:46:4f:fb:be:7e:50:f7:50:2e:c3:31:8d:
2c:15:0e:32:87:d7:9c:01:e8:c5:ac:46:b0:d1:26:05:5c:ba:
af:9c:75:71:9c:cd:20:6b:05:1c:a3:8b:61:45:d1:11:2e:3e:
df:25:2d:ff:c3:d5:49:a5:0f:22:1f:32:67:13:8a:8b:16:2a:
7c:37:31:01:66:d7:68:6e:3f:a0:a9:9c:4a:54:9e:df:4a:9a:
39:9e:f4:c5:83:53:0a:b9:0b:1c:d5:b8:01:84:05:91:88:26:
f5:9a:a4:8a:b1:fe:04:70:ac:00:91:e1:5c:0f:ac:b6:2e:0d:
29:95:e4:0c:5a:00:bb:e9:e6:2b:d5:79:07:d2:dc:b0:2b:67:
81:c3:4e:b3:6f:67:40:33:8c:a2:f0:2e:9c:5c:58:e8:6b:b3:
ed:63:be:5e:f3:ef:73:3a:03:d4:1f:5c:66:b3:19:f5:11:39:
87:b7:bf:17:f2:f9:b2:83:60:f0:5d:6c:fd:7c:e2:2d:e7:86:
87:6f:c4:44:ec:c3:da:bf:0b:2b:18:72:75:f1:57:f4:c3:c7:
56:d4:04:e6:6a:c9:30:a2:1f:d7:e1:3e:1a:ce:ba:dc:49:86:
81:c2:1a:9f:bc:fb:86:5a:39:5b:03:7a:38:ee:39:9f:e3:e1:
bd:11:94:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:45:10 2025 by rpki-client