Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
File: bq0LWp5EY4gC_LRukPqjrbUWv4g.mft (raw, json)
Hash identifier: szT/WmIlY8l2TGQVOZ9hhUBvNr/hD5UrI0NewJV1w4U=
Subject key identifier: 77:79:58:0A:24:D6:CB:79:10:7C:DA:A5:9A:28:7C:70:57:F4:5F:27
Authority key identifier: 6E:AD:0B:5A:9E:44:63:88:02:FC:B4:6E:90:FA:A3:AD:B5:16:BF:88
Certificate issuer: /CN=6ead0b5a9e44638802fcb46e90faa3adb516bf88
Certificate serial: 0198D6609E9396A7143A6C30F11D4F726E13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 10:01:52 +0000
Manifest this update: Sat 23 Aug 2025 10:01:52 +0000
Manifest next update: Sun 24 Aug 2025 10:01:52 +0000
Files and hashes: 1: bq0LWp5EY4gC_LRukPqjrbUWv4g.crl (hash: qB+99mUr0EMfSnvzjaTV2hRgGcsl/TcPO43HT4mzlBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:9e:93:96:a7:14:3a:6c:30:f1:1d:4f:72:6e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ead0b5a9e44638802fcb46e90faa3adb516bf88
Validity
Not Before: Aug 23 10:01:52 2025 GMT
Not After : Aug 24 10:01:52 2025 GMT
Subject: CN=7779580a24d6cb79107cdaa59a287c7057f45f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c5:64:ba:04:c0:97:4a:9a:15:6f:74:fe:2c:
b6:95:d8:56:35:59:f8:e0:7f:a7:16:73:42:a9:00:
29:b6:f7:22:e0:2a:87:94:ad:e0:78:28:63:a3:1a:
fc:49:ea:4e:e8:aa:87:3f:1a:db:c9:63:10:b6:91:
27:3b:42:03:8f:74:00:22:6b:0f:07:89:39:57:b5:
50:f5:5c:2a:7c:a8:fe:cc:71:f8:49:dd:c7:2a:2c:
0a:c6:b8:56:fd:29:2c:87:00:01:09:21:ec:5f:e2:
0b:c7:69:db:bc:61:c4:78:a3:aa:30:b3:b9:df:a5:
3c:06:b3:b1:95:3e:0a:b5:16:37:41:01:1b:f7:70:
ea:9d:35:f9:ba:d0:d1:ac:96:91:09:eb:b4:d3:5b:
0a:df:02:ba:f4:20:39:31:92:91:19:1c:b9:62:28:
5b:4b:9b:6b:e1:52:c7:3c:2b:ee:84:f8:29:f5:7a:
5d:40:c7:23:02:67:f6:64:14:87:36:ff:42:7c:85:
1d:fd:de:de:ca:db:f2:d3:d8:38:cd:d7:e6:cb:44:
af:51:f8:ee:77:39:0e:66:0e:b8:5f:3c:c9:95:2b:
e2:01:5a:26:72:90:43:61:6a:9b:34:e1:eb:6d:3c:
fd:d0:12:b3:c1:63:21:18:6d:e2:18:0a:95:a7:53:
33:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:79:58:0A:24:D6:CB:79:10:7C:DA:A5:9A:28:7C:70:57:F4:5F:27
X509v3 Authority Key Identifier:
keyid:6E:AD:0B:5A:9E:44:63:88:02:FC:B4:6E:90:FA:A3:AD:B5:16:BF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:99:42:36:1b:08:0c:c8:62:36:f4:57:05:af:68:69:c9:23:
c8:f1:ff:87:d1:2d:e8:f8:48:09:43:c4:9e:ec:ab:1b:09:d3:
51:a5:a8:ca:5a:5d:65:f8:85:48:0c:10:32:6e:d3:c7:38:7f:
57:be:9e:25:a5:4e:e9:4c:e7:02:58:55:c3:51:dc:35:03:6a:
11:af:fa:f5:b1:85:71:8a:9a:3d:b1:99:40:3c:6d:10:38:ea:
81:bb:87:a1:92:ac:0b:46:f0:2a:73:da:c4:df:ff:01:74:5a:
c9:65:f2:1c:e8:20:55:76:04:d2:6a:13:80:4f:d1:6d:59:a6:
cf:38:54:af:d5:72:68:8f:76:c3:d5:31:85:af:02:20:a9:f2:
14:3b:c1:e6:ef:76:f5:21:16:3a:8d:ba:a8:6d:19:0b:b3:92:
4a:b8:ab:06:85:08:8f:1b:4f:51:62:98:70:4d:48:01:45:81:
25:10:f9:e3:35:f4:d8:97:a0:fb:d2:b8:72:eb:3f:3b:26:50:
35:91:c1:d5:06:84:27:a7:72:c4:9c:85:2a:d7:2e:49:52:ab:
fd:19:90:e0:bd:a0:63:5b:54:ff:18:ad:ad:10:99:44:73:bc:
a5:40:fe:5f:53:e0:b9:56:4b:ed:ee:43:8b:9d:da:95:47:e4:
91:71:38:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:18:47 2025 by rpki-client