Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft
File: baDun_CcfPx-6XYfGjyPMO-sWEg.mft (raw, json)
Hash identifier: Al7HzO5hLdSaIKPT/DmbuHE6vmPTiGiXTKwwycWbFhM=
Subject key identifier: AC:83:C5:DE:C6:11:A2:E6:EC:90:17:4D:68:3A:E6:F4:30:64:36:70
Authority key identifier: 6D:A0:EE:9F:F0:9C:7C:FC:7E:E9:76:1F:1A:3C:8F:30:EF:AC:58:48
Certificate issuer: /CN=6da0ee9ff09c7cfc7ee9761f1a3c8f30efac5848
Certificate serial: 0197BB902C6985FD0BDC33FBDBE10D6108FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft
Manifest number: 09F4
Signing time: Sun 29 Jun 2025 12:01:17 +0000
Manifest this update: Sun 29 Jun 2025 12:01:17 +0000
Manifest next update: Mon 30 Jun 2025 12:01:17 +0000
Files and hashes: 1: baDun_CcfPx-6XYfGjyPMO-sWEg.crl (hash: bQbfcqHeEVFc2M+8OffzpB3fH4oGWIZ37w+Wb16EWhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:90:2c:69:85:fd:0b:dc:33:fb:db:e1:0d:61:08:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6da0ee9ff09c7cfc7ee9761f1a3c8f30efac5848
Validity
Not Before: Jun 29 12:01:17 2025 GMT
Not After : Jun 30 12:01:17 2025 GMT
Subject: CN=ac83c5dec611a2e6ec90174d683ae6f430643670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2a:be:3c:e5:20:7d:eb:53:ae:18:24:ad:ef:
29:ae:df:69:66:ff:da:73:df:11:a1:ba:f5:cb:5e:
46:62:e6:8e:a1:72:a1:f5:f1:83:ff:f8:40:21:49:
24:30:e6:ae:2c:02:d6:27:6f:16:84:08:88:46:fd:
e8:2f:f1:d9:aa:14:19:b2:8a:a3:30:0b:11:f8:fe:
0d:8f:37:f8:6f:d2:54:1b:f3:61:f1:57:d5:0f:b3:
c8:92:c9:27:04:bb:b9:b7:d7:11:8d:83:21:b0:92:
6a:ff:53:1d:80:f7:43:22:83:8f:ea:98:fa:ae:f5:
53:13:b9:fa:df:79:a2:12:04:29:3e:a7:f2:5c:20:
a6:f9:6a:b5:78:1f:25:9d:79:d8:17:03:00:c7:4f:
0d:17:ed:9a:ab:1b:e3:99:55:ef:86:75:85:9e:b5:
c5:45:ea:f6:ae:b7:99:99:98:69:55:e9:00:20:85:
8d:07:bc:ed:fb:d5:dc:c1:cd:c8:fd:3a:57:53:15:
c6:0d:db:ee:78:b6:97:50:dd:26:74:a5:3b:42:84:
62:47:04:7b:e6:dd:79:15:7d:2a:35:c3:ac:65:50:
2f:71:4b:55:d0:86:34:e9:a1:b5:e5:aa:35:79:ac:
0c:8f:47:d1:74:56:48:92:7a:c8:6b:32:d1:fc:d4:
0e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:83:C5:DE:C6:11:A2:E6:EC:90:17:4D:68:3A:E6:F4:30:64:36:70
X509v3 Authority Key Identifier:
keyid:6D:A0:EE:9F:F0:9C:7C:FC:7E:E9:76:1F:1A:3C:8F:30:EF:AC:58:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:68:b3:ca:b4:72:5c:a1:ad:5e:c1:9f:58:be:ad:e5:1d:7f:
0b:18:fc:bc:54:ea:4d:18:1f:6d:79:c5:54:37:41:7f:b0:13:
cc:42:1e:e5:85:73:78:d9:e2:c8:61:b8:a0:ae:60:aa:77:80:
e8:bb:be:92:ca:db:9d:55:13:d8:ec:08:be:97:cd:6a:62:4a:
30:25:ba:7d:b1:aa:3f:3d:d7:65:e1:69:cc:8a:98:d5:7c:21:
85:2f:12:1f:13:ff:39:6f:c1:36:2d:52:5c:80:36:91:24:54:
88:03:ad:2c:cf:a5:ac:b0:a3:74:c7:3f:fa:17:4e:28:4b:3b:
a2:7f:e5:34:66:93:03:e2:c9:1d:32:3d:2b:2e:1e:9e:97:f8:
07:fa:b8:ae:75:70:1c:29:6f:70:e5:83:41:95:4b:78:ff:0b:
f8:9d:3b:07:98:5b:08:28:e6:dd:da:5f:79:1d:9f:81:a1:ee:
7d:85:ae:80:c3:2a:15:ab:5b:15:6a:35:d1:b3:ed:fe:ca:e5:
40:42:86:b5:84:74:7d:10:13:2c:02:3c:d0:e9:52:d0:59:34:
d1:6b:82:06:9a:94:89:b6:ee:e5:25:7c:2a:80:7a:12:36:46:
a3:af:a0:4d:78:ac:b1:9d:67:55:46:d1:21:5a:67:e3:c0:d0:
5f:b5:2d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:55:39 2025 by rpki-client