Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft
File: baDun_CcfPx-6XYfGjyPMO-sWEg.mft (raw, json)
Hash identifier: 77o6/gFWGO/lo30o99gbHPSqK4VQBWh2QIsScyekJHg=
Subject key identifier: 3A:DE:03:49:79:C0:F7:61:05:F6:59:E4:A0:C2:D7:4B:F9:37:3A:DA
Authority key identifier: 6D:A0:EE:9F:F0:9C:7C:FC:7E:E9:76:1F:1A:3C:8F:30:EF:AC:58:48
Certificate issuer: /CN=6da0ee9ff09c7cfc7ee9761f1a3c8f30efac5848
Certificate serial: 0196AF20328B5B961C648202C5FE93D80C7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft
Manifest number: 0969
Signing time: Thu 08 May 2025 09:00:44 +0000
Manifest this update: Thu 08 May 2025 09:00:44 +0000
Manifest next update: Fri 09 May 2025 09:00:44 +0000
Files and hashes: 1: baDun_CcfPx-6XYfGjyPMO-sWEg.crl (hash: 2wb9Yl3PHa3Lp1wZ1yx5wxhKxZ0bZE2nrGBcj4czfdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:20:32:8b:5b:96:1c:64:82:02:c5:fe:93:d8:0c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6da0ee9ff09c7cfc7ee9761f1a3c8f30efac5848
Validity
Not Before: May 8 09:00:44 2025 GMT
Not After : May 9 09:00:44 2025 GMT
Subject: CN=3ade034979c0f76105f659e4a0c2d74bf9373ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:85:7b:79:a6:ed:30:8d:bb:63:d9:5a:41:cb:
28:a8:d3:1f:ff:e1:1b:36:3a:c0:52:7a:13:ea:b6:
9a:ee:42:cc:69:12:cc:10:a1:2b:37:72:87:41:bb:
a0:70:46:53:76:09:01:d4:d9:e3:f0:34:f9:e7:e6:
af:d8:42:4e:5a:d9:01:b5:92:94:99:40:b8:74:04:
f2:73:72:b0:85:87:84:41:34:2c:2a:84:02:46:4c:
af:2f:5d:5e:e2:06:73:6a:69:f8:41:75:ff:2e:1e:
c9:c6:ac:80:01:1f:a3:75:a8:51:52:b5:f0:34:9a:
36:e4:5f:ca:e5:2c:1f:ce:db:9b:a8:4a:e1:c3:b9:
14:a5:d5:f2:ad:56:e5:39:b7:c5:2a:e9:c2:d8:22:
07:7d:1e:ae:8e:12:b9:d8:fe:ad:d2:d7:3c:0a:73:
c0:f4:31:78:fc:cb:52:3a:2a:27:67:41:24:20:32:
d6:69:8f:0a:97:3e:29:eb:ae:0a:f5:48:a9:a5:3f:
d5:7a:4d:bc:df:cd:d5:47:24:82:27:b0:2f:2d:bf:
c6:28:7b:57:3e:cc:74:ae:f1:78:51:c4:e3:b9:52:
f1:fa:26:ea:fb:27:42:88:a2:a8:d4:21:b9:dd:39:
82:4d:1a:09:3e:73:c1:67:0f:25:d6:33:99:cb:e5:
79:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DE:03:49:79:C0:F7:61:05:F6:59:E4:A0:C2:D7:4B:F9:37:3A:DA
X509v3 Authority Key Identifier:
keyid:6D:A0:EE:9F:F0:9C:7C:FC:7E:E9:76:1F:1A:3C:8F:30:EF:AC:58:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:54:db:1d:86:8b:5e:89:d0:e1:40:3d:3c:ad:60:02:fd:58:
fb:c6:a0:63:9d:90:c2:63:74:20:f2:9c:ca:bf:b8:c3:35:5f:
1b:81:41:1f:72:9e:36:db:19:f3:3f:d3:52:45:f0:13:89:c4:
05:1f:10:43:a9:b3:49:f7:70:64:7c:92:fc:4e:dc:63:f8:d6:
be:55:26:b0:5f:19:ee:93:24:7a:84:d3:e3:c0:f5:6e:7b:18:
6e:4c:7b:5e:96:bb:80:b2:01:31:6a:a6:d2:f2:db:f1:7e:01:
29:88:f3:fe:99:aa:8b:88:44:bf:94:cb:96:7b:0c:6b:97:61:
75:b4:92:53:14:e7:f8:58:c8:bf:e5:1b:dc:ed:d5:d8:3f:89:
38:07:22:5d:88:a0:17:af:88:08:d6:dc:1b:50:96:7c:bd:81:
ee:1f:31:f5:cc:4b:70:2c:97:64:9c:82:5a:d7:8f:13:f6:e2:
df:e0:e3:43:f6:3d:6b:01:3c:84:4e:a0:bf:55:b8:d2:fd:25:
73:3b:1c:58:4f:d2:b8:ce:1c:d9:e6:b3:a7:7a:3f:86:34:3a:
28:40:51:00:20:c7:3b:e1:69:3f:0d:8e:3a:e8:ee:e8:09:93:
01:a7:26:5a:1b:06:95:a1:2b:1e:31:fa:6e:37:17:1a:ac:ae:
24:d2:ef:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 11:45:31 2025 by rpki-client