Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft
File: baDun_CcfPx-6XYfGjyPMO-sWEg.mft (raw, json)
Hash identifier: 25/eWsVZ3mXSsQY7rfYxAYBgts/lwJhPZJboGkBrU9Q=
Subject key identifier: 70:1B:4E:54:23:77:CD:27:85:E3:99:22:64:EB:D1:08:34:FC:0A:CA
Authority key identifier: 6D:A0:EE:9F:F0:9C:7C:FC:7E:E9:76:1F:1A:3C:8F:30:EF:AC:58:48
Certificate issuer: /CN=6da0ee9ff09c7cfc7ee9761f1a3c8f30efac5848
Certificate serial: 019A00DA470318D66B94324D72DAEA0594AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft
Manifest number: 0B21
Signing time: Mon 20 Oct 2025 09:01:36 +0000
Manifest this update: Mon 20 Oct 2025 09:01:36 +0000
Manifest next update: Tue 21 Oct 2025 09:01:36 +0000
Files and hashes: 1: baDun_CcfPx-6XYfGjyPMO-sWEg.crl (hash: 8vmR2nPMG4OoAfO34/q5DTaaQd0DI/tEPU5WmGEcYR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:47:03:18:d6:6b:94:32:4d:72:da:ea:05:94:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6da0ee9ff09c7cfc7ee9761f1a3c8f30efac5848
Validity
Not Before: Oct 20 09:01:36 2025 GMT
Not After : Oct 21 09:01:36 2025 GMT
Subject: CN=701b4e542377cd2785e3992264ebd10834fc0aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a8:f2:90:f3:ef:a5:12:87:f5:90:ac:a8:b5:
8d:72:1e:35:fe:34:d6:8f:04:1a:07:77:1d:f3:33:
d9:1a:86:d2:9d:b1:32:d6:78:95:b0:97:b3:0b:25:
e6:57:f8:2b:5d:fe:bb:3d:d6:8c:70:ed:4e:2a:ad:
f7:38:a1:58:34:c5:ec:2a:24:c1:f8:d4:c5:7a:f4:
e1:d8:7c:48:90:9f:fa:ea:86:ba:d6:d0:fc:61:85:
f8:bf:fe:48:2d:f9:39:89:07:8b:bf:39:ce:49:60:
e2:0a:57:4c:a7:b8:1a:b2:ec:54:07:eb:3d:43:18:
3b:3a:67:28:55:38:75:b9:8b:15:1c:ff:24:26:d8:
ec:7d:50:72:ed:4e:b1:47:0e:12:33:44:32:b7:40:
35:ce:c1:02:82:ef:8a:0d:d2:78:54:e4:fe:07:50:
c8:24:38:7f:5e:6b:ec:43:3d:36:50:b6:21:39:b1:
f2:00:75:d0:44:8a:dc:b7:c0:4e:ca:cd:67:58:94:
67:e8:cf:b1:47:81:f7:c8:d4:a0:65:02:33:7f:45:
0c:7a:5d:1f:07:e4:a3:26:f5:e6:ba:9e:14:de:7b:
ec:03:63:58:28:b8:ea:4c:ed:4b:97:16:10:ba:8e:
02:2a:78:40:a5:d0:ca:80:fb:1f:70:cd:ee:a8:3d:
3d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1B:4E:54:23:77:CD:27:85:E3:99:22:64:EB:D1:08:34:FC:0A:CA
X509v3 Authority Key Identifier:
keyid:6D:A0:EE:9F:F0:9C:7C:FC:7E:E9:76:1F:1A:3C:8F:30:EF:AC:58:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:37:0d:50:84:c8:02:7f:d2:c4:cc:93:06:b0:e7:01:6a:73:
79:bf:16:c3:2d:de:8e:b0:9f:a0:a9:d6:66:86:6e:80:28:10:
9b:ca:db:e2:c4:ff:5c:df:d2:a0:c5:44:f6:4f:e7:45:73:c1:
3c:ae:6a:8b:cf:05:3b:db:cb:77:d7:9e:85:1e:af:ce:6a:47:
5b:88:de:c9:cd:c3:f9:8b:d3:49:19:c5:b7:0c:f1:80:85:88:
28:b4:12:ae:bd:97:21:75:70:48:63:48:ef:a4:a8:bb:f0:9c:
06:10:2d:18:d4:34:ad:7d:3a:62:a8:85:c3:20:fd:50:0a:4b:
03:57:17:70:12:be:cb:ee:6a:2b:43:91:11:f3:49:04:ea:22:
a1:e6:eb:03:d7:ba:af:f8:1c:9c:90:41:17:0d:cb:22:ae:b0:
5d:b5:a9:ee:44:08:85:cb:82:c4:33:7b:77:b1:de:fb:d8:68:
6d:f2:cf:24:00:1e:8e:bf:63:93:02:48:c9:d4:99:96:9f:f0:
80:9c:ea:51:6a:b7:a0:01:b6:fe:a3:ae:17:5d:53:5b:0c:01:
5a:ff:2f:5d:31:3d:fa:59:0e:af:c9:d1:53:46:b0:76:9b:29:
25:1a:2e:d5:45:7d:09:41:f0:79:ca:6b:79:82:d5:ec:8f:f0:
04:3b:e6:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoA2kcDGNZrlDJNctrqBZSqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkYTBlZTlmZjA5YzdjZmM3ZWU5NzYxZjFhM2M4ZjMwZWZh
YzU4NDgwHhcNMjUxMDIwMDkwMTM2WhcNMjUxMDIxMDkwMTM2WjAzMTEwLwYDVQQD
Eyg3MDFiNGU1NDIzNzdjZDI3ODVlMzk5MjI2NGViZDEwODM0ZmMwYWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhajykPPvpRKH9ZCsqLWNch41/jTW
jwQaB3cd8zPZGobSnbEy1niVsJezCyXmV/grXf67PdaMcO1OKq33OKFYNMXsKiTB
+NTFevTh2HxIkJ/66oa61tD8YYX4v/5ILfk5iQeLvznOSWDiCldMp7gasuxUB+s9
Qxg7OmcoVTh1uYsVHP8kJtjsfVBy7U6xRw4SM0Qyt0A1zsECgu+KDdJ4VOT+B1DI
JDh/XmvsQz02ULYhObHyAHXQRIrct8BOys1nWJRn6M+xR4H3yNSgZQIzf0UMel0f
B+SjJvXmup4U3nvsA2NYKLjqTO1LlxYQuo4CKnhApdDKgPsfcM3uqD09CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHAbTlQjd80nheOZImTr0Qg0/ArKMB8GA1UdIwQY
MBaAFG2g7p/wnHz8ful2Hxo8jzDvrFhIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmFEdW5fQ2NmUHgtNlhZZkdqeVBNTy1zV0VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy80ZjdiYjktNGQ2OS00OWRlLTlhNDkt
YTRkOWRjNzZjMmI4LzEvYmFEdW5fQ2NmUHgtNlhZZkdqeVBNTy1zV0VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy80ZjdiYjktNGQ2OS00OWRlLTlhNDktYTRkOWRjNzZjMmI4
LzEvYmFEdW5fQ2NmUHgtNlhZZkdqeVBNTy1zV0VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkDcNUITI
An/SxMyTBrDnAWpzeb8Wwy3ejrCfoKnWZoZugCgQm8rb4sT/XN/SoMVE9k/nRXPB
PK5qi88FO9vLd9eehR6vzmpHW4jeyc3D+YvTSRnFtwzxgIWIKLQSrr2XIXVwSGNI
76Sou/CcBhAtGNQ0rX06YqiFwyD9UApLA1cXcBK+y+5qK0OREfNJBOoioebrA9e6
r/gcnJBBFw3LIq6wXbWp7kQIhcuCxDN7d7He+9hobfLPJAAejr9jkwJIydSZlp/w
gJzqUWq3oAG2/qOuF11TWwwBWv8vXTE9+lkOr8nRU0awdpspJRou1UV9CUHwecpr
eYLV7I/wBDvmrw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:40:23 2025 by rpki-client