Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft
File: baDun_CcfPx-6XYfGjyPMO-sWEg.mft (raw, json)
Hash identifier: n5Gra06Pw0LwU7ivon+GDEIJAMcHRK1ozzzBzXT8+lQ=
Subject key identifier: C5:A8:D6:5B:AB:5C:B3:06:07:C3:4E:F3:93:63:CA:71:DF:1F:2B:B8
Authority key identifier: 6D:A0:EE:9F:F0:9C:7C:FC:7E:E9:76:1F:1A:3C:8F:30:EF:AC:58:48
Certificate issuer: /CN=6da0ee9ff09c7cfc7ee9761f1a3c8f30efac5848
Certificate serial: 0198D583A8098EF7F8761CE1465F9A8EFAF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft
Manifest number: 0A86
Signing time: Sat 23 Aug 2025 06:00:31 +0000
Manifest this update: Sat 23 Aug 2025 06:00:31 +0000
Manifest next update: Sun 24 Aug 2025 06:00:31 +0000
Files and hashes: 1: baDun_CcfPx-6XYfGjyPMO-sWEg.crl (hash: +tvrMs6vszRD6WztV48TqrTaQQdYGTu4nE/MkIN79l4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:a8:09:8e:f7:f8:76:1c:e1:46:5f:9a:8e:fa:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6da0ee9ff09c7cfc7ee9761f1a3c8f30efac5848
Validity
Not Before: Aug 23 06:00:31 2025 GMT
Not After : Aug 24 06:00:31 2025 GMT
Subject: CN=c5a8d65bab5cb30607c34ef39363ca71df1f2bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0c:bb:75:f0:89:21:22:0f:c8:93:cb:c7:f2:
9a:ad:cf:09:d4:39:cd:53:5e:3b:75:fd:4f:55:74:
70:17:41:e0:4b:6a:f3:fc:35:10:9a:cf:39:8f:8c:
de:2b:b7:0c:66:67:0d:2b:91:69:0d:3d:f7:1c:24:
fb:08:6c:6a:2c:23:60:2f:81:7b:23:1c:d2:7b:66:
f3:62:a2:be:07:c0:da:fa:70:2d:5b:32:ef:65:6f:
18:a8:aa:cb:3d:91:e8:5a:01:25:ad:8b:8d:70:65:
88:a2:4b:96:06:8d:98:9a:73:a1:9f:f6:fa:b1:94:
e8:4d:28:97:d2:6e:85:fb:a0:f3:6a:ab:7d:01:58:
c9:8b:a1:55:8d:f2:f3:ab:7d:93:95:e3:3d:e3:6e:
6c:ac:a0:18:ab:a4:68:0d:e6:87:24:d6:4d:f6:e8:
9a:e8:1b:9f:03:11:fb:59:5c:31:fd:9c:f9:d6:7f:
47:94:78:c2:48:85:7e:49:f3:9c:cc:6c:08:87:8d:
6f:2a:1d:f9:78:a0:38:d7:52:40:41:e6:8a:78:65:
b3:c0:89:85:40:dd:fe:3b:5b:be:20:ac:28:ae:7a:
99:7d:36:24:4a:35:8d:fb:8d:9a:f0:9b:bd:74:85:
0d:6d:88:9a:65:f3:57:6c:b9:26:6d:5c:a2:a2:fb:
2a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A8:D6:5B:AB:5C:B3:06:07:C3:4E:F3:93:63:CA:71:DF:1F:2B:B8
X509v3 Authority Key Identifier:
keyid:6D:A0:EE:9F:F0:9C:7C:FC:7E:E9:76:1F:1A:3C:8F:30:EF:AC:58:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ba:48:d4:dc:80:1e:b4:22:85:9f:10:ab:d6:8d:18:44:27:
1b:31:ef:de:95:f1:ad:3d:82:83:b8:b1:d3:1f:29:db:17:0d:
20:15:4d:12:62:73:f0:e6:0e:74:a8:4e:38:44:26:5a:70:d8:
1b:69:1f:34:ec:d4:60:e8:c2:0b:8a:5c:36:c2:bc:60:5d:8d:
77:62:f4:82:59:23:11:7b:83:a2:1a:0b:dd:a5:d3:e3:1d:c0:
d5:21:c9:67:b8:93:7d:51:fc:36:40:74:e2:c9:46:8a:ed:7f:
5d:26:db:19:b6:0e:3a:56:4a:28:fd:8f:5c:a0:52:59:18:df:
6d:8d:cb:a3:4f:26:d4:e6:e2:42:20:00:a8:7e:36:01:2a:cb:
79:54:5c:da:12:c6:8f:44:cc:7b:5c:bb:9c:d1:18:f7:46:d3:
40:73:b3:1c:7c:44:45:43:a2:b9:17:fe:b7:71:dd:20:f6:86:
c6:93:32:74:fb:32:bc:65:b1:e7:e7:7a:a0:b3:9d:4f:39:b9:
d8:af:b4:27:d1:58:73:0c:94:11:7e:e9:d8:b1:e3:cc:d3:2c:
22:7b:f8:14:74:78:86:fd:2a:6b:10:9a:47:fd:cd:c3:a3:a3:
3e:b1:3f:cd:38:fd:2b:a3:0a:db:63:ac:bd:f9:ca:bc:da:2a:
74:8b:4e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:22:13 2025 by rpki-client