Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
File: BsL3NfcUX3DScCYC7oyBVknrLkU.mft (raw, json)
Hash identifier: J6AK0EpJ3S0+1MZebuF5RxgKh0wFV7D99RksdUBMl6E=
Subject key identifier: 81:CD:9A:CB:1C:87:7B:49:0B:34:0F:30:33:31:49:82:60:94:05:65
Authority key identifier: 06:C2:F7:35:F7:14:5F:70:D2:70:26:02:EE:8C:81:56:49:EB:2E:45
Certificate issuer: /CN=06c2f735f7145f70d2702602ee8c815649eb2e45
Certificate serial: 0197BA7E9A273C36D22FDF9971789161858D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
Manifest number: 0FEB
Signing time: Sun 29 Jun 2025 07:02:28 +0000
Manifest this update: Sun 29 Jun 2025 07:02:28 +0000
Manifest next update: Mon 30 Jun 2025 07:02:28 +0000
Files and hashes: 1: BsL3NfcUX3DScCYC7oyBVknrLkU.crl (hash: 5OU/nHxKy6mn+7A8Zn1FlkMh+MtWUfX5m70YSto5wP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7e:9a:27:3c:36:d2:2f:df:99:71:78:91:61:85:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c2f735f7145f70d2702602ee8c815649eb2e45
Validity
Not Before: Jun 29 07:02:28 2025 GMT
Not After : Jun 30 07:02:28 2025 GMT
Subject: CN=81cd9acb1c877b490b340f303331498260940565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a7:5e:15:50:a2:0d:c4:ce:6a:b2:4d:ef:80:
3c:17:c3:8f:20:6a:df:45:37:ae:d6:06:af:57:06:
a5:a1:e3:a6:69:7f:4c:70:4f:16:f9:bf:8b:eb:9b:
f0:1d:77:24:d1:9e:ed:76:49:74:2c:4d:60:17:ed:
d9:25:57:a3:84:5d:3a:c8:bc:20:be:b2:d6:31:a1:
63:ed:f6:8a:05:03:ab:3c:82:72:ec:90:1f:da:6c:
09:cb:39:de:a6:47:24:92:d2:f4:ad:ec:ce:3a:f7:
c8:ab:84:1f:25:61:9b:3f:69:05:82:d3:87:2d:95:
fe:65:42:9b:6a:07:5c:2d:34:f9:84:68:62:14:ab:
16:65:a9:49:3a:c1:8d:9e:bc:e1:de:62:d1:12:38:
13:04:28:ba:16:4e:cc:e6:83:6e:3d:7b:8f:a3:79:
9f:1b:1c:63:02:7f:7d:cf:36:fb:50:41:c7:9a:c2:
f6:0a:61:ee:e7:9a:c0:35:9a:bf:fe:f8:2b:37:ff:
6d:8b:e9:51:80:f4:16:29:62:75:cc:e5:6d:c4:52:
66:7a:20:9b:f8:a1:34:ce:d1:1e:6f:69:0f:29:d8:
54:ae:c4:75:75:b6:59:57:2a:30:fd:e5:be:bb:22:
6a:1f:e3:32:bb:9a:56:d4:68:d6:f3:74:50:81:0a:
fe:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CD:9A:CB:1C:87:7B:49:0B:34:0F:30:33:31:49:82:60:94:05:65
X509v3 Authority Key Identifier:
keyid:06:C2:F7:35:F7:14:5F:70:D2:70:26:02:EE:8C:81:56:49:EB:2E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:1d:9a:da:bf:8d:a0:c8:ce:77:50:b1:ae:6b:00:37:b3:f7:
c6:a2:8c:7e:77:de:47:dd:f3:47:90:a0:a4:4d:8d:67:20:7f:
01:f5:51:53:2c:cf:57:b0:ba:73:c4:17:be:46:0a:0e:cf:a2:
49:01:04:bf:ee:8b:8d:ff:99:02:16:90:fa:ff:fb:9e:62:2d:
75:3f:97:be:66:d8:ce:fe:1e:3e:f1:8c:66:c3:60:40:a1:2a:
0a:17:92:65:dc:7e:e4:ee:19:86:ef:39:2c:90:cf:43:da:bb:
5f:ab:b0:da:5e:e2:94:ca:6c:ed:41:a1:cd:ea:21:2a:5e:f3:
50:73:c7:96:2b:69:5b:1e:58:97:06:3f:71:f0:9a:a9:8e:e4:
c3:2f:79:03:28:56:3c:f7:3a:c9:44:90:97:13:4f:8d:7c:fb:
ec:63:a4:53:31:8b:12:62:6f:83:fa:d9:0a:3c:e4:a4:08:51:
90:9a:72:99:b0:5c:bf:3c:7a:65:80:ee:4e:3c:a3:1c:1e:ea:
59:79:ff:7e:07:79:15:41:da:ed:15:1d:e5:0f:b2:d4:d7:cb:
11:fc:e5:01:a6:c1:af:be:d4:fd:36:3f:5e:b9:1f:5d:55:aa:
07:57:92:e6:75:17:e5:1e:0c:ed:fa:6d:06:b2:28:a9:e3:f3:
ef:8b:5f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:24:59 2025 by rpki-client