Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/52ef7c-9a36-4362-8e7f-6394214a122c/1/bn-6EaMdOqkN48e7i1bTzQbmvnU.mft
File: bn-6EaMdOqkN48e7i1bTzQbmvnU.mft (raw, json)
Hash identifier: NJEvFVwT+a4RSQ/whuDDkmQhnATBFlAxViH+n9uFuUo=
Subject key identifier: E4:AF:3F:A5:BF:FF:D0:69:B5:5A:FC:D6:64:70:EC:EA:AC:D7:65:3E
Authority key identifier: 6E:7F:BA:11:A3:1D:3A:A9:0D:E3:C7:BB:8B:56:D3:CD:06:E6:BE:75
Certificate issuer: /CN=6e7fba11a31d3aa90de3c7bb8b56d3cd06e6be75
Certificate serial: 0196D4ADF22556D26C4935FF93778F138132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bn-6EaMdOqkN48e7i1bTzQbmvnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/52ef7c-9a36-4362-8e7f-6394214a122c/1/bn-6EaMdOqkN48e7i1bTzQbmvnU.mft
Manifest number: 1526
Signing time: Thu 15 May 2025 16:01:31 +0000
Manifest this update: Thu 15 May 2025 16:01:31 +0000
Manifest next update: Fri 16 May 2025 16:01:31 +0000
Files and hashes: 1: bn-6EaMdOqkN48e7i1bTzQbmvnU.crl (hash: NPkHCQOtlMsdAa11Xg4EnbVa+wBwtMsWDlzpmBk6EIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/52ef7c-9a36-4362-8e7f-6394214a122c/1/bn-6EaMdOqkN48e7i1bTzQbmvnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/52ef7c-9a36-4362-8e7f-6394214a122c/1/bn-6EaMdOqkN48e7i1bTzQbmvnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bn-6EaMdOqkN48e7i1bTzQbmvnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d4:ad:f2:25:56:d2:6c:49:35:ff:93:77:8f:13:81:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e7fba11a31d3aa90de3c7bb8b56d3cd06e6be75
Validity
Not Before: May 15 16:01:31 2025 GMT
Not After : May 16 16:01:31 2025 GMT
Subject: CN=e4af3fa5bfffd069b55afcd66470eceaacd7653e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:94:ba:8e:80:71:82:e4:71:5f:10:9f:3b:7a:
08:60:98:74:69:ca:20:d8:7f:3c:6e:a3:19:2e:8e:
7e:77:35:cd:3d:78:e3:30:d4:44:de:8e:4a:6d:27:
de:0a:93:64:cb:91:53:79:5a:28:df:fb:58:f7:41:
4f:37:43:2e:04:01:07:0a:74:f5:b4:55:fd:9b:38:
b0:d2:4b:9e:6f:ad:32:11:4a:8f:d5:5f:0d:a7:8a:
41:ee:3d:09:90:fc:b9:39:4e:cb:17:89:29:90:8d:
d9:a4:32:df:b8:48:51:c3:69:6c:d0:a8:1f:c2:93:
18:66:4e:e9:12:46:8d:f1:d9:10:fb:20:9c:54:dc:
fe:3a:86:46:0f:58:2b:cf:b7:a5:62:f7:55:e6:6d:
82:c6:6e:40:3c:91:a7:21:92:02:78:da:92:17:c9:
4c:b1:46:3f:bd:f4:c6:41:77:b5:d5:e3:62:7f:0d:
08:f0:89:e3:a5:6e:f2:15:4c:99:7f:58:96:f9:b0:
a1:2c:c2:91:3b:67:c1:04:b1:dc:eb:d6:38:d1:37:
ad:1f:0c:ff:9b:53:01:c1:de:68:af:98:62:b1:a5:
20:69:ac:40:f4:bd:1e:f9:b4:df:2c:1a:d3:dc:25:
cb:1b:d9:c5:74:56:46:0c:27:8c:3f:fc:03:98:2b:
d3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:AF:3F:A5:BF:FF:D0:69:B5:5A:FC:D6:64:70:EC:EA:AC:D7:65:3E
X509v3 Authority Key Identifier:
keyid:6E:7F:BA:11:A3:1D:3A:A9:0D:E3:C7:BB:8B:56:D3:CD:06:E6:BE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bn-6EaMdOqkN48e7i1bTzQbmvnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52ef7c-9a36-4362-8e7f-6394214a122c/1/bn-6EaMdOqkN48e7i1bTzQbmvnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52ef7c-9a36-4362-8e7f-6394214a122c/1/bn-6EaMdOqkN48e7i1bTzQbmvnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:4f:01:97:65:7c:d3:7e:1b:5c:6f:8c:8d:16:53:bf:ee:82:
79:84:62:7b:0a:ac:f7:3f:c4:d1:ae:a8:cf:e1:22:52:a5:dc:
21:79:9d:9e:67:34:d0:39:e5:9d:38:35:9d:cf:51:f8:58:08:
8b:ee:03:ab:a8:03:31:94:90:3b:cb:db:66:c2:eb:b5:47:2f:
e6:cc:cd:a1:23:d2:91:48:00:80:90:4e:fd:91:ce:06:f4:79:
ef:18:fb:25:15:02:0f:03:38:07:50:2a:37:d4:f6:ed:b6:25:
04:3f:cf:79:b2:8e:3e:95:fd:17:cb:8b:c9:12:de:6b:a9:a2:
95:ce:69:b4:6e:75:ce:42:45:12:42:59:78:19:a1:13:8c:d2:
35:7f:7f:82:a8:f4:c8:ee:50:dc:92:6a:01:33:1d:a0:ba:fe:
93:f8:4d:f5:7e:c3:ab:6f:48:f2:9a:4b:f7:51:f9:cd:c5:64:
79:46:63:76:65:30:6d:62:dd:01:51:5d:55:e8:0a:ab:eb:2c:
08:12:83:a0:5c:6c:0b:f6:fa:6c:2c:76:30:34:ad:93:b4:a5:
d5:4f:09:fc:e2:e1:41:f4:30:dc:33:c8:39:32:e1:43:b6:8e:
7b:67:ea:13:a6:f0:6b:da:a8:cb:d8:58:2f:72:58:ec:f4:71:
62:b1:b5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 20:29:55 2025 by rpki-client