Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/52ef7c-9a36-4362-8e7f-6394214a122c/1/bn-6EaMdOqkN48e7i1bTzQbmvnU.mft
File: bn-6EaMdOqkN48e7i1bTzQbmvnU.mft (raw, json)
Hash identifier: AHukIlm1/6raOU3OtfQHFgRW+gw3UWoZM7pmn2gw2JI=
Subject key identifier: D8:4B:F2:B6:9B:6B:87:1D:95:FC:7B:CA:FF:B4:3A:A9:BA:62:A2:0C
Authority key identifier: 6E:7F:BA:11:A3:1D:3A:A9:0D:E3:C7:BB:8B:56:D3:CD:06:E6:BE:75
Certificate issuer: /CN=6e7fba11a31d3aa90de3c7bb8b56d3cd06e6be75
Certificate serial: 0198D47457EFDA092FB7F94FF60A5EA6B549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bn-6EaMdOqkN48e7i1bTzQbmvnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/52ef7c-9a36-4362-8e7f-6394214a122c/1/bn-6EaMdOqkN48e7i1bTzQbmvnU.mft
Manifest number: 162F
Signing time: Sat 23 Aug 2025 01:04:11 +0000
Manifest this update: Sat 23 Aug 2025 01:04:11 +0000
Manifest next update: Sun 24 Aug 2025 01:04:11 +0000
Files and hashes: 1: bn-6EaMdOqkN48e7i1bTzQbmvnU.crl (hash: 3+GrYK+nL4kGWh4Iiahf/RfF+3r3bAn0zaHHmRHBJYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/52ef7c-9a36-4362-8e7f-6394214a122c/1/bn-6EaMdOqkN48e7i1bTzQbmvnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/52ef7c-9a36-4362-8e7f-6394214a122c/1/bn-6EaMdOqkN48e7i1bTzQbmvnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bn-6EaMdOqkN48e7i1bTzQbmvnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:57:ef:da:09:2f:b7:f9:4f:f6:0a:5e:a6:b5:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e7fba11a31d3aa90de3c7bb8b56d3cd06e6be75
Validity
Not Before: Aug 23 01:04:11 2025 GMT
Not After : Aug 24 01:04:11 2025 GMT
Subject: CN=d84bf2b69b6b871d95fc7bcaffb43aa9ba62a20c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:44:1d:e7:6e:c4:3a:c3:72:86:63:09:8e:02:
54:2b:0b:12:dd:5e:c2:f3:4f:d9:a2:9c:e7:22:43:
d9:85:96:16:21:72:3f:4b:db:d1:21:de:47:fc:53:
2f:84:69:74:44:52:84:52:6f:53:7a:72:76:9f:c9:
8e:44:f8:ab:2b:c2:c4:38:df:05:61:bf:c6:31:23:
c0:81:8e:9c:fb:d0:f9:c1:28:94:bf:8f:0c:50:cd:
2e:fa:ab:fb:7a:9b:1d:04:70:f9:e5:4e:17:e7:93:
29:0f:2a:80:41:cb:78:74:08:83:27:89:38:72:39:
93:c4:2b:07:ca:d6:94:31:78:fa:fc:1b:a3:50:35:
4e:ef:4d:30:1d:f6:0b:d4:ef:3d:e4:33:64:81:9e:
9a:79:c0:36:94:4c:bc:74:3b:e7:68:64:84:d7:de:
e4:36:63:17:ea:1e:fd:7a:4e:49:7f:c5:22:b6:c5:
3c:25:ae:3a:57:ca:21:28:df:dd:dc:f1:9d:d5:ae:
93:2c:96:62:73:87:cd:ec:a7:ac:1c:24:fb:76:1b:
88:90:58:7e:e3:03:41:c9:96:1c:9d:d2:c4:16:d5:
fd:2a:36:dc:bc:73:a7:57:21:b5:ce:4c:d9:6b:dd:
96:f5:40:fc:b9:5b:aa:f2:4a:8b:75:87:a1:88:48:
61:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:4B:F2:B6:9B:6B:87:1D:95:FC:7B:CA:FF:B4:3A:A9:BA:62:A2:0C
X509v3 Authority Key Identifier:
keyid:6E:7F:BA:11:A3:1D:3A:A9:0D:E3:C7:BB:8B:56:D3:CD:06:E6:BE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bn-6EaMdOqkN48e7i1bTzQbmvnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52ef7c-9a36-4362-8e7f-6394214a122c/1/bn-6EaMdOqkN48e7i1bTzQbmvnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52ef7c-9a36-4362-8e7f-6394214a122c/1/bn-6EaMdOqkN48e7i1bTzQbmvnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:88:9d:71:56:90:82:7b:92:bb:e7:1a:42:f6:2d:6b:eb:b1:
a1:22:be:ec:de:51:8f:50:ee:59:32:e5:a6:1c:04:8e:9b:cf:
d5:cb:1c:56:5b:d6:a1:e2:5d:7a:7b:3a:aa:69:0c:ce:53:45:
81:8d:9f:53:8f:6c:96:37:6c:b6:5b:bd:92:6c:1e:7b:fa:f2:
a1:3e:04:73:d6:5a:bd:0c:10:9a:4c:14:ac:c2:8b:f4:6e:bc:
ff:ab:49:10:dc:f0:fd:85:f0:78:18:5e:d1:06:ec:42:96:26:
c7:32:a5:f9:3a:43:65:0c:08:80:ce:f0:8d:8f:26:6e:ac:3c:
14:39:d1:56:5f:fa:e6:fd:be:33:ba:24:d8:db:b3:8e:03:9c:
29:f9:af:63:be:75:2a:6c:6e:d3:db:fa:91:33:9b:ca:64:9a:
f2:2a:0e:2c:63:73:d6:6f:65:5d:9e:7c:3a:59:f6:27:ab:2d:
7f:e5:db:9e:b2:2a:d7:6d:1b:0a:c8:ad:b4:45:b8:b6:97:b6:
a4:2f:fe:d4:13:2a:01:47:5e:01:30:37:b4:be:41:c6:9f:01:
ef:ce:b3:45:0b:21:d5:39:0f:de:68:45:0d:5c:0f:53:56:35:
3e:1b:a4:40:c0:86:be:5b:b3:02:0c:62:7b:c3:94:e2:f0:cf:
79:f7:5a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:07 2025 by rpki-client