Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.mft
File: bdEoKnfiVmUBaNLlZWrvzprWouw.mft (raw, json)
Hash identifier: KmGoc30JMpIGJZop73LBVB2bChMQxWscQSrnjBNrd0A=
Subject key identifier: BC:59:99:24:E6:A6:A7:0B:E5:CB:0B:7F:66:08:67:53:25:A6:FC:D6
Authority key identifier: 6D:D1:28:2A:77:E2:56:65:01:68:D2:E5:65:6A:EF:CE:9A:D6:A2:EC
Certificate issuer: /CN=6dd1282a77e256650168d2e5656aefce9ad6a2ec
Certificate serial: 0197C07F4400659FBC7D2CD2F76208130CC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdEoKnfiVmUBaNLlZWrvzprWouw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.mft
Manifest number: 03EE
Signing time: Mon 30 Jun 2025 11:00:55 +0000
Manifest this update: Mon 30 Jun 2025 11:00:55 +0000
Manifest next update: Tue 01 Jul 2025 11:00:55 +0000
Files and hashes: 1: bdEoKnfiVmUBaNLlZWrvzprWouw.crl (hash: KwA4UfNJLOoGtO3essoR4jNBvcIbkhKtYCdRfMzOy7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bdEoKnfiVmUBaNLlZWrvzprWouw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:7f:44:00:65:9f:bc:7d:2c:d2:f7:62:08:13:0c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd1282a77e256650168d2e5656aefce9ad6a2ec
Validity
Not Before: Jun 30 11:00:55 2025 GMT
Not After : Jul 1 11:00:55 2025 GMT
Subject: CN=bc599924e6a6a70be5cb0b7f6608675325a6fcd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7f:29:db:ec:4f:97:da:d8:5e:aa:3b:14:39:
9b:33:d5:0a:09:6c:f9:e6:7a:0b:d4:75:34:92:46:
ff:e3:7b:9e:61:64:3d:90:83:65:c8:94:49:da:2b:
6a:5e:ea:ac:c2:63:bd:86:53:57:73:85:04:4a:f5:
76:f1:75:47:50:a9:91:81:30:c6:c9:55:33:c5:ca:
d4:fd:7b:6d:a6:b5:8d:d7:53:ac:07:55:15:02:f5:
3c:6e:9a:8d:85:c3:84:d8:c2:03:41:2a:19:e2:2e:
eb:2b:01:21:a4:96:67:2b:70:64:99:74:bc:20:28:
fa:08:79:b5:6d:26:84:52:ff:b0:67:26:f2:e2:6d:
d4:f8:04:2b:07:53:93:e1:a3:7a:1e:30:7a:df:c8:
80:63:18:c4:a3:f0:18:8e:2b:7d:f4:0e:5a:89:b1:
23:e0:e8:3f:c3:b9:59:db:68:dd:85:d7:f7:2d:b5:
75:c5:7c:66:67:83:c3:88:fe:23:a5:08:d8:4d:4c:
40:11:c7:f1:5a:44:11:a3:39:bf:62:ca:b7:f9:ab:
95:8e:d6:be:3a:70:42:68:4a:f1:b1:f3:34:d3:84:
4d:21:e7:fd:3f:25:6f:8b:3b:de:ea:83:ff:31:96:
5e:7e:ad:7d:ff:ad:6b:52:eb:9f:63:b7:4d:a9:bf:
2f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:59:99:24:E6:A6:A7:0B:E5:CB:0B:7F:66:08:67:53:25:A6:FC:D6
X509v3 Authority Key Identifier:
keyid:6D:D1:28:2A:77:E2:56:65:01:68:D2:E5:65:6A:EF:CE:9A:D6:A2:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdEoKnfiVmUBaNLlZWrvzprWouw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f5:53:1e:02:74:8d:5f:fc:1d:26:f4:d2:7f:0f:93:d4:9b:
4b:2b:61:00:b7:c3:87:4c:9e:74:2a:74:26:cb:b5:14:9d:24:
cc:5a:af:71:b9:54:e0:15:4f:d7:a2:ef:3e:92:0f:2c:ad:70:
92:43:bb:bd:5d:af:9d:b3:cd:f5:b3:29:34:cf:7c:86:a3:8d:
99:3f:a0:45:82:5a:65:3a:2d:76:1c:df:12:d1:d0:17:11:05:
91:e7:98:76:88:9f:5d:17:c2:a1:6c:08:4a:9d:7f:57:c5:2e:
bd:33:27:c9:b3:a6:66:61:0c:41:67:b6:c8:00:7c:d6:b5:da:
61:30:14:fc:56:a0:67:81:b9:7a:4f:87:75:42:87:a1:9f:37:
6c:f1:30:8e:7b:08:60:02:0e:66:f9:de:4b:d6:df:3f:7b:28:
36:27:29:48:2a:39:49:bc:b2:16:7b:c2:68:f1:4a:ce:10:1d:
57:d2:35:73:a3:5d:dd:67:d0:49:9b:51:7f:e1:e5:e0:0d:05:
ba:02:78:69:89:01:41:f0:20:9f:da:0b:e7:21:d5:d3:9a:98:
95:92:68:af:a3:bc:4d:02:d1:49:31:40:40:3e:09:d6:c6:9a:
10:8c:b4:51:3f:da:67:18:46:e6:6b:0a:92:98:ce:07:db:c9:
b6:ec:c5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:55:17 2025 by rpki-client