Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.mft
File: bdEoKnfiVmUBaNLlZWrvzprWouw.mft (raw, json)
Hash identifier: O3yAoI7YJQMHBUHyB2yva7OCQNmFMPwkPk8wTLfeDW4=
Subject key identifier: 76:A3:C9:F2:90:46:19:5B:24:61:17:4A:B8:9C:0F:02:A6:1C:08:D4
Authority key identifier: 6D:D1:28:2A:77:E2:56:65:01:68:D2:E5:65:6A:EF:CE:9A:D6:A2:EC
Certificate issuer: /CN=6dd1282a77e256650168d2e5656aefce9ad6a2ec
Certificate serial: 0198D698242DF90AEF94339D2E67D2D659D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdEoKnfiVmUBaNLlZWrvzprWouw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.mft
Manifest number: 047E
Signing time: Sat 23 Aug 2025 11:02:31 +0000
Manifest this update: Sat 23 Aug 2025 11:02:31 +0000
Manifest next update: Sun 24 Aug 2025 11:02:31 +0000
Files and hashes: 1: bdEoKnfiVmUBaNLlZWrvzprWouw.crl (hash: QmuhNf8pUOTTimdZjZ5AoX5iCmnlu3iKZl0eyj6P5VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bdEoKnfiVmUBaNLlZWrvzprWouw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:24:2d:f9:0a:ef:94:33:9d:2e:67:d2:d6:59:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd1282a77e256650168d2e5656aefce9ad6a2ec
Validity
Not Before: Aug 23 11:02:31 2025 GMT
Not After : Aug 24 11:02:31 2025 GMT
Subject: CN=76a3c9f29046195b2461174ab89c0f02a61c08d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a9:68:30:92:1f:38:64:76:1e:50:16:9e:86:
4f:c3:80:ce:4e:aa:d6:3d:b6:25:04:37:67:c9:c1:
3a:50:56:b4:d9:01:78:44:fe:e6:72:cc:6a:07:90:
b5:8a:5a:ad:95:dd:f9:be:79:38:3c:13:e1:ee:19:
85:ad:72:08:3d:6d:31:c4:a7:63:af:2e:a0:66:8e:
66:e4:55:ce:fe:28:71:cd:f7:b0:95:f7:f1:b6:16:
21:ea:75:f1:81:8e:76:22:d0:4b:2e:c9:c1:2c:0d:
f8:5d:c3:25:47:0c:6e:e0:97:e0:fc:10:ab:0c:cb:
3d:bd:1a:93:c2:5f:3e:68:36:cf:ce:11:1e:22:f2:
18:61:3d:60:5a:6b:54:5d:b9:43:33:aa:1b:ee:43:
66:2b:90:69:32:33:12:7f:bf:fc:db:bb:82:c9:f6:
f1:64:b4:0f:36:07:fd:e2:b7:01:dc:03:a1:0f:5c:
c7:e6:0d:da:23:c7:28:4a:24:e7:a4:a9:1f:af:0e:
67:0c:1f:a5:25:93:48:64:0b:2c:f4:db:3c:29:f5:
08:33:96:ce:f2:00:51:2a:d8:3f:ab:be:8b:30:3f:
a7:57:ee:55:83:34:c3:5e:aa:e5:73:1b:97:67:69:
92:8b:e7:ca:18:0d:73:3c:fc:da:4a:2f:ef:3a:8c:
55:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A3:C9:F2:90:46:19:5B:24:61:17:4A:B8:9C:0F:02:A6:1C:08:D4
X509v3 Authority Key Identifier:
keyid:6D:D1:28:2A:77:E2:56:65:01:68:D2:E5:65:6A:EF:CE:9A:D6:A2:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdEoKnfiVmUBaNLlZWrvzprWouw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e9:97:b4:69:79:75:db:f4:c3:08:20:d0:4b:79:1e:22:a1:
0d:90:8b:81:67:45:d0:60:ba:ad:97:52:31:a8:49:0d:41:67:
50:fb:fa:50:a7:d3:75:72:12:a2:9b:e5:89:a6:99:5d:bc:0a:
6d:08:19:5b:c0:67:38:ff:11:22:85:ec:53:d1:a9:dd:18:1a:
a9:63:fc:4c:d0:9d:6b:4d:71:43:20:4a:a7:a9:a7:09:60:15:
24:82:34:d6:a6:56:43:2f:4e:86:c5:a7:4d:84:cc:d4:7e:bb:
50:c0:c4:e1:28:38:e2:fb:60:d1:a3:75:30:7b:9d:e3:19:35:
9c:16:da:e0:78:ae:1c:7d:de:00:5c:39:7e:3d:b3:49:2e:3d:
e5:f4:4f:91:df:8e:6d:c8:df:e2:56:e3:03:03:e6:c9:38:4c:
47:99:b9:92:4a:64:53:ad:49:fd:3d:2b:52:fa:c8:10:86:00:
c1:2f:ad:46:ff:4e:50:29:77:62:0e:99:08:09:96:11:27:d8:
52:5d:5c:91:7b:3e:3c:66:1d:c2:0b:62:55:f0:be:2b:e8:65:
3c:34:2c:80:73:f0:c3:41:92:26:49:80:6d:8c:56:12:92:6c:
59:b3:9e:b2:7b:8c:81:cd:e3:cd:8e:20:78:52:0a:a3:b3:2f:
19:4f:fb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:25 2025 by rpki-client