Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.mft
File: bdEoKnfiVmUBaNLlZWrvzprWouw.mft (raw, json)
Hash identifier: GjDLUIe5eDoJguzFmrWzVusmykU+2mwhIuxEL+thBx4=
Subject key identifier: D3:43:5D:20:9F:14:B8:51:28:4B:01:B6:C5:0F:C5:FF:E4:B4:4D:E8
Authority key identifier: 6D:D1:28:2A:77:E2:56:65:01:68:D2:E5:65:6A:EF:CE:9A:D6:A2:EC
Certificate issuer: /CN=6dd1282a77e256650168d2e5656aefce9ad6a2ec
Certificate serial: 0199FC218DD72E90B95E61C9F67FB7C72444
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdEoKnfiVmUBaNLlZWrvzprWouw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.mft
Manifest number: 0516
Signing time: Sun 19 Oct 2025 11:01:21 +0000
Manifest this update: Sun 19 Oct 2025 11:01:21 +0000
Manifest next update: Mon 20 Oct 2025 11:01:21 +0000
Files and hashes: 1: bdEoKnfiVmUBaNLlZWrvzprWouw.crl (hash: YRJzu7czm3uHVDdsVSEicyaZ5TJkmEgEwqxOe9J/Cfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bdEoKnfiVmUBaNLlZWrvzprWouw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:8d:d7:2e:90:b9:5e:61:c9:f6:7f:b7:c7:24:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd1282a77e256650168d2e5656aefce9ad6a2ec
Validity
Not Before: Oct 19 11:01:21 2025 GMT
Not After : Oct 20 11:01:21 2025 GMT
Subject: CN=d3435d209f14b851284b01b6c50fc5ffe4b44de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ee:ed:b1:d6:48:ec:5f:d3:5e:c0:d7:a1:23:
6c:b0:2c:de:d6:1a:45:2d:5c:76:51:e7:43:65:3a:
a5:d9:7b:4f:e7:c6:d6:eb:92:c0:1e:29:17:d8:2a:
27:23:76:d1:24:15:22:b6:de:57:e1:1d:8b:0e:b7:
01:1c:e6:cb:31:ef:16:27:23:d8:8f:f1:94:a2:95:
04:4f:be:44:36:9a:b3:a3:59:ab:51:cf:7f:a7:84:
e1:71:1f:30:62:b1:1d:ac:20:75:8a:5b:93:d9:9c:
d6:5f:7d:1c:38:eb:69:f5:05:83:fa:97:2c:cf:01:
7f:4f:a2:78:f3:9f:16:c6:f4:e5:b2:1b:e2:4a:37:
00:97:1b:de:3d:86:a2:c0:28:73:76:c2:a2:3b:4c:
3e:bb:e7:56:cc:a8:92:3f:ae:e5:9d:78:d7:67:8e:
b2:5a:a2:f2:9d:91:57:a3:95:79:dc:0d:b2:59:bb:
ed:3a:ec:5a:22:4a:4c:77:67:00:9c:d1:f3:20:ce:
33:dd:1e:e0:05:48:6c:84:be:1c:6f:1c:1b:e6:93:
20:0f:a4:bd:30:46:86:f8:d0:34:9c:c5:17:df:31:
ac:b9:ed:00:a1:84:49:38:ed:94:20:82:25:be:c5:
1a:aa:89:ba:b2:ed:42:5c:18:46:3d:09:65:7f:f6:
26:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:43:5D:20:9F:14:B8:51:28:4B:01:B6:C5:0F:C5:FF:E4:B4:4D:E8
X509v3 Authority Key Identifier:
keyid:6D:D1:28:2A:77:E2:56:65:01:68:D2:E5:65:6A:EF:CE:9A:D6:A2:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdEoKnfiVmUBaNLlZWrvzprWouw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:59:c6:5e:60:ec:36:3c:c5:5d:9e:34:4a:f3:51:60:27:a3:
11:5c:cd:58:72:3a:a9:8f:63:c3:3b:4b:d1:2e:e4:36:25:ef:
87:e9:dc:59:43:0d:51:60:76:6c:51:ca:39:68:8a:92:62:cb:
82:6b:3d:9f:15:cd:51:f1:42:8f:11:5e:c4:1c:d6:a1:b1:4b:
96:7a:95:d0:0e:19:8c:b6:c7:82:b2:6b:55:7a:1d:31:b0:68:
f4:84:b0:4b:31:59:13:ce:3e:48:28:22:29:9e:6c:f3:14:a6:
10:42:35:86:c9:45:3d:dd:df:d8:f4:17:26:e9:e8:3b:f2:42:
ee:a9:9a:1b:36:06:e1:1e:06:90:86:7b:51:92:9e:c1:a4:47:
31:a9:27:2b:59:22:cb:02:8a:3a:b0:1b:71:50:46:26:ec:9b:
32:d9:18:56:da:55:bc:36:fc:3a:36:ae:be:1a:bb:a9:d4:91:
ce:2b:e5:e5:9d:8d:67:b3:60:3f:7e:e9:67:73:85:9b:07:99:
b0:fe:76:af:e7:ff:c9:bf:91:62:fd:55:f9:89:f5:1d:a8:90:
ed:09:56:ed:6d:23:da:30:d2:c2:23:4c:8d:e3:9d:a2:3a:8a:
ef:13:7b:c7:9e:1c:cb:42:38:5c:2f:08:60:1b:60:9e:a7:bf:
1b:81:58:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:04 2025 by rpki-client