Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.mft
File: bdEoKnfiVmUBaNLlZWrvzprWouw.mft (raw, json)
Hash identifier: DTC0aeQOKt5JZqgsQ19E/ghvvDyyqLXMmBJDDj4KUg0=
Subject key identifier: 51:7E:B3:08:55:98:8E:4A:09:B1:B6:72:0A:34:2D:54:81:28:10:33
Authority key identifier: 6D:D1:28:2A:77:E2:56:65:01:68:D2:E5:65:6A:EF:CE:9A:D6:A2:EC
Certificate issuer: /CN=6dd1282a77e256650168d2e5656aefce9ad6a2ec
Certificate serial: 0196C94DCAEB54D21E24E69C3395A06FD553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdEoKnfiVmUBaNLlZWrvzprWouw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.mft
Manifest number: 036E
Signing time: Tue 13 May 2025 11:00:40 +0000
Manifest this update: Tue 13 May 2025 11:00:40 +0000
Manifest next update: Wed 14 May 2025 11:00:40 +0000
Files and hashes: 1: bdEoKnfiVmUBaNLlZWrvzprWouw.crl (hash: VVf8UXY3eqV0k/8+Xv5OErOWMtXHXqNC3n9A5jj+HTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bdEoKnfiVmUBaNLlZWrvzprWouw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:4d:ca:eb:54:d2:1e:24:e6:9c:33:95:a0:6f:d5:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd1282a77e256650168d2e5656aefce9ad6a2ec
Validity
Not Before: May 13 11:00:40 2025 GMT
Not After : May 14 11:00:40 2025 GMT
Subject: CN=517eb30855988e4a09b1b6720a342d5481281033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2e:89:f3:af:ae:3c:b2:f1:e4:1d:26:b4:e4:
26:c0:2a:ee:24:63:97:49:04:8a:29:c1:e8:04:b0:
ad:4c:5b:da:fd:10:15:c0:b9:8e:cc:9e:a9:ed:af:
f3:4d:9f:96:a6:c1:24:52:a5:8d:12:78:21:17:59:
62:b8:2d:8a:6c:2a:01:82:bd:36:c6:09:99:33:c2:
5e:a1:b9:b9:6c:79:4b:ca:1e:6a:82:14:f1:0a:9b:
50:0a:52:63:b3:85:62:94:f4:ea:62:a0:a4:42:52:
cf:ec:b9:b0:f7:4f:c2:3a:cf:20:46:2c:71:39:43:
a7:49:ef:ab:df:37:0c:e1:ba:bd:02:bc:ff:2f:04:
e2:ed:d3:34:a5:61:a4:c7:c9:4e:14:f9:71:a1:dd:
ea:3d:11:05:7e:55:aa:57:63:10:fc:45:40:f0:6e:
6d:33:c4:f0:84:ce:d8:ed:55:09:69:eb:60:54:8e:
c4:0e:c3:47:33:2f:12:a4:d2:b3:4c:d8:c6:2f:d5:
81:e5:66:8f:dc:78:45:0c:1b:64:bb:99:c4:48:07:
d2:fe:e0:1c:86:6a:60:15:9d:02:60:fc:72:7b:ac:
c6:75:3a:cf:c8:f7:60:db:69:b5:ac:29:d3:f6:87:
5d:3f:05:9b:65:a3:8c:48:f9:41:fe:05:1b:15:b9:
e3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:7E:B3:08:55:98:8E:4A:09:B1:B6:72:0A:34:2D:54:81:28:10:33
X509v3 Authority Key Identifier:
keyid:6D:D1:28:2A:77:E2:56:65:01:68:D2:E5:65:6A:EF:CE:9A:D6:A2:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdEoKnfiVmUBaNLlZWrvzprWouw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:46:18:ad:65:bd:b1:1c:14:ba:14:a5:22:aa:80:75:ab:58:
82:d7:0e:28:2a:26:8a:c3:c9:97:49:78:d6:43:13:18:b6:74:
5d:05:8a:b2:1e:f8:06:b9:db:3a:c2:d8:24:92:bd:e1:93:bc:
55:89:9c:07:58:31:c4:f5:1b:98:7b:6a:8d:06:65:f9:4d:57:
cc:ac:ca:0d:f6:50:15:e9:23:fe:1c:a2:93:de:70:57:17:4d:
3f:31:61:16:5d:67:46:d6:e3:bb:25:5a:d2:ac:99:28:61:33:
d1:5f:e1:7d:02:97:62:3a:fb:f2:fb:9f:e6:60:e8:80:95:a5:
10:fb:d7:b7:39:9e:2c:62:98:b4:fe:4a:82:a1:08:1c:7a:de:
e0:1e:25:c3:ec:29:d1:63:a5:86:df:5d:d1:5f:40:b6:18:8f:
c6:62:5d:5f:81:ea:96:d1:ab:cb:31:b5:31:e4:ac:3a:65:f8:
5e:98:12:37:87:92:c1:9e:62:94:51:6a:51:59:b2:ac:2f:5d:
ee:75:94:eb:53:17:cc:b7:21:15:9d:95:d7:5a:6b:8a:0a:05:
b8:a8:63:d6:2a:14:15:fa:1d:6e:da:5f:b8:76:2f:81:cd:a3:
cf:db:5d:f9:80:e3:f7:50:26:d6:29:9e:8f:06:2a:b8:bf:b4:
12:45:f0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:44:02 2025 by rpki-client