Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.mft
File: bpnMzW8P8m3o7Tk29KZL7pjZ3GY.mft (raw, json)
Hash identifier: MBXvDzNe+7WlmKXTVjbNqjQv7IbNq202qDW5LN1xDuI=
Subject key identifier: 8E:C3:CA:DA:99:8C:AE:F2:B6:B8:90:93:E9:7E:F5:82:96:FB:92:69
Authority key identifier: 6E:99:CC:CD:6F:0F:F2:6D:E8:ED:39:36:F4:A6:4B:EE:98:D9:DC:66
Certificate issuer: /CN=6e99cccd6f0ff26de8ed3936f4a64bee98d9dc66
Certificate serial: 0197B933869BEFF358662ABB4E1644E1C536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.mft
Manifest number: 1568
Signing time: Sun 29 Jun 2025 01:00:51 +0000
Manifest this update: Sun 29 Jun 2025 01:00:51 +0000
Manifest next update: Mon 30 Jun 2025 01:00:51 +0000
Files and hashes: 1: bpnMzW8P8m3o7Tk29KZL7pjZ3GY.crl (hash: R76F0GzkxpLrm3PGyw5i5sdiQXyzgPprP0iZjtQEqW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:86:9b:ef:f3:58:66:2a:bb:4e:16:44:e1:c5:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e99cccd6f0ff26de8ed3936f4a64bee98d9dc66
Validity
Not Before: Jun 29 01:00:51 2025 GMT
Not After : Jun 30 01:00:51 2025 GMT
Subject: CN=8ec3cada998caef2b6b89093e97ef58296fb9269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f5:1a:4c:fd:17:e0:fd:dc:2a:77:10:8b:9f:
ee:f6:0e:40:87:19:bf:ea:80:51:ed:4f:c6:d0:51:
34:14:8a:db:5b:d6:af:ec:f0:2d:a1:74:ec:f0:b7:
8a:c3:0e:6e:c2:b4:0b:9e:30:42:14:d3:9f:03:d0:
e1:fa:03:14:9b:e3:1d:d8:b7:7d:5b:4a:9c:00:55:
74:83:9f:8b:48:a1:ce:b7:80:85:7a:0c:47:fc:4c:
48:3f:4f:94:01:c1:45:0c:43:de:47:75:c7:3a:02:
d6:31:98:0d:26:05:73:04:74:53:77:89:ba:e1:ad:
ab:e7:70:5c:e4:73:04:62:04:f6:d5:59:b4:9f:52:
5d:9e:8e:00:ad:f2:c3:24:78:5e:0b:42:40:ab:32:
75:e0:b0:c0:d4:08:83:14:cf:67:97:63:58:09:2e:
e5:d6:a0:00:4c:9c:49:11:85:66:89:29:25:d9:55:
1d:c6:46:de:38:6b:7a:e8:9c:7a:1b:c7:8e:23:d3:
8c:7b:6d:33:ce:4f:14:73:ad:63:86:5d:5c:37:12:
f6:45:e5:40:77:9f:4e:5d:9a:a0:af:29:93:d0:34:
ef:c2:24:61:26:c0:7c:50:97:9e:c7:74:b4:ad:26:
34:74:d7:64:eb:8a:1c:e9:d2:21:ec:bc:09:d1:a8:
0c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C3:CA:DA:99:8C:AE:F2:B6:B8:90:93:E9:7E:F5:82:96:FB:92:69
X509v3 Authority Key Identifier:
keyid:6E:99:CC:CD:6F:0F:F2:6D:E8:ED:39:36:F4:A6:4B:EE:98:D9:DC:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:10:34:03:58:7a:46:ee:18:2f:21:6e:2f:81:02:d7:05:b1:
69:6f:56:0b:f7:93:ea:29:5d:de:66:aa:64:e4:97:ea:6d:0b:
56:81:2b:1e:11:28:20:95:e8:e1:75:4c:3c:e4:e8:97:96:c3:
81:53:58:23:09:f6:1a:76:a0:e6:7f:6b:76:a5:18:8d:25:55:
d9:5e:3a:bb:2d:65:e6:65:4d:b7:de:8c:7d:18:ef:e4:3f:2a:
3c:d2:73:ca:ff:be:3d:e4:27:b6:d7:06:99:8c:c9:e3:49:20:
2f:03:97:81:23:ef:13:93:73:0e:d5:90:6e:5f:e2:ba:d9:e4:
b3:76:2b:f8:81:a6:86:4a:99:b1:29:f1:d7:af:18:e6:72:f0:
56:0e:82:af:f7:71:03:37:d9:c7:bb:a5:c2:a9:fe:cc:85:f7:
1f:a2:b1:ba:74:a5:8d:8b:77:8e:a0:d6:d5:fd:e8:66:1f:97:
e1:6c:16:b4:bb:e9:d9:8b:86:f6:a4:b3:5a:36:f7:90:87:42:
32:5d:23:c0:61:ef:b3:ff:3e:0d:13:e7:0a:f1:8c:e1:3b:32:
7f:21:ed:ca:ce:a8:6c:5b:bd:fc:f4:b5:aa:b0:de:21:c9:8e:
62:a4:90:1f:3d:c5:68:43:5a:c6:95:d0:cd:e2:20:ba:33:1a:
9a:9c:25:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:34:50 2025 by rpki-client