Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/BQJMtECm3Xana1aUwOL07jMOCnw.mft
File: BQJMtECm3Xana1aUwOL07jMOCnw.mft (raw, json)
Hash identifier: B4Tp1wta0qkjyWOxM8s+bfRf5GF0bFNPtTtKALQmFEw=
Subject key identifier: D3:18:EA:EB:FE:DC:23:7E:ED:A6:5E:17:8D:0D:DA:CA:F0:CE:17:4B
Authority key identifier: 05:02:4C:B4:40:A6:DD:76:A7:6B:56:94:C0:E2:F4:EE:33:0E:0A:7C
Certificate issuer: /CN=05024cb440a6dd76a76b5694c0e2f4ee330e0a7c
Certificate serial: 0197692996A3C15E55C84BDBB5AD09AEB593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQJMtECm3Xana1aUwOL07jMOCnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/BQJMtECm3Xana1aUwOL07jMOCnw.mft
Manifest number: 02B7
Signing time: Fri 13 Jun 2025 12:00:22 +0000
Manifest this update: Fri 13 Jun 2025 12:00:22 +0000
Manifest next update: Sat 14 Jun 2025 12:00:22 +0000
Files and hashes: 1: BQJMtECm3Xana1aUwOL07jMOCnw.crl (hash: CtX4h4pve6jnDELh4qtiCXEJfbIMVoIFW63GXHLKqSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/BQJMtECm3Xana1aUwOL07jMOCnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/BQJMtECm3Xana1aUwOL07jMOCnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQJMtECm3Xana1aUwOL07jMOCnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:96:a3:c1:5e:55:c8:4b:db:b5:ad:09:ae:b5:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05024cb440a6dd76a76b5694c0e2f4ee330e0a7c
Validity
Not Before: Jun 13 12:00:22 2025 GMT
Not After : Jun 14 12:00:22 2025 GMT
Subject: CN=d318eaebfedc237eeda65e178d0ddacaf0ce174b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:06:ce:13:88:aa:83:9a:f7:43:81:4d:0e:7a:
91:30:df:8e:4a:05:f9:a5:df:a6:e1:42:0c:03:72:
ca:5f:4a:d3:a2:48:22:b8:8e:b6:52:40:3c:bc:e9:
c3:d5:54:0b:3a:1f:a5:bd:aa:46:c4:c6:9e:d2:53:
dd:a8:47:fc:8a:a1:73:6f:14:7f:59:5f:73:8c:5d:
5c:12:cf:eb:ef:a3:04:d4:6f:8e:19:69:96:2f:c4:
03:1f:04:c7:7d:a5:47:8f:bd:0d:3c:a5:37:e2:b2:
43:a6:d5:bd:1e:de:a0:bf:4d:ce:42:83:98:60:50:
d3:2b:aa:97:a1:ca:b4:28:23:62:37:b6:2f:b1:2c:
ba:a9:68:bf:1b:b3:4b:6f:6d:28:fe:8e:d9:a5:8d:
de:3f:52:00:60:3e:9e:cd:c5:9d:90:ec:4c:40:77:
55:64:e1:e1:40:96:eb:e9:6c:4f:c1:ea:18:54:2f:
ab:64:f7:1b:ab:d4:8f:f8:b3:c2:c2:14:0b:6d:96:
d8:01:52:ea:f5:dd:0f:4f:4a:b0:04:bf:eb:2a:86:
68:eb:b6:ed:e8:b1:38:c0:19:ac:05:5a:2d:d5:d9:
48:6a:ae:33:7b:b2:55:55:2a:75:1b:a7:0a:cf:68:
76:eb:94:48:fe:b5:c2:68:bf:73:38:90:84:3c:bb:
9b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:18:EA:EB:FE:DC:23:7E:ED:A6:5E:17:8D:0D:DA:CA:F0:CE:17:4B
X509v3 Authority Key Identifier:
keyid:05:02:4C:B4:40:A6:DD:76:A7:6B:56:94:C0:E2:F4:EE:33:0E:0A:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQJMtECm3Xana1aUwOL07jMOCnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/BQJMtECm3Xana1aUwOL07jMOCnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/BQJMtECm3Xana1aUwOL07jMOCnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:9e:45:c4:d1:c6:fb:76:3e:22:65:04:9f:f6:4b:8d:4b:6a:
a5:7e:c0:fc:22:0b:71:84:46:fd:3d:1c:b9:a1:11:02:01:fb:
54:ff:4f:9d:7d:bd:31:26:41:20:2e:13:ab:72:ea:98:c0:87:
9e:c7:f5:cc:b1:20:6e:bb:70:d6:2a:d3:35:6d:b4:76:d9:2a:
7b:ed:36:85:df:4b:17:85:34:74:cf:4c:a2:42:d6:16:1d:e7:
b9:6e:32:2c:bb:03:6b:c3:1c:c1:ae:8d:23:1c:23:10:d0:b7:
52:c4:0b:16:32:d7:b0:7e:d9:de:19:b9:4c:dc:05:10:11:ea:
94:fc:de:7c:a0:89:6c:99:1f:35:50:f4:78:e1:c7:4a:b2:e6:
dd:c4:35:c1:ac:36:5f:19:0f:65:ed:94:a6:c2:c1:54:bf:fa:
12:42:20:01:9c:74:ca:e9:71:94:f0:88:c5:b8:f1:ae:33:f2:
d0:42:69:7d:af:b9:bf:9c:75:49:ba:3b:60:88:a0:62:1e:5e:
6a:12:d5:24:52:c2:c0:fb:21:80:f8:56:6d:04:25:3c:8b:fa:
63:25:25:ef:e3:30:da:9c:65:1a:ea:3c:38:fb:8a:9f:b7:8c:
61:70:dd:30:cf:b1:0a:38:6a:88:5e:b6:78:7e:0b:9c:61:5f:
4d:b4:93:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:34:29 2025 by rpki-client