Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
File: bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft (raw, json)
Hash identifier: 3MH+h67Eha/M6P4WjcRVVrztfLvgNRmDopKb49T75xo=
Subject key identifier: FB:0A:89:72:C2:D3:B7:02:68:DD:54:D9:6D:33:CC:D9:70:6B:DD:AA
Authority key identifier: 6D:00:51:98:B7:45:72:A1:56:AB:63:F2:30:85:89:7B:D3:CC:D4:1B
Certificate issuer: /CN=6d005198b74572a156ab63f23085897bd3ccd41b
Certificate serial: 01976C98FE2D02228D9C97C0A6D09538DFCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
Manifest number: 01B3
Signing time: Sat 14 Jun 2025 04:00:55 +0000
Manifest this update: Sat 14 Jun 2025 04:00:55 +0000
Manifest next update: Sun 15 Jun 2025 04:00:55 +0000
Files and hashes: 1: bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl (hash: BB7J6PKEim4QWZpXPvCytjf+rV8Penr60oBqYzqpP1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:fe:2d:02:22:8d:9c:97:c0:a6:d0:95:38:df:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d005198b74572a156ab63f23085897bd3ccd41b
Validity
Not Before: Jun 14 04:00:55 2025 GMT
Not After : Jun 15 04:00:55 2025 GMT
Subject: CN=fb0a8972c2d3b70268dd54d96d33ccd9706bddaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:08:c1:72:c1:e0:25:32:ad:b5:36:e3:16:3f:
76:43:c3:29:d6:e2:f4:2b:4b:5b:0f:45:60:97:67:
7b:b6:a5:85:e8:fc:6c:29:c9:33:4c:11:f6:58:96:
24:d2:9c:6e:f7:75:00:b0:9d:75:31:14:87:85:4f:
30:3c:f1:e9:fc:27:48:af:d9:6e:7d:0c:7d:a1:e0:
dd:ec:8e:46:ff:2f:76:b6:9c:43:f3:f5:86:a0:5d:
29:ad:97:56:ee:ea:da:0d:43:67:16:4e:ca:5a:33:
34:38:a4:f8:ae:1d:24:5b:f2:3a:77:22:58:85:6d:
78:62:02:69:3e:60:0f:71:da:3e:a2:9c:ff:64:51:
a1:23:4e:53:b4:ab:50:d6:3e:3d:1d:3e:1c:b2:77:
a3:bd:dc:2a:5f:25:65:ba:8c:74:3b:4f:05:24:70:
39:ae:92:3e:a0:f2:16:3e:da:8f:9d:de:b5:57:e4:
e5:28:be:a3:bc:53:3b:9d:2c:c5:39:0a:f0:5e:5a:
ba:c3:29:4a:9e:1c:56:ac:2d:ac:3e:c4:28:85:a7:
ec:51:89:2e:5d:15:5b:51:96:d5:23:df:b7:17:ab:
cf:cb:64:26:6c:68:9e:e1:62:cb:31:d5:ce:6e:4d:
c1:76:28:4c:8a:cb:9a:56:56:2f:85:b1:55:33:3b:
1a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0A:89:72:C2:D3:B7:02:68:DD:54:D9:6D:33:CC:D9:70:6B:DD:AA
X509v3 Authority Key Identifier:
keyid:6D:00:51:98:B7:45:72:A1:56:AB:63:F2:30:85:89:7B:D3:CC:D4:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:55:f2:d3:d5:70:19:ec:06:f8:07:64:c1:d6:8c:61:3f:0c:
ee:07:d9:0f:09:65:49:92:58:a6:31:b9:7c:71:a9:ce:94:a3:
9b:c4:e2:b8:ed:5b:22:72:f8:0e:29:49:e8:3d:fa:81:a9:e3:
a7:5a:46:ac:de:e8:29:fb:18:80:6e:30:ae:ce:e9:55:7d:1c:
a2:bd:d9:61:48:1a:49:26:94:43:19:58:fb:8c:fb:d3:00:67:
93:22:74:59:a8:5d:10:50:a3:fc:40:55:fb:a6:5c:d1:c0:35:
5e:89:78:8f:ba:64:bf:a7:d3:09:de:3c:24:34:7e:e9:39:9a:
67:bb:b5:1f:35:5c:33:41:7d:d6:c4:ca:f2:2f:e8:0c:ab:0f:
64:06:4a:5c:fd:d0:85:cd:35:9c:a6:df:4d:41:4c:70:fe:c1:
46:1d:a4:82:83:68:9e:09:7d:5d:da:aa:b5:eb:f7:86:21:77:
39:09:5c:a1:a3:57:72:0f:74:54:87:d0:e8:28:37:e3:be:88:
cd:57:f2:ec:b7:e2:e5:a4:de:c3:4d:31:81:ba:e3:3d:9f:86:
4c:f6:cc:7c:8d:9f:e1:f2:e5:b5:6f:41:80:bd:76:f4:5d:95:
ec:c8:b4:56:8f:e2:7d:e3:83:6d:0e:d8:be:cd:84:70:20:2f:
7a:d5:af:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:16:28 2025 by rpki-client