Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft
File: bxfKsp3wkGVUwRzpqynGDR56Z1w.mft (raw, json)
Hash identifier: Fn3aO1nd3Xe5VLYSvUYbd+/ugeQzqb5eRD8NH+swI+c=
Subject key identifier: 13:EC:9E:03:EB:ED:17:2B:26:11:1F:0E:B6:72:25:B3:33:52:8A:6D
Authority key identifier: 6F:17:CA:B2:9D:F0:90:65:54:C1:1C:E9:AB:29:C6:0D:1E:7A:67:5C
Certificate issuer: /CN=6f17cab29df0906554c11ce9ab29c60d1e7a675c
Certificate serial: 019786FD001E09BF239E64DF3039AEE1AF10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxfKsp3wkGVUwRzpqynGDR56Z1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft
Manifest number: 0473
Signing time: Thu 19 Jun 2025 07:00:16 +0000
Manifest this update: Thu 19 Jun 2025 07:00:16 +0000
Manifest next update: Fri 20 Jun 2025 07:00:16 +0000
Files and hashes: 1: bxfKsp3wkGVUwRzpqynGDR56Z1w.crl (hash: 340MghUcOwieXVZ+ConFhEvygSuZzR1YH1b4gfch4V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxfKsp3wkGVUwRzpqynGDR56Z1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 07:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:fd:00:1e:09:bf:23:9e:64:df:30:39:ae:e1:af:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f17cab29df0906554c11ce9ab29c60d1e7a675c
Validity
Not Before: Jun 19 07:00:16 2025 GMT
Not After : Jun 20 07:00:16 2025 GMT
Subject: CN=13ec9e03ebed172b26111f0eb67225b333528a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:85:05:96:bd:79:be:99:29:1f:d6:6c:4c:14:
2e:75:3d:9f:5b:5d:88:a5:e4:06:ac:2a:e3:cc:40:
cc:2f:34:4c:07:06:7e:fd:98:94:c0:28:50:aa:72:
9f:07:64:2a:8c:3e:09:75:c8:5b:c1:5e:d0:c3:cf:
b7:04:6a:f2:09:f5:a9:f0:68:89:58:79:dd:b1:7f:
10:a8:96:06:31:59:ab:54:86:18:24:61:36:43:2a:
cc:58:17:d4:47:71:ff:dd:d6:eb:da:8e:47:22:8a:
70:da:89:78:a7:38:5f:74:df:a8:69:cf:92:ae:79:
72:d9:fa:88:03:0a:fe:3a:4c:9e:9d:f9:de:19:46:
b5:31:4b:9c:4c:c7:2e:b6:dc:c0:4a:f7:dd:5c:ba:
8f:8d:09:87:c3:09:28:19:0a:82:2d:d4:7e:23:9a:
36:3a:c2:e2:01:be:d5:29:3d:16:35:41:c3:fc:5e:
b9:9a:74:96:95:91:2d:fb:b9:ba:2e:50:00:36:50:
0e:f0:1d:e7:9e:0d:d1:2b:9a:b5:9e:55:ed:ce:59:
ab:23:92:6d:fe:dc:93:3c:61:fc:97:d6:8a:e8:01:
64:81:97:35:ac:60:f7:30:0c:30:0b:b9:43:52:9b:
00:85:d7:cd:33:f5:ad:0b:e9:1e:17:1c:ae:4e:de:
cf:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:EC:9E:03:EB:ED:17:2B:26:11:1F:0E:B6:72:25:B3:33:52:8A:6D
X509v3 Authority Key Identifier:
keyid:6F:17:CA:B2:9D:F0:90:65:54:C1:1C:E9:AB:29:C6:0D:1E:7A:67:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxfKsp3wkGVUwRzpqynGDR56Z1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b5:da:c4:3a:9b:59:51:b4:dd:90:ed:92:3c:22:1b:f4:a4:
e5:2d:1d:70:fc:14:04:2a:03:12:a8:93:03:d9:55:4d:a5:86:
64:72:93:32:c7:96:5e:f4:79:70:6f:23:3b:21:eb:b7:7a:6f:
2a:7d:93:b0:d3:d6:8a:91:2d:9f:3d:2f:52:1e:05:da:a6:d1:
21:53:52:27:2c:6f:7a:ad:20:9a:b6:c3:07:e2:9d:ef:52:76:
bb:54:2e:58:0b:38:ea:e4:f0:6b:33:20:10:7f:3a:c5:19:10:
3e:1d:29:fd:0f:17:d9:2a:02:cb:af:e3:a3:6b:77:4a:4e:75:
51:e0:9e:06:39:ea:b8:51:b5:5a:6f:c1:ce:16:ef:5a:43:9c:
b4:53:a0:ba:c9:a5:b8:cd:1c:b5:cb:ec:7f:30:9f:11:6c:fc:
62:ec:e0:2d:c1:59:d1:c3:29:14:42:c7:8b:38:80:95:01:8a:
29:49:79:db:45:02:0a:61:17:ba:9b:cd:be:a0:68:28:d8:dd:
70:00:b3:60:53:0a:2a:f6:9b:4c:81:73:32:9a:4a:4b:a1:53:
50:53:36:0f:25:e1:42:14:67:03:f3:8e:ca:a1:4a:a4:84:98:
d4:49:89:b6:c1:73:4f:e9:8e:9f:c8:04:59:15:2e:cf:1d:34:
c6:4d:cf:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 16:41:59 2025 by rpki-client