Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.mft
File: buKspS4zrI1YnzIhdZLNHmm_cEw.mft (raw, json)
Hash identifier: GZZlXMw9WAXJjdB6Sa2l0B0qVsPTjOvhZTwU7rmQoLQ=
Subject key identifier: 20:2E:F6:C6:3B:6B:BB:E6:F0:C7:59:2C:64:D8:5D:FF:34:4E:16:EF
Authority key identifier: 6E:E2:AC:A5:2E:33:AC:8D:58:9F:32:21:75:92:CD:1E:69:BF:70:4C
Certificate issuer: /CN=6ee2aca52e33ac8d589f32217592cd1e69bf704c
Certificate serial: 019771BF3A0DA72F166C82D8B5D939E4E4EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/buKspS4zrI1YnzIhdZLNHmm_cEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.mft
Manifest number: 158E
Signing time: Sun 15 Jun 2025 04:00:47 +0000
Manifest this update: Sun 15 Jun 2025 04:00:47 +0000
Manifest next update: Mon 16 Jun 2025 04:00:47 +0000
Files and hashes: 1: buKspS4zrI1YnzIhdZLNHmm_cEw.crl (hash: 2ADD8/AfIcxh+CSiD0ZehhSdJHuRxyZHmygwzARTBsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/buKspS4zrI1YnzIhdZLNHmm_cEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:3a:0d:a7:2f:16:6c:82:d8:b5:d9:39:e4:e4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ee2aca52e33ac8d589f32217592cd1e69bf704c
Validity
Not Before: Jun 15 04:00:47 2025 GMT
Not After : Jun 16 04:00:47 2025 GMT
Subject: CN=202ef6c63b6bbbe6f0c7592c64d85dff344e16ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e5:af:91:0b:00:bd:9c:99:12:d1:3e:3b:c9:
0c:45:7d:ed:bf:d0:ce:08:69:34:8d:40:03:ec:29:
d4:54:7b:4c:17:ad:7d:65:d5:a6:0e:1f:1d:9d:08:
ff:b9:1b:b3:9e:91:cd:6c:99:84:52:33:a9:fc:52:
db:61:b6:37:cd:af:3a:84:ad:80:ff:16:87:3f:ab:
be:18:52:52:f0:69:3f:f0:ec:e0:e1:cd:ac:38:f4:
bd:a6:68:aa:19:34:8e:1b:ab:02:7d:83:22:bd:b9:
4a:e1:b9:ad:2a:1a:29:e6:b7:1a:73:f5:c9:59:04:
58:3c:8a:71:b3:62:9a:e8:14:9a:f8:20:88:8a:91:
d3:5e:f3:0c:ba:64:4a:09:9c:fa:5c:d9:65:24:67:
2e:81:ab:87:b0:8d:5c:7f:39:d4:64:b5:a6:68:09:
d1:51:b2:02:91:9c:24:ab:23:63:e1:7c:a6:49:89:
31:97:a2:fb:fe:d2:d6:08:eb:75:09:17:b0:b0:10:
d0:74:53:96:31:ae:c9:5c:b1:21:bc:60:bc:87:9a:
78:0c:cb:95:90:99:78:06:f7:9e:86:37:8f:a9:7b:
52:b4:92:18:0d:6a:32:3d:65:ef:f9:a9:e8:1e:6c:
61:ae:f6:21:1e:d9:fb:58:a8:2d:dd:f8:8b:e7:53:
81:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2E:F6:C6:3B:6B:BB:E6:F0:C7:59:2C:64:D8:5D:FF:34:4E:16:EF
X509v3 Authority Key Identifier:
keyid:6E:E2:AC:A5:2E:33:AC:8D:58:9F:32:21:75:92:CD:1E:69:BF:70:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/buKspS4zrI1YnzIhdZLNHmm_cEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:34:28:7a:af:8d:70:65:81:40:55:23:3f:c7:96:37:38:1f:
b3:32:9d:52:da:d9:80:30:65:03:9b:69:86:e3:3c:31:0b:af:
42:fd:28:f8:34:c8:6e:e5:97:e5:a0:f9:f8:64:0b:55:53:de:
0b:79:40:14:36:64:4f:9c:3b:13:b4:ba:29:91:01:42:35:fa:
45:69:d1:45:3c:ab:ae:60:00:29:82:80:a7:0c:a8:5c:c8:8a:
92:28:95:df:77:cb:ae:51:c1:d2:c0:63:f2:37:b5:43:b6:55:
61:6e:9f:04:af:4e:11:71:c8:87:2b:83:cf:1b:1b:28:6b:af:
9f:09:b7:60:25:8c:f5:fc:d5:24:d4:0b:f8:83:60:62:03:72:
87:18:71:20:d4:71:6e:36:16:67:27:01:ae:a2:90:67:72:5c:
eb:68:1d:9c:5a:b0:1b:a2:41:4a:46:6a:25:95:99:67:31:2b:
7b:b9:73:fc:a0:60:96:60:e2:65:2e:6c:8d:2f:f3:1e:e4:bf:
cc:e8:b0:8c:8e:a1:8e:6b:d5:7d:94:dc:76:a0:ee:f1:a7:c6:
36:e6:6a:19:a8:6e:eb:d1:2e:d4:40:ad:77:73:eb:8b:78:5c:
57:44:07:ba:3b:10:21:0b:04:00:2e:b4:f1:32:3e:88:20:24:
c2:54:f6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:16:33 2025 by rpki-client