Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
File: bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft (raw, json)
Hash identifier: jXHevr+K9FKluaCsf9bgyAkraQT4HDcx2YfoYcf9ofU=
Subject key identifier: 8F:AC:92:2C:5B:43:E2:24:4B:1F:AD:7E:EC:31:32:6C:6E:34:44:12
Authority key identifier: 6E:4B:35:10:F0:04:E4:54:DF:BC:1F:1A:28:C4:59:D9:18:D1:51:3C
Certificate issuer: /CN=6e4b3510f004e454dfbc1f1a28c459d918d1513c
Certificate serial: 01976F63000B8AD1CDC0AAE7CDB159B6E99B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
Manifest number: 158C
Signing time: Sat 14 Jun 2025 17:00:48 +0000
Manifest this update: Sat 14 Jun 2025 17:00:48 +0000
Manifest next update: Sun 15 Jun 2025 17:00:48 +0000
Files and hashes: 1: bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl (hash: COaELaoyhweA2goDYuWaWB5/B3CDczmLfuJM+OhhNz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:63:00:0b:8a:d1:cd:c0:aa:e7:cd:b1:59:b6:e9:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e4b3510f004e454dfbc1f1a28c459d918d1513c
Validity
Not Before: Jun 14 17:00:48 2025 GMT
Not After : Jun 15 17:00:48 2025 GMT
Subject: CN=8fac922c5b43e2244b1fad7eec31326c6e344412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:db:33:e2:8f:dc:2f:e9:94:7e:97:8f:b7:1c:
82:bc:85:33:df:f5:3c:c8:15:cd:b4:1f:81:6a:35:
c5:d6:fc:59:ed:9f:7e:de:33:08:6a:be:1c:b2:34:
17:e6:6f:20:ec:34:ca:3a:7c:8d:76:fd:0f:54:f1:
27:a9:58:ec:d6:3f:3f:47:2c:29:4c:d3:2f:ed:f9:
2a:ff:38:c8:ee:03:ea:b8:4c:ae:1f:78:b9:2c:64:
97:5f:de:26:d9:ba:24:7f:83:d1:16:45:a0:fb:68:
81:71:ef:ee:ba:d6:4d:5f:b0:bb:23:f0:fd:04:75:
9c:2e:76:43:29:98:06:53:a6:dc:eb:cf:72:71:25:
bf:07:ec:01:d7:6c:e4:7a:3a:c2:db:ff:e3:60:3d:
d9:ae:84:d2:4d:62:62:d0:e8:44:4b:59:f3:06:f0:
1d:28:7c:8a:ad:0e:3d:1c:5e:c3:3d:49:e7:1a:28:
2c:6f:b0:9d:18:f6:05:87:86:b8:0d:86:70:24:ad:
1a:b8:ff:25:ca:d2:07:27:34:40:b3:8d:d7:6d:10:
ce:81:c8:47:ea:32:9b:13:f7:47:75:70:9e:00:a2:
66:38:6d:91:91:cf:cc:5d:85:8a:dc:42:1e:a7:dd:
47:88:c1:a1:30:f6:aa:64:59:09:16:0c:6a:7c:1c:
29:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AC:92:2C:5B:43:E2:24:4B:1F:AD:7E:EC:31:32:6C:6E:34:44:12
X509v3 Authority Key Identifier:
keyid:6E:4B:35:10:F0:04:E4:54:DF:BC:1F:1A:28:C4:59:D9:18:D1:51:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:1f:42:90:22:73:62:a3:d6:c8:ac:2f:64:7d:77:6e:5e:9c:
67:15:a1:63:5e:a1:32:e8:44:ed:af:8e:c8:07:7e:a4:77:99:
10:4f:de:3e:aa:b0:3d:00:3d:d5:80:e0:a4:36:0c:b1:8f:0c:
6f:99:8a:dd:6f:79:8b:a4:03:94:8d:f6:a5:50:0a:49:36:87:
b6:b8:8a:19:69:3b:be:90:a5:04:6a:16:6a:94:02:e1:a1:78:
67:3a:e2:d2:26:d8:97:45:d8:94:41:39:69:30:dc:69:78:8d:
79:08:3f:35:8a:2e:32:83:e7:d6:37:27:96:17:80:44:05:43:
69:62:d2:2b:96:34:b2:9f:0a:77:57:59:ff:24:a5:6c:0d:f0:
5e:db:88:e4:ed:f8:b2:99:b1:01:f2:c7:a0:05:a2:70:d4:23:
e1:ab:c8:4e:0f:a6:8a:34:ac:51:3c:42:73:52:1e:1f:22:1d:
21:60:4e:73:8f:5a:ca:6e:b7:80:80:8b:66:1c:13:ae:b6:6e:
b8:aa:6b:37:6c:65:a0:b3:5e:84:a1:ad:e3:aa:7f:0d:e4:de:
91:eb:7a:1e:06:d0:cc:a1:f3:83:f9:4b:48:0e:50:44:1d:3c:
44:5e:55:77:92:98:f6:9b:10:af:0c:9b:8b:36:29:32:bf:85:
de:35:d7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:03:47 2025 by rpki-client