Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft
File: bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft (raw, json)
Hash identifier: 6jV7yyCZmreXX/P/fLI97LKEMZ9ySC18ffybSWqJXLk=
Subject key identifier: 72:2C:E2:D5:C4:15:60:1B:3E:9D:CD:D8:5A:66:0E:69:5A:9F:26:08
Authority key identifier: 6C:29:24:4A:C4:02:67:EE:C4:7A:91:70:8F:89:CF:53:66:EA:A8:D7
Certificate issuer: /CN=6c29244ac40267eec47a91708f89cf5366eaa8d7
Certificate serial: 019769612F0F8AE4D66DEB0C12052E4C218B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bCkkSsQCZ-7EepFwj4nPU2bqqNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft
Manifest number: 0E21
Signing time: Fri 13 Jun 2025 13:01:06 +0000
Manifest this update: Fri 13 Jun 2025 13:01:06 +0000
Manifest next update: Sat 14 Jun 2025 13:01:06 +0000
Files and hashes: 1: bCkkSsQCZ-7EepFwj4nPU2bqqNc.crl (hash: H4ncsIQhu6FDZ4w1+lcKPECIMEBVt0NKB8uUzb6H95U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bCkkSsQCZ-7EepFwj4nPU2bqqNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:2f:0f:8a:e4:d6:6d:eb:0c:12:05:2e:4c:21:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c29244ac40267eec47a91708f89cf5366eaa8d7
Validity
Not Before: Jun 13 13:01:06 2025 GMT
Not After : Jun 14 13:01:06 2025 GMT
Subject: CN=722ce2d5c415601b3e9dcdd85a660e695a9f2608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8b:b0:26:bd:3e:6c:f1:09:1c:01:59:e1:3e:
eb:5c:6c:40:0f:b9:be:e3:f2:04:b1:4b:9c:9c:8a:
ff:71:0a:e6:4a:a9:0e:e9:29:c8:f3:e2:7d:74:e7:
3b:c0:d6:00:8a:83:fa:3c:fd:a5:a1:46:23:49:31:
2e:55:97:92:8f:a1:03:b7:00:2f:7f:e3:e3:d7:77:
33:6a:41:43:6d:e1:ca:21:39:2a:bf:e8:d4:73:2a:
a7:8e:d4:76:68:cb:0f:2d:da:30:e0:a7:4a:b4:e7:
83:67:84:85:90:34:81:57:94:05:bd:de:52:09:e8:
60:06:70:2a:16:72:f1:2b:69:b3:0f:33:43:9b:53:
14:c2:4f:16:61:95:9c:48:42:82:21:0a:1f:d5:42:
3b:13:97:3e:6c:7e:1f:8c:65:2c:c4:63:16:5b:be:
d8:31:5d:36:ae:ed:73:40:ad:d7:cc:ca:29:fe:70:
87:db:2e:04:f0:d1:63:80:44:d2:bf:35:de:ae:8c:
99:4f:5a:0b:9c:34:d4:a2:01:26:16:7c:6a:4f:a1:
d2:3a:fe:13:2b:78:50:3e:19:f8:ea:db:f1:50:8c:
21:82:d8:b0:a9:fa:c0:d1:16:aa:1e:19:07:dd:60:
b8:2a:71:e2:30:bf:be:bf:8f:93:09:b1:fc:2d:3d:
2a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2C:E2:D5:C4:15:60:1B:3E:9D:CD:D8:5A:66:0E:69:5A:9F:26:08
X509v3 Authority Key Identifier:
keyid:6C:29:24:4A:C4:02:67:EE:C4:7A:91:70:8F:89:CF:53:66:EA:A8:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bCkkSsQCZ-7EepFwj4nPU2bqqNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:0d:0e:78:ca:cd:fe:1d:a7:63:38:0e:b7:84:8c:bf:bd:fa:
00:12:72:1c:e6:0f:86:2a:ce:cd:30:35:c1:cc:53:61:2c:e7:
e5:03:f2:7d:20:88:3e:44:6a:28:c7:67:0e:e9:8e:07:44:05:
2c:8e:9f:f6:f7:1f:8b:06:fd:65:c2:7c:64:c7:62:92:50:95:
1f:ba:a4:3e:06:15:00:a6:51:1f:62:7e:fb:4b:5a:7e:18:6a:
67:f2:47:44:88:53:33:df:eb:f2:cf:88:ea:54:5e:ae:14:a7:
c7:54:ae:56:3c:7a:ef:78:a5:4a:b7:b2:b3:f0:ea:0d:26:9c:
0b:7f:1b:a9:fc:4f:35:85:c2:0e:44:7b:ca:b4:d1:08:1b:13:
27:1f:48:08:0d:b1:f2:35:e5:b9:46:34:ce:ee:7c:bd:47:f7:
9f:76:c4:e9:77:ef:fd:c5:d9:e4:c3:ec:54:e5:b8:25:51:54:
44:58:a8:6b:f8:50:c5:f0:04:ef:63:e1:08:56:0a:75:d2:ae:
c7:c6:1a:7f:66:4a:c4:21:79:a5:11:27:72:1d:d3:00:5a:cd:
af:b4:9c:d3:f9:f2:0d:53:30:3f:e4:7c:23:36:8f:fa:cf:5d:
9a:d3:b8:b0:c7:32:52:69:d9:54:f0:2c:23:37:bc:93:c1:f8:
a2:a8:14:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:03:28 2025 by rpki-client