Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
File: bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft (raw, json)
Hash identifier: 8yiKZhdHjW0b8DamdpV9cqLhteXZqUyYhx71+k2qiAI=
Subject key identifier: 63:17:03:7A:2E:57:CA:A1:35:36:50:69:97:08:17:77:14:09:01:48
Authority key identifier: 6C:CC:71:37:70:4B:26:30:19:17:56:3F:2A:84:67:1E:F6:75:80:06
Certificate issuer: /CN=6ccc7137704b26301917563f2a84671ef6758006
Certificate serial: 01976FD0C6F58130F7DDDE1F17E54ACB308F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
Manifest number: 0477
Signing time: Sat 14 Jun 2025 19:00:42 +0000
Manifest this update: Sat 14 Jun 2025 19:00:42 +0000
Manifest next update: Sun 15 Jun 2025 19:00:42 +0000
Files and hashes: 1: bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl (hash: FgfyGsFW+VDxQ0WgU4hgzDgYMsjVIwdPzy5PUmjfW+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d0:c6:f5:81:30:f7:dd:de:1f:17:e5:4a:cb:30:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccc7137704b26301917563f2a84671ef6758006
Validity
Not Before: Jun 14 19:00:42 2025 GMT
Not After : Jun 15 19:00:42 2025 GMT
Subject: CN=6317037a2e57caa1353650699708177714090148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:af:8c:72:9a:22:b6:76:d1:b2:0c:40:86:c1:
f6:c3:8c:db:84:cc:b3:af:dd:97:77:1a:ce:8d:43:
d6:2e:28:6c:5b:6d:fd:fe:e3:e8:58:a7:6d:01:47:
48:d3:c9:5f:f9:be:2c:51:44:ea:ef:b7:ed:67:3d:
e2:f3:50:79:a0:fa:07:20:cd:3a:be:80:3c:ea:6a:
9a:74:73:84:70:33:64:51:d8:28:6f:a6:90:7d:7b:
a3:ea:32:e7:ef:26:d0:e3:3a:80:43:06:39:5a:44:
6d:58:e0:58:ae:5d:7c:74:26:9c:6b:29:32:4c:47:
54:2c:f2:5a:6c:30:9c:af:59:1a:f9:21:42:52:55:
b1:ff:ef:54:3f:da:1b:bd:70:99:3c:9a:b5:4d:c5:
1d:b9:d0:90:29:8d:20:79:6e:f0:1c:10:50:50:3e:
cf:81:61:23:1f:b8:5c:7f:fa:52:7d:53:d0:b2:88:
fd:1f:3c:e6:16:20:bd:df:b4:00:f6:23:d8:6c:64:
0d:ca:12:f8:48:1e:fd:d8:49:8c:2d:5d:c8:a3:1d:
a3:0f:33:92:14:0c:5a:43:c1:7f:81:a4:d2:b6:50:
97:e3:bc:97:62:6a:68:f7:80:ac:9a:ab:15:e3:b3:
99:54:74:dc:d9:3a:a3:4f:8d:0e:04:e7:c2:08:17:
90:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:17:03:7A:2E:57:CA:A1:35:36:50:69:97:08:17:77:14:09:01:48
X509v3 Authority Key Identifier:
keyid:6C:CC:71:37:70:4B:26:30:19:17:56:3F:2A:84:67:1E:F6:75:80:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d0:30:ab:eb:53:60:9f:82:4a:a3:09:2c:66:bd:ec:ba:b4:
fe:f3:f2:fe:36:18:ba:80:23:66:50:04:70:9b:99:ba:fa:43:
a5:88:ff:e7:60:1b:97:00:a4:ee:2a:e2:c1:f9:3f:b4:58:1b:
ba:ee:d8:ee:50:a5:3a:1d:aa:24:18:31:f0:d8:2d:17:12:2f:
9d:0f:a3:9f:a4:e2:1c:26:e9:ec:8a:b9:19:7c:7a:d7:65:1f:
f7:eb:25:90:96:3b:27:1c:b8:70:ac:12:10:63:bb:db:22:7e:
43:06:97:13:98:6e:a2:44:1d:e9:3d:ef:da:ce:f2:7a:01:96:
18:b6:72:fa:e7:3d:86:4d:48:b2:3a:32:25:71:84:98:95:44:
6f:21:16:a0:1e:c3:ba:61:31:a4:44:85:8d:40:66:4c:9e:ef:
8d:4e:70:9a:19:6f:49:08:a1:0f:e1:d0:c3:a0:fd:d2:64:e1:
47:8b:e6:4e:37:8f:62:e7:66:29:d5:62:b9:fd:7f:58:4b:85:
1d:e6:28:12:07:65:01:2a:f6:c6:bf:72:ee:db:6b:09:47:4f:
6c:43:da:7f:ba:e6:15:58:06:a9:99:7e:30:d7:2c:eb:70:eb:
94:b4:eb:ce:dd:22:07:87:1a:75:73:da:37:c3:4b:30:b1:d2:
93:5f:55:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:08:31 2025 by rpki-client