Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
File: bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft (raw, json)
Hash identifier: 3u4zXD6ibet6Nj5Gp5zVLqrzNaghC8nnI4IWGzqiFS4=
Subject key identifier: 25:58:70:6F:FF:3B:ED:2F:5A:58:85:DC:DD:A7:2A:1C:A5:A4:D2:6A
Authority key identifier: 6C:CC:71:37:70:4B:26:30:19:17:56:3F:2A:84:67:1E:F6:75:80:06
Certificate issuer: /CN=6ccc7137704b26301917563f2a84671ef6758006
Certificate serial: 01989F0386C144CABCDAC990D6F96658A9B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
Manifest number: 0514
Signing time: Tue 12 Aug 2025 16:01:05 +0000
Manifest this update: Tue 12 Aug 2025 16:01:05 +0000
Manifest next update: Wed 13 Aug 2025 16:01:05 +0000
Files and hashes: 1: bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl (hash: Q89m1KaD+GWOFx3SSBDLT1/7G07T3dQpQsToics2qy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:03:86:c1:44:ca:bc:da:c9:90:d6:f9:66:58:a9:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccc7137704b26301917563f2a84671ef6758006
Validity
Not Before: Aug 12 16:01:05 2025 GMT
Not After : Aug 13 16:01:05 2025 GMT
Subject: CN=2558706fff3bed2f5a5885dcdda72a1ca5a4d26a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:80:5e:39:5d:c3:8d:7d:6b:0c:53:2c:a8:a7:
2a:75:d2:22:fc:9e:6e:2a:f4:71:ae:dc:c3:55:48:
d1:de:32:b4:ed:c1:e3:26:36:92:b1:c0:96:4f:6c:
1e:b2:ab:98:4d:97:60:55:18:b2:45:58:dd:a0:c7:
32:1b:1b:ef:9c:f7:c4:8b:db:33:c0:d5:cf:fa:bd:
a5:17:ca:ea:e4:c8:60:4d:58:1f:ec:ff:2d:76:5a:
65:fb:c6:34:fd:5e:32:0a:6e:c4:f0:68:28:61:31:
3e:40:d8:67:e8:92:33:11:bb:e0:f4:9c:d1:be:f4:
44:3e:1a:c7:ce:60:55:20:9d:aa:ec:4b:de:90:dd:
39:ab:ca:50:3c:ec:0e:50:76:b6:2c:46:ed:05:e1:
88:37:e7:46:b1:95:3e:6d:9d:21:a3:83:74:2b:5a:
ce:90:d3:71:75:5f:51:37:00:5a:e4:7a:d2:85:7c:
92:7b:6c:50:6f:7e:b8:39:4d:29:2e:72:90:fa:b3:
32:51:fe:62:ea:73:7c:3e:f9:1c:6b:4b:65:4f:4b:
9f:57:b4:0e:51:09:3d:dd:f3:51:ee:d2:ce:4b:ab:
52:00:fc:98:af:70:11:47:5f:3e:d6:9e:63:a8:71:
88:30:5f:57:4d:89:9d:ae:40:e0:23:57:9a:11:58:
06:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:58:70:6F:FF:3B:ED:2F:5A:58:85:DC:DD:A7:2A:1C:A5:A4:D2:6A
X509v3 Authority Key Identifier:
keyid:6C:CC:71:37:70:4B:26:30:19:17:56:3F:2A:84:67:1E:F6:75:80:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:63:82:70:70:0f:c6:cd:c5:12:3f:62:a1:7e:14:11:18:c5:
03:04:ba:8d:fc:c5:70:82:09:1f:0a:3b:45:35:2d:44:6c:a5:
82:18:14:dc:eb:d1:db:6c:4a:6f:db:5a:c2:98:6e:ad:29:a4:
8b:50:94:bd:51:a7:c7:1e:64:63:ea:5b:4c:e8:79:69:3c:5e:
bf:c0:8c:c1:53:d4:d5:92:38:f2:1a:ea:1f:61:b9:fd:00:98:
e8:71:43:76:2c:97:d0:97:f5:34:ba:8f:79:2e:00:ab:d6:71:
4b:9e:e3:b2:76:37:db:af:6e:4e:0a:24:88:8b:2b:01:29:53:
79:d0:94:71:e8:b7:58:2e:3d:38:46:cd:33:91:66:ce:65:d5:
9d:0e:39:a8:df:5c:a0:94:6a:2d:6c:a9:d3:cb:ac:f5:e0:d2:
e4:df:c6:9c:4c:21:60:b6:40:fb:2b:4d:f7:db:2b:66:4f:7a:
d0:24:1e:2e:9f:01:da:0e:13:b1:62:59:c4:68:93:30:f5:15:
e3:8d:0b:48:04:a1:1f:87:30:a5:54:f7:c0:67:32:41:b3:13:
54:2f:98:cf:4b:4e:dd:fa:92:9a:ff:db:52:9b:bf:e1:e6:38:
39:1b:5b:26:68:19:b3:51:80:57:24:f6:3a:1b:d8:c3:b4:f9:
30:f7:f7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:42:17 2025 by rpki-client