Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
File: bq0LWp5EY4gC_LRukPqjrbUWv4g.mft (raw, json)
Hash identifier: vlFUHY7n1G3EH6SAXxb5KPLtkWdJ+qdj2sqSY3y6bic=
Subject key identifier: 07:F9:02:04:09:00:C3:25:D4:83:E6:C5:9C:9A:E6:30:B0:2E:40:FC
Authority key identifier: 6E:AD:0B:5A:9E:44:63:88:02:FC:B4:6E:90:FA:A3:AD:B5:16:BF:88
Certificate issuer: /CN=6ead0b5a9e44638802fcb46e90faa3adb516bf88
Certificate serial: 01989E5E870BA762A28D73AB364FEE06D9E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
Manifest number: 162B
Signing time: Tue 12 Aug 2025 13:00:51 +0000
Manifest this update: Tue 12 Aug 2025 13:00:51 +0000
Manifest next update: Wed 13 Aug 2025 13:00:51 +0000
Files and hashes: 1: bq0LWp5EY4gC_LRukPqjrbUWv4g.crl (hash: 6IVg27IO3fJiZ3BvXfSX+1YF5+y4VcPGj5B4x1nhR0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:5e:87:0b:a7:62:a2:8d:73:ab:36:4f:ee:06:d9:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ead0b5a9e44638802fcb46e90faa3adb516bf88
Validity
Not Before: Aug 12 13:00:51 2025 GMT
Not After : Aug 13 13:00:51 2025 GMT
Subject: CN=07f902040900c325d483e6c59c9ae630b02e40fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:77:55:a1:83:a9:92:a2:a4:6d:06:72:78:dd:
ba:77:15:26:c1:da:95:61:21:05:32:51:a0:73:0c:
d3:29:e1:fd:61:ba:1c:a1:28:37:cf:22:b6:28:70:
f7:3d:ee:58:33:dc:66:e1:5c:6c:68:52:a0:7c:4c:
78:00:a5:95:ba:a0:18:98:70:9d:83:34:58:d6:94:
92:c8:1c:8b:10:d6:c9:95:7e:96:c5:f1:3b:68:66:
d3:d6:59:a0:e5:ec:f8:64:0a:b7:c2:75:77:5e:39:
b2:fe:4d:23:da:0a:e1:d5:c4:a3:2c:10:10:17:6e:
b8:44:1b:fc:72:b7:2f:04:c8:6e:8d:02:85:36:c1:
52:76:76:30:a9:e4:0b:0b:b2:61:4c:00:84:d0:0f:
b0:4d:c8:b4:ed:25:7b:61:76:0f:18:02:93:33:77:
1c:4e:54:47:ba:e5:63:fb:07:1a:30:95:c6:69:9a:
66:3d:71:ed:d3:ba:ad:6e:e4:9f:51:6d:39:4f:9d:
ee:b3:bf:8e:33:fd:48:1e:63:db:26:cd:e1:49:05:
c3:59:35:ba:81:1d:de:72:13:0b:c9:d6:bf:32:2d:
f1:0d:e2:2f:8e:b1:f3:b3:7a:20:8d:cd:39:4d:fb:
2d:0e:49:27:bf:99:93:22:53:a0:f7:d7:00:eb:0e:
40:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F9:02:04:09:00:C3:25:D4:83:E6:C5:9C:9A:E6:30:B0:2E:40:FC
X509v3 Authority Key Identifier:
keyid:6E:AD:0B:5A:9E:44:63:88:02:FC:B4:6E:90:FA:A3:AD:B5:16:BF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:fa:0d:fb:cb:bc:a0:36:82:5c:80:6a:42:ce:c9:76:0a:64:
9a:54:eb:dc:88:24:be:5d:6c:2d:53:26:42:43:e0:af:e0:cd:
51:66:b8:2e:63:98:41:17:92:6c:86:a6:cb:4c:a1:0c:b6:73:
0d:76:b2:07:36:c8:93:9b:d3:89:ed:d7:d8:b0:de:5a:23:15:
64:0a:82:78:bb:0d:cf:8e:1c:02:69:63:2e:af:97:f9:11:10:
1e:c3:e6:76:20:d3:c2:e6:93:86:4f:5f:67:41:da:a8:eb:df:
d7:df:6f:a6:e2:51:11:a2:d4:67:59:b8:ac:2d:c7:c6:20:3d:
5f:ce:c9:bf:b3:84:6b:2a:f2:e3:e9:ed:3f:f3:4f:3b:30:f9:
4c:96:85:9f:23:7e:0d:52:ce:ee:a5:11:7c:77:00:d1:5e:c6:
c1:bf:10:7a:64:c2:09:6f:44:1a:24:74:b3:82:28:ca:02:83:
0e:92:f4:b2:f7:c6:6d:d9:16:0c:2a:98:fd:2f:6f:5f:63:df:
2a:01:af:91:46:8e:64:23:6d:29:d0:96:95:ad:cb:0f:2b:93:
80:40:14:80:35:0f:48:a7:b1:22:73:e3:e2:eb:b2:ce:55:19:
ca:8f:b6:34:3f:29:8b:e4:12:da:5e:ec:46:36:2a:4a:17:bc:
ea:2a:0b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:40:50 2025 by rpki-client