Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
File: bq0LWp5EY4gC_LRukPqjrbUWv4g.mft (raw, json)
Hash identifier: W7lRmGOjFK9LJY/vDetHZOIbFx6rz4Che9BU/Ue9Snw=
Subject key identifier: 19:F3:2E:88:F0:39:29:CD:9E:89:92:6E:AB:CC:07:72:FF:88:41:D7
Authority key identifier: 6E:AD:0B:5A:9E:44:63:88:02:FC:B4:6E:90:FA:A3:AD:B5:16:BF:88
Certificate issuer: /CN=6ead0b5a9e44638802fcb46e90faa3adb516bf88
Certificate serial: 0197711AE8FC490B8EE45D82781A76A0371B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
Manifest number: 158F
Signing time: Sun 15 Jun 2025 01:01:18 +0000
Manifest this update: Sun 15 Jun 2025 01:01:18 +0000
Manifest next update: Mon 16 Jun 2025 01:01:18 +0000
Files and hashes: 1: bq0LWp5EY4gC_LRukPqjrbUWv4g.crl (hash: /3zIdFI47PaOxgVmd8u+5YY2V8Inth2lk9jNBM1wsKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 01:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:e8:fc:49:0b:8e:e4:5d:82:78:1a:76:a0:37:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ead0b5a9e44638802fcb46e90faa3adb516bf88
Validity
Not Before: Jun 15 01:01:18 2025 GMT
Not After : Jun 16 01:01:18 2025 GMT
Subject: CN=19f32e88f03929cd9e89926eabcc0772ff8841d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:33:f3:71:c4:da:ab:67:9c:19:dc:17:da:bc:
7f:d4:01:2b:3f:39:57:98:cb:93:e6:18:83:cb:fb:
fb:8f:0c:e4:21:37:4d:21:39:e3:3d:34:03:35:a1:
4b:ff:7f:a0:36:06:6a:07:64:40:7b:f2:fb:fe:1b:
88:22:4c:04:c3:a4:70:69:aa:f4:38:10:64:46:6a:
d1:37:02:7c:fa:dd:32:49:aa:1b:a4:bc:f0:1e:b3:
1b:57:bd:43:f4:33:5a:1f:5e:01:26:b2:01:57:b0:
62:96:dc:58:ac:cd:6d:90:5c:2b:cf:d7:d7:4f:75:
f9:ac:e4:4f:9d:0b:77:9e:31:75:82:5b:f8:bc:70:
19:cb:9e:1b:5d:9c:73:99:d0:23:81:fe:36:d8:c5:
e5:3b:ee:c1:02:2a:b7:cb:e5:b4:5a:d4:99:aa:12:
32:4f:a3:23:fb:4f:1f:9a:3c:ef:cc:76:56:51:3d:
ed:cd:20:37:cf:19:a6:0c:15:c8:77:e9:f3:ad:af:
08:5f:93:b5:e2:a1:1c:a6:80:1d:31:58:49:0b:69:
b5:58:71:87:e3:a9:ad:b1:ba:4d:d7:17:07:82:0b:
2b:0b:9b:05:ac:fd:a5:73:82:6b:dd:6f:82:d8:ad:
99:b7:2d:d5:5a:55:b8:2c:d8:a4:a5:00:d9:1b:d9:
98:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F3:2E:88:F0:39:29:CD:9E:89:92:6E:AB:CC:07:72:FF:88:41:D7
X509v3 Authority Key Identifier:
keyid:6E:AD:0B:5A:9E:44:63:88:02:FC:B4:6E:90:FA:A3:AD:B5:16:BF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:72:53:9b:11:fa:68:7d:5a:e8:4d:96:04:a8:0b:b6:db:17:
27:d3:2d:00:59:65:e8:ff:39:61:6a:13:0c:ae:72:64:6b:a9:
d8:dc:8f:0e:23:c7:70:9e:eb:71:b7:a9:4b:45:bd:72:9b:64:
4e:27:2c:49:7c:87:89:e0:9c:ae:00:21:5e:1f:cd:98:59:24:
01:c0:20:4b:08:59:cf:34:67:3b:61:d2:91:7d:f3:dc:4c:3a:
73:32:85:a8:c8:80:70:29:fa:a7:74:7e:6f:e1:b9:28:db:0e:
29:10:67:0d:6e:84:02:cf:1c:09:89:98:5b:63:0f:ce:0b:4f:
d8:e7:77:90:f5:c0:80:42:43:f0:91:36:cb:d3:7b:71:ef:e6:
18:1e:12:cf:34:06:f4:39:49:58:90:ca:cd:bf:c1:02:c6:f6:
5a:62:de:88:4c:f3:0e:e1:10:10:3c:7c:e5:0c:d8:0c:b7:86:
1b:fb:38:0f:d7:06:17:a5:9f:c7:21:fd:e5:93:ac:bd:98:65:
08:80:42:c8:42:d8:89:cf:8f:bf:c5:53:04:28:57:a5:3c:b3:
ac:75:32:80:a3:54:b8:58:12:23:1b:6c:ec:f0:bd:eb:8e:55:
8e:1f:60:09:ed:52:c2:7c:6e:27:e3:40:f6:57:41:12:06:3c:
12:11:f6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:25:20 2025 by rpki-client