Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.mft
File: bdEoKnfiVmUBaNLlZWrvzprWouw.mft (raw, json)
Hash identifier: YiixMGH6XuE0v6CaAowAGNe711hAZchR+146NY5JkLY=
Subject key identifier: 18:9C:0B:4A:E4:F1:0C:E3:19:2C:BB:D6:B0:45:18:68:8F:E8:2A:A3
Authority key identifier: 6D:D1:28:2A:77:E2:56:65:01:68:D2:E5:65:6A:EF:CE:9A:D6:A2:EC
Certificate issuer: /CN=6dd1282a77e256650168d2e5656aefce9ad6a2ec
Certificate serial: 01988D33F1B271478F3BEB60C7CFA8B207A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdEoKnfiVmUBaNLlZWrvzprWouw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.mft
Manifest number: 0458
Signing time: Sat 09 Aug 2025 05:00:48 +0000
Manifest this update: Sat 09 Aug 2025 05:00:48 +0000
Manifest next update: Sun 10 Aug 2025 05:00:48 +0000
Files and hashes: 1: bdEoKnfiVmUBaNLlZWrvzprWouw.crl (hash: 8IcScgcenR94bo8XuOw9KhgYNUA016MwbC/+0qqmwBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bdEoKnfiVmUBaNLlZWrvzprWouw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:33:f1:b2:71:47:8f:3b:eb:60:c7:cf:a8:b2:07:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd1282a77e256650168d2e5656aefce9ad6a2ec
Validity
Not Before: Aug 9 05:00:48 2025 GMT
Not After : Aug 10 05:00:48 2025 GMT
Subject: CN=189c0b4ae4f10ce3192cbbd6b04518688fe82aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:93:53:6e:8d:9e:05:43:61:90:30:45:9a:10:
99:5a:7f:94:95:8d:72:87:fe:52:a7:39:84:52:14:
fc:ce:d8:e2:15:c7:78:d0:fb:a9:99:e4:db:d4:b7:
74:a5:48:a4:72:af:04:9e:61:f0:46:a7:0e:43:4b:
26:53:af:7a:9a:55:c8:40:a9:62:f7:a4:db:77:cb:
6c:ac:42:b8:19:c1:5b:a1:65:84:38:f5:a6:5d:a5:
20:a7:56:a0:7b:d0:61:93:36:db:ed:de:93:bf:84:
ab:d3:cb:73:4b:76:0b:52:5e:11:f3:47:14:0e:60:
90:22:85:1b:00:39:4e:a1:69:a9:48:2c:4f:5a:51:
6b:9b:c4:6c:fc:f1:20:73:b7:75:ef:e9:d0:73:04:
58:63:35:68:42:4e:29:4f:82:68:bf:c9:a5:9e:14:
1a:5d:ee:14:56:3a:e3:53:7e:cf:99:52:cc:0d:44:
16:e3:78:84:03:73:6c:fd:a0:78:00:c2:0b:20:01:
7b:8a:25:44:97:48:d4:f6:82:45:1e:f4:34:45:50:
0d:f3:db:95:c3:f6:d8:db:aa:44:b1:1d:0d:d2:cb:
ab:96:15:4e:a5:9f:46:6c:32:5b:76:58:d3:41:b5:
2c:9a:c2:0a:b4:88:f3:a0:46:99:b7:87:87:10:9b:
76:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:9C:0B:4A:E4:F1:0C:E3:19:2C:BB:D6:B0:45:18:68:8F:E8:2A:A3
X509v3 Authority Key Identifier:
keyid:6D:D1:28:2A:77:E2:56:65:01:68:D2:E5:65:6A:EF:CE:9A:D6:A2:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdEoKnfiVmUBaNLlZWrvzprWouw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:52:d8:a8:a0:c9:30:0d:d0:69:ee:9f:3e:fe:4a:85:98:4a:
5d:94:21:ef:8a:fd:43:59:90:ae:9d:72:c5:68:9e:22:1c:c6:
e2:84:ec:22:7f:10:76:fd:db:11:5e:c7:8d:ba:1f:10:11:5e:
3f:ac:6f:84:06:92:81:90:65:f4:65:ce:fc:76:b1:aa:81:03:
53:7b:30:af:e6:b6:5d:b0:10:aa:3f:7d:f0:a4:fc:1e:0f:b2:
88:97:34:1f:af:de:c2:54:88:ab:e7:d4:0a:86:0c:1e:64:ea:
3d:96:fb:c6:0b:f3:5a:55:a9:5d:d8:4b:01:de:f3:8e:06:88:
3d:e8:bb:55:1f:d9:05:82:9c:5e:34:e2:41:14:a4:71:04:ef:
00:35:f4:ba:af:73:2d:8a:cf:70:33:b4:fa:6d:9f:81:8f:89:
59:02:93:54:52:40:65:c7:0b:6b:d2:b0:ef:46:68:13:a5:ce:
05:a8:49:9b:20:2f:54:83:36:4a:3c:4a:e4:31:d1:e1:25:25:
0b:2b:60:c1:5a:b5:80:82:57:ac:d8:93:66:7d:a1:0d:51:b8:
2a:a4:ff:7c:48:4e:a8:17:f5:3b:dd:af:c1:24:d0:8d:42:b9:
ba:fe:16:fd:73:83:8b:06:e2:e5:8d:2e:49:99:16:75:e0:9b:
55:0c:5e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:36:01 2025 by rpki-client