Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
File: bxOPLgM_lCu5TnMf9FJEjGgCroI.mft (raw, json)
Hash identifier: XBKJfsgPvlWoTKqtH8jgsxxxZIpH7uJ1WHUSPZXhr54=
Subject key identifier: 61:BB:1A:84:FF:B4:DC:77:BA:56:1F:B8:43:6A:34:C1:31:6D:1D:B3
Authority key identifier: 6F:13:8F:2E:03:3F:94:2B:B9:4E:73:1F:F4:52:44:8C:68:02:AE:82
Certificate issuer: /CN=6f138f2e033f942bb94e731ff452448c6802ae82
Certificate serial: 0197B7EA381B0C32408126250FD6423214EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 19:01:09 +0000
Manifest this update: Sat 28 Jun 2025 19:01:09 +0000
Manifest next update: Sun 29 Jun 2025 19:01:09 +0000
Files and hashes: 1: 2cCUJtYhVepSHvUymWA4difKbm4.roa (hash: 2GZetLN+ABzzZiJpVfwp76NOZrbjBE0afEtmIXZxkxM=)
2: bxOPLgM_lCu5TnMf9FJEjGgCroI.crl (hash: xucmpn3DucyPFes9tISnZg50f8L7VdZp3MECZM5qtlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:38:1b:0c:32:40:81:26:25:0f:d6:42:32:14:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f138f2e033f942bb94e731ff452448c6802ae82
Validity
Not Before: Jun 28 19:01:09 2025 GMT
Not After : Jun 29 19:01:09 2025 GMT
Subject: CN=61bb1a84ffb4dc77ba561fb8436a34c1316d1db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:be:f6:28:b3:2a:bf:0d:d4:d3:0f:3d:3a:14:
fd:d0:bd:93:41:71:91:6c:39:ab:0b:bf:f8:c0:43:
8a:5b:ae:58:f7:5e:3a:bd:28:9a:b3:72:90:d8:9b:
f7:5c:cd:66:30:3f:95:a5:2d:6e:73:ba:1e:f7:9b:
8e:bd:81:9b:bc:70:e8:dd:0b:ab:ba:c6:f0:05:54:
11:66:65:26:ad:b5:bb:35:87:73:39:05:4c:ec:bd:
03:a9:5d:9d:ab:e5:ab:24:73:ab:d1:82:01:67:a9:
38:64:d0:e2:dd:7f:b6:37:22:e2:47:ee:b7:6c:fc:
61:da:ce:22:0c:24:2d:07:42:df:ef:c5:28:19:e8:
8c:53:7a:2c:6f:80:f0:c6:db:31:00:34:b5:dc:39:
40:0a:e5:d5:c7:b0:b2:70:52:38:88:32:84:d5:c4:
e8:71:ac:3c:19:c7:93:b1:d6:64:10:78:10:5c:93:
98:f0:7d:89:ee:3f:07:97:e0:c2:e2:66:f3:74:9b:
18:bc:eb:26:aa:28:b8:64:77:6a:6c:a9:6b:c3:3e:
7c:a8:8f:fe:8a:24:93:8c:ef:4a:5f:75:a5:5e:c4:
ca:af:5a:f9:cd:50:13:4f:3b:0f:8a:6c:1f:09:8a:
5f:05:3c:0c:0b:4a:50:38:04:65:6f:88:2e:81:b0:
b4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BB:1A:84:FF:B4:DC:77:BA:56:1F:B8:43:6A:34:C1:31:6D:1D:B3
X509v3 Authority Key Identifier:
keyid:6F:13:8F:2E:03:3F:94:2B:B9:4E:73:1F:F4:52:44:8C:68:02:AE:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:9d:a1:53:c7:aa:93:db:c4:99:e3:88:ac:76:32:04:fd:08:
ff:52:a9:eb:3c:97:05:5c:a0:37:b7:84:00:60:f4:70:7f:7f:
1a:13:70:06:ae:18:ad:0a:98:d9:01:48:d2:f5:ce:60:b5:b1:
4b:30:83:bf:ee:bc:ec:6c:e4:d9:01:f8:b3:6c:7d:e7:73:c5:
d8:eb:b3:88:e7:17:23:54:56:57:eb:b4:35:98:d8:94:77:d1:
55:94:6d:72:5e:fa:d0:81:4c:2d:9b:a3:8b:c3:dd:e3:42:bf:
6d:9d:fd:5d:24:48:3c:aa:02:8d:93:5c:95:1b:e8:59:3b:36:
7d:d9:5e:9a:6b:38:32:3e:9e:1d:76:b7:35:45:c5:e9:e7:74:
bb:1e:0e:d0:db:84:23:60:ed:3c:77:84:5e:7f:da:02:1b:82:
e3:91:68:50:d7:2b:15:65:d5:89:4b:76:08:95:35:c3:ba:5d:
a7:03:9f:3f:d0:ac:a5:09:d5:e0:4f:c6:28:38:ca:02:93:32:
d4:0c:a6:34:f9:08:0a:0f:f6:a8:7b:ef:fc:60:7c:19:83:dd:
3e:af:bf:32:a6:0d:7a:2a:d8:8c:84:f1:2c:00:2e:b3:ec:3b:
10:42:4a:bb:7f:ad:9b:08:dd:4b:a4:74:63:d4:00:6c:95:ec:
12:81:c3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:21:10 2025 by rpki-client