Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft
File: bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft (raw, json)
Hash identifier: vd9BWYWZBAT8WbJ97voiixICQKN00LyMJOsf8fbawGk=
Subject key identifier: E3:4E:97:A9:A4:DB:9E:19:05:5A:7B:01:A3:D0:DA:8F:50:44:87:11
Authority key identifier: 6E:0C:67:40:40:D2:FD:FA:8B:9E:E2:7B:A8:6C:74:7D:6B:0E:CB:67
Certificate issuer: /CN=6e0c674040d2fdfa8b9ee27ba86c747d6b0ecb67
Certificate serial: 0199FAD7ECD2AAAB30FCA1DCE3D3A4F088B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft
Manifest number: 11E1
Signing time: Sun 19 Oct 2025 05:01:18 +0000
Manifest this update: Sun 19 Oct 2025 05:01:18 +0000
Manifest next update: Mon 20 Oct 2025 05:01:18 +0000
Files and hashes: 1: bgxnQEDS_fqLnuJ7qGx0fWsOy2c.crl (hash: G5DG/GUL2lBJKYulGoM/SzUB0RtyuitTTBp/SGu5h/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:ec:d2:aa:ab:30:fc:a1:dc:e3:d3:a4:f0:88:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e0c674040d2fdfa8b9ee27ba86c747d6b0ecb67
Validity
Not Before: Oct 19 05:01:18 2025 GMT
Not After : Oct 20 05:01:18 2025 GMT
Subject: CN=e34e97a9a4db9e19055a7b01a3d0da8f50448711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:14:a4:7e:1b:83:07:02:86:c1:e4:93:70:bf:
de:75:3a:2d:d6:2a:aa:ca:8e:10:2c:72:2f:a9:ee:
18:f1:cd:3a:66:b1:64:69:e3:f1:9c:11:71:bd:01:
2f:45:e1:e8:b8:91:9e:ba:fb:0f:c9:09:35:22:e2:
f2:cc:94:26:43:04:ba:91:b9:b4:99:1a:7c:08:53:
c9:0a:85:32:5a:71:f4:36:6d:eb:c9:34:77:1a:28:
e6:84:4d:cf:8c:0d:d4:ce:3d:9d:a3:50:ff:5a:c8:
a7:f5:6e:6a:42:14:b7:c6:eb:b1:f9:4d:33:00:c9:
9e:56:b8:ac:6b:a0:14:9c:e8:47:95:84:bd:8a:c6:
e9:69:e0:25:fb:d4:af:9b:7d:d6:0c:58:06:23:68:
a6:3f:20:90:3e:28:7d:12:3a:da:0b:1e:47:31:c2:
09:28:65:c8:3e:81:a5:0d:98:c3:b4:78:c1:f4:f7:
a4:ce:5f:14:36:8d:1e:88:33:54:0c:bc:aa:7e:f8:
41:8f:ff:ad:ea:c0:92:14:55:42:5a:f2:b4:9a:6f:
b7:b6:5e:62:00:df:45:ea:10:56:8c:70:35:44:c9:
a3:81:89:fe:a1:6c:e7:1b:96:89:f4:b7:31:c8:ca:
f1:dd:a7:89:57:1e:fc:5e:09:e7:32:43:b8:16:44:
a1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4E:97:A9:A4:DB:9E:19:05:5A:7B:01:A3:D0:DA:8F:50:44:87:11
X509v3 Authority Key Identifier:
keyid:6E:0C:67:40:40:D2:FD:FA:8B:9E:E2:7B:A8:6C:74:7D:6B:0E:CB:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:98:aa:a0:89:14:08:4d:54:cd:39:70:06:f1:08:7c:13:29:
2c:6b:49:c5:67:6b:f4:a3:0e:44:05:b3:dd:b4:d3:68:72:08:
00:b9:4b:d2:eb:83:d7:cd:c4:f7:ac:d3:f0:8b:a1:6e:8b:2c:
ed:82:f4:36:0b:e1:52:ad:0d:19:dd:9f:38:50:c2:25:dd:7b:
cc:55:a3:67:99:a5:70:7d:64:7e:1c:7a:a9:0a:ac:3f:7a:4f:
79:fd:8b:cf:4c:6e:87:b3:d8:7d:26:0c:f4:09:8f:1a:03:f0:
a4:70:2a:16:57:26:05:39:0c:76:e3:5c:a1:80:01:fe:76:bf:
63:ab:d5:41:06:52:ab:26:bd:e9:df:d4:bb:9d:e0:71:4d:42:
21:d5:35:96:5b:e2:f0:a4:90:7d:54:9c:39:83:30:e4:c2:00:
d3:42:0c:c1:7b:d2:c8:24:eb:e8:b1:82:fd:af:7a:aa:56:bf:
40:83:0d:5c:0d:e2:e4:5a:75:b1:41:31:49:8f:e4:f7:66:5f:
d9:da:1a:8c:d1:9a:61:c6:4d:a5:f5:55:51:6f:9c:8d:7b:2d:
bf:ec:49:ee:96:9a:3e:f3:25:81:80:5f:f3:81:d1:b8:17:91:
ff:20:42:c8:d7:1f:62:e1:85:1b:ec:d8:be:92:20:b0:37:89:
a4:bd:81:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:12 2025 by rpki-client