Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft
File: bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft (raw, json)
Hash identifier: YTdsbcdQyderQ+T1yQKZpD5a4g+FuyYLd82nKG3/sGg=
Subject key identifier: 10:D9:AE:4C:4B:85:8C:82:BC:46:76:44:47:70:47:9A:1C:C8:9F:4F
Authority key identifier: 6E:0C:67:40:40:D2:FD:FA:8B:9E:E2:7B:A8:6C:74:7D:6B:0E:CB:67
Certificate issuer: /CN=6e0c674040d2fdfa8b9ee27ba86c747d6b0ecb67
Certificate serial: 0197B77C939BD1D969D7EC9B94A2C032AEB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft
Manifest number: 10B5
Signing time: Sat 28 Jun 2025 17:01:24 +0000
Manifest this update: Sat 28 Jun 2025 17:01:24 +0000
Manifest next update: Sun 29 Jun 2025 17:01:24 +0000
Files and hashes: 1: bgxnQEDS_fqLnuJ7qGx0fWsOy2c.crl (hash: 23YYGYRVlMEiKd1dmHo8lmyCv41Q2OPthPWm38PeAuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:93:9b:d1:d9:69:d7:ec:9b:94:a2:c0:32:ae:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e0c674040d2fdfa8b9ee27ba86c747d6b0ecb67
Validity
Not Before: Jun 28 17:01:24 2025 GMT
Not After : Jun 29 17:01:24 2025 GMT
Subject: CN=10d9ae4c4b858c82bc4676444770479a1cc89f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fa:44:9b:f2:ee:30:96:38:f0:c5:67:c5:af:
71:88:5b:ba:ee:cb:e3:3b:f6:ca:2f:9e:4f:cf:74:
49:33:75:0f:ba:5e:e9:c6:a1:81:27:c3:4b:53:0e:
b2:51:49:ab:ea:31:66:bf:00:e8:7e:06:60:92:a9:
1a:c4:cc:c8:83:71:8b:96:d4:ea:3a:ea:11:ad:85:
dd:0b:c4:e7:3a:64:cb:58:14:2d:e0:65:35:7e:81:
74:67:64:10:8f:60:9f:cc:87:d3:27:65:90:64:bc:
2b:40:1b:2c:18:52:77:c5:11:26:b7:63:1e:87:6f:
ec:0a:64:4a:78:e5:58:af:a9:61:78:d5:1d:7b:ad:
15:89:e5:f1:c7:69:cf:14:a9:20:11:81:c0:6d:44:
b0:68:ad:d5:ff:cc:bf:ea:81:f3:e8:42:2c:4e:8d:
df:e9:be:0c:7c:b1:9b:2d:4b:77:6e:4a:b4:72:fe:
1b:76:ec:b9:54:fc:01:c6:2e:9e:06:ae:98:e3:d6:
5e:61:08:8b:52:fa:92:9b:11:b0:34:87:2d:56:9d:
e1:30:2e:52:6d:50:e6:e8:a4:9a:28:5d:5c:01:10:
1a:cf:df:c1:88:b1:74:ab:8a:d8:32:ab:86:a1:89:
94:11:12:f3:4e:48:0d:11:d7:ff:e0:b2:a0:9d:3b:
5b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D9:AE:4C:4B:85:8C:82:BC:46:76:44:47:70:47:9A:1C:C8:9F:4F
X509v3 Authority Key Identifier:
keyid:6E:0C:67:40:40:D2:FD:FA:8B:9E:E2:7B:A8:6C:74:7D:6B:0E:CB:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ca:c2:5f:ef:f7:db:9a:51:72:79:66:be:47:e7:ab:25:60:
0c:aa:32:b4:60:32:c4:06:f6:37:a5:78:54:d6:bd:40:b8:fa:
35:9f:d2:28:6f:c1:55:99:db:d5:6a:da:88:7a:4b:22:58:93:
5d:6a:e6:62:77:98:57:bc:07:e2:7e:b8:0c:86:1d:4b:d7:1c:
29:c5:52:5b:e7:5a:61:15:b4:e5:26:99:86:0c:28:6c:e5:4f:
32:48:44:d6:1d:ac:a2:dc:66:27:b6:8a:36:7e:d7:22:b0:70:
f5:a3:20:2b:de:c8:74:a4:9f:63:57:4e:e2:b1:6d:70:51:21:
38:2f:14:db:43:67:2c:32:c2:8e:fa:d9:13:b7:fc:e1:23:68:
d4:ce:54:c7:9b:c8:c5:5c:1b:5b:01:e4:fb:7c:1b:4c:e4:e8:
92:1c:3a:ba:f6:ae:43:c1:83:40:44:c0:e3:18:ee:f0:e3:66:
d9:e4:71:ff:44:f9:a5:f9:3a:cf:df:aa:7f:f3:73:27:1e:be:
02:fc:a9:e4:5e:e7:25:1c:50:e3:f5:60:19:5d:bb:89:ad:6a:
a0:fe:95:e0:8e:6d:14:35:d1:27:0f:53:e8:a5:a9:dc:5d:33:
ea:37:6b:fa:3f:37:54:89:7c:7f:15:65:b1:db:21:46:29:b3:
85:82:bd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:55 2025 by rpki-client