Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft
File: btAxXocokhqZ_GNGtM6PELXbhnw.mft (raw, json)
Hash identifier: IKxKUEo++Nsdb3J+8LzhNL0DnIfIPqwDUwrT/PaRb98=
Subject key identifier: 5C:0E:96:97:CF:81:43:7A:F6:44:C4:E2:90:FD:8F:1B:72:8D:3C:A8
Authority key identifier: 6E:D0:31:5E:87:28:92:1A:99:FC:63:46:B4:CE:8F:10:B5:DB:86:7C
Certificate issuer: /CN=6ed0315e8728921a99fc6346b4ce8f10b5db867c
Certificate serial: 0198D66100F128C2DF5D895F7815678A7B11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/btAxXocokhqZ_GNGtM6PELXbhnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft
Manifest number: 0C8A
Signing time: Sat 23 Aug 2025 10:02:18 +0000
Manifest this update: Sat 23 Aug 2025 10:02:18 +0000
Manifest next update: Sun 24 Aug 2025 10:02:18 +0000
Files and hashes: 1: btAxXocokhqZ_GNGtM6PELXbhnw.crl (hash: RGoKd2VNrnC7HUU5F5HfiKjgtapmvEXu8anLTbZtCsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/btAxXocokhqZ_GNGtM6PELXbhnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:00:f1:28:c2:df:5d:89:5f:78:15:67:8a:7b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed0315e8728921a99fc6346b4ce8f10b5db867c
Validity
Not Before: Aug 23 10:02:18 2025 GMT
Not After : Aug 24 10:02:18 2025 GMT
Subject: CN=5c0e9697cf81437af644c4e290fd8f1b728d3ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a1:45:1c:0e:18:54:dc:10:a6:68:f3:8b:06:
30:a8:15:f3:dd:89:79:38:79:e6:ec:99:2a:dc:48:
78:38:6a:a4:4d:45:f2:7a:02:9c:d1:ef:99:4e:a7:
8b:e5:1a:14:82:47:c3:3d:e4:3b:f3:cf:49:ca:29:
f6:a1:f6:46:ce:57:a5:cb:ba:8e:57:a0:83:f3:89:
eb:c7:f9:c7:fd:cc:d6:85:73:2d:c4:d1:a1:92:13:
1b:82:1c:6d:95:69:09:a0:dd:be:d7:23:af:c0:0a:
34:6c:69:7a:d2:52:21:2f:a3:c0:70:58:60:a1:a8:
84:35:e7:22:13:0b:25:96:51:5e:ee:f4:33:33:f6:
bb:3c:df:3c:ba:40:54:3a:ac:a6:d4:8c:73:a5:46:
7e:ab:88:1b:aa:dc:a3:d2:e0:62:2f:83:69:5d:a2:
44:a8:b1:4e:71:b9:99:4c:3f:78:4f:04:2c:32:ff:
20:f2:c4:7e:bf:6e:f1:e7:3d:0f:52:2c:82:42:c0:
ae:c0:71:ba:08:c3:8d:c8:73:aa:58:65:65:b8:5e:
9a:9e:5e:ff:6e:95:73:d6:2f:57:93:b6:e0:f5:e3:
48:b0:6a:fa:bb:3b:0e:8d:56:0f:1a:2b:cb:cb:01:
01:69:54:2b:59:21:17:50:ef:e7:ef:04:90:51:c0:
91:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0E:96:97:CF:81:43:7A:F6:44:C4:E2:90:FD:8F:1B:72:8D:3C:A8
X509v3 Authority Key Identifier:
keyid:6E:D0:31:5E:87:28:92:1A:99:FC:63:46:B4:CE:8F:10:B5:DB:86:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btAxXocokhqZ_GNGtM6PELXbhnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:c0:fa:c8:34:71:de:9c:ba:7f:74:e0:86:8d:35:4d:56:7c:
b0:4b:34:18:cf:2b:30:8d:11:8b:aa:6b:63:e8:af:fc:2e:4a:
b2:87:00:bd:d4:c2:cf:7a:77:55:1e:9e:09:32:17:30:49:a0:
d7:5b:51:18:a9:f4:34:8a:56:31:7a:f5:c5:3c:7d:2b:4a:ca:
da:e4:32:b7:9e:93:96:d2:b6:59:f2:4a:fc:1e:86:56:7b:dc:
7f:a0:dc:e0:d7:67:5d:97:8d:9a:30:37:dd:f5:ae:2d:4b:1b:
bf:45:b2:66:c0:ae:21:38:ae:84:13:53:2b:6c:ec:fc:19:6e:
7f:b4:87:80:90:ae:eb:31:04:0e:8c:79:3d:4f:eb:09:71:5d:
67:1e:ec:54:45:78:af:43:95:f4:3f:e2:40:0a:2c:74:e5:48:
0f:cd:2c:62:05:1a:b6:c4:0f:78:a1:4b:1b:83:b6:f5:a1:a9:
4e:5e:36:25:3b:f4:63:3f:5c:bf:2d:25:46:cc:60:8a:3f:4f:
c1:42:dc:6d:0a:00:a5:50:5d:01:e8:e3:01:a5:5a:cb:9c:91:
82:3f:4b:e2:cc:1b:fd:de:88:4b:61:0a:23:3f:62:a0:80:2f:
c3:eb:10:f9:cb:bd:6f:38:1c:69:06:d8:19:07:e9:df:e1:d8:
9a:c2:ab:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:34:50 2025 by rpki-client