Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft
File: bxCL1a3fq_FR2QeePT00Emlmb6c.mft (raw, json)
Hash identifier: iDLaj51WhhbYDLVKnWGis5An8Pwe/FVEkjrZSN6+9hQ=
Subject key identifier: 6C:23:93:8C:F9:70:21:78:18:90:5E:E6:2F:2E:DD:91:3F:1A:7A:B6
Authority key identifier: 6F:10:8B:D5:AD:DF:AB:F1:51:D9:07:9E:3D:3D:34:12:69:66:6F:A7
Certificate issuer: /CN=6f108bd5addfabf151d9079e3d3d341269666fa7
Certificate serial: 0197B6A07F4C983FCE53AB8EABF1D1AF298D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft
Manifest number: 0737
Signing time: Sat 28 Jun 2025 13:01:00 +0000
Manifest this update: Sat 28 Jun 2025 13:01:00 +0000
Manifest next update: Sun 29 Jun 2025 13:01:00 +0000
Files and hashes: 1: SVN8chXXLiylZ6iSzxPfIxpS6Wc.roa (hash: S3c0fzdOzI2koB/V4F0MudazfO5SBRZZKt7wV9ucqpI=)
2: bxCL1a3fq_FR2QeePT00Emlmb6c.crl (hash: /NREThPQQJVMXZb+KbN2pqjIHT2C3EhpASYHpOPMMsA=)
3: h7d4ZTDpPr-K2jwKQKNmXhUJLpc.roa (hash: JWS67wGbGixzjqGud+OGYY8Sh8Xk+/Z+C9GlJ0f+TYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:7f:4c:98:3f:ce:53:ab:8e:ab:f1:d1:af:29:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f108bd5addfabf151d9079e3d3d341269666fa7
Validity
Not Before: Jun 28 13:01:00 2025 GMT
Not After : Jun 29 13:01:00 2025 GMT
Subject: CN=6c23938cf970217818905ee62f2edd913f1a7ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:01:82:92:65:0f:b9:31:03:14:0f:b4:62:0e:
90:59:1f:11:02:c6:3b:9e:d4:9e:1d:3f:9a:0a:75:
11:bf:c0:dc:8d:87:0f:4a:74:55:26:70:42:ee:e0:
cb:9c:1c:08:0a:d4:e9:2c:20:2c:70:e3:b1:85:d0:
35:3d:2a:26:6c:dd:a9:4a:a3:fc:75:5d:be:a9:bb:
0f:b6:90:96:0b:66:22:c1:51:6a:f0:fe:c2:14:b0:
cb:41:58:6a:10:01:a3:63:64:25:58:19:99:60:bc:
cd:89:f8:df:71:5a:85:ff:4d:a9:6d:27:15:94:d0:
d3:c1:d9:6c:13:28:4d:5b:68:8e:86:52:2a:53:9b:
9b:43:e4:82:b9:20:52:7d:39:6f:56:0c:d1:bb:22:
08:32:31:9b:84:81:b9:43:74:9c:a8:82:83:ec:47:
51:94:ab:e6:d6:66:52:b8:a0:d5:ca:d8:41:10:f2:
84:6c:bb:49:95:0b:14:da:f4:38:ca:0e:82:bc:a3:
ee:a2:e9:3b:af:a9:ea:8c:75:c4:04:48:39:8d:b2:
c5:13:31:37:4a:e9:a4:7d:e8:8a:b8:00:69:30:d4:
81:e1:4d:bc:6d:e3:77:b4:1f:34:bb:62:78:38:46:
ea:aa:91:48:13:4a:d2:d1:6e:d1:9b:b1:08:e7:a7:
49:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:23:93:8C:F9:70:21:78:18:90:5E:E6:2F:2E:DD:91:3F:1A:7A:B6
X509v3 Authority Key Identifier:
keyid:6F:10:8B:D5:AD:DF:AB:F1:51:D9:07:9E:3D:3D:34:12:69:66:6F:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:10:fe:d8:d7:6f:47:da:a5:79:d0:3c:55:ab:62:3a:cd:cd:
f6:c2:8b:b8:53:bd:3e:18:55:da:e5:42:fe:ba:fc:0d:47:be:
57:70:d1:29:3a:ab:b9:d4:27:55:ff:54:ff:da:a3:2c:dd:30:
94:38:39:c6:54:b2:96:6e:04:3d:41:ae:c1:56:87:30:53:b0:
e1:f4:26:f0:42:a7:9b:35:03:37:fc:97:be:f2:6e:c0:db:fe:
93:cc:af:98:0a:92:dd:e2:7a:7b:48:e5:d0:a9:f7:5f:16:12:
af:56:82:d6:8c:db:2b:99:62:33:5e:a4:1c:80:ef:61:a6:4c:
7a:ea:d1:e4:22:70:59:13:99:71:bc:e1:d3:86:dc:41:81:a1:
46:eb:f9:c9:64:6d:aa:7c:07:3b:ef:ac:99:9f:42:be:62:44:
ab:09:f1:3d:a0:93:db:8b:6b:15:88:87:6e:9b:4a:2d:5e:0d:
8b:22:9f:bf:bf:96:21:88:f7:9c:ee:02:60:cf:74:3d:14:9c:
83:27:a6:7e:61:f3:00:bd:23:34:8a:d2:1b:53:99:58:a8:fe:
97:f6:7e:86:b8:c2:2a:b7:cc:6e:59:1c:25:aa:2a:f2:b5:77:
cf:4e:eb:dd:cd:61:e4:cd:a9:c2:99:c3:4e:c9:3a:0f:4c:91:
c3:62:0d:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oH9MmD/OU6uOq/HRrymNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMTA4YmQ1YWRkZmFiZjE1MWQ5MDc5ZTNkM2QzNDEyNjk2
NjZmYTcwHhcNMjUwNjI4MTMwMTAwWhcNMjUwNjI5MTMwMTAwWjAzMTEwLwYDVQQD
Eyg2YzIzOTM4Y2Y5NzAyMTc4MTg5MDVlZTYyZjJlZGQ5MTNmMWE3YWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAGCkmUPuTEDFA+0Yg6QWR8RAsY7
ntSeHT+aCnURv8DcjYcPSnRVJnBC7uDLnBwICtTpLCAscOOxhdA1PSombN2pSqP8
dV2+qbsPtpCWC2YiwVFq8P7CFLDLQVhqEAGjY2QlWBmZYLzNifjfcVqF/02pbScV
lNDTwdlsEyhNW2iOhlIqU5ubQ+SCuSBSfTlvVgzRuyIIMjGbhIG5Q3ScqIKD7EdR
lKvm1mZSuKDVythBEPKEbLtJlQsU2vQ4yg6CvKPuouk7r6nqjHXEBEg5jbLFEzE3
SumkfeiKuABpMNSB4U28beN3tB80u2J4OEbqqpFIE0rS0W7Rm7EI56dJqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGwjk4z5cCF4GJBe5i8u3ZE/Gnq2MB8GA1UdIwQY
MBaAFG8Qi9Wt36vxUdkHnj09NBJpZm+nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnhDTDFhM2ZxX0ZSMlFlZVBUMDBFbWxtYjZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9iN2I3ZmEtMTNkMC00ZmZjLTk4Nzgt
MDk3YjRkNmQ4MWU0LzEvYnhDTDFhM2ZxX0ZSMlFlZVBUMDBFbWxtYjZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9iN2I3ZmEtMTNkMC00ZmZjLTk4NzgtMDk3YjRkNmQ4MWU0
LzEvYnhDTDFhM2ZxX0ZSMlFlZVBUMDBFbWxtYjZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwxD+2Ndv
R9qledA8VatiOs3N9sKLuFO9PhhV2uVC/rr8DUe+V3DRKTqrudQnVf9U/9qjLN0w
lDg5xlSylm4EPUGuwVaHMFOw4fQm8EKnmzUDN/yXvvJuwNv+k8yvmAqS3eJ6e0jl
0Kn3XxYSr1aC1ozbK5liM16kHIDvYaZMeurR5CJwWROZcbzh04bcQYGhRuv5yWRt
qnwHO++smZ9CvmJEqwnxPaCT24trFYiHbptKLV4NiyKfv7+WIYj3nO4CYM90PRSc
gyemfmHzAL0jNIrSG1OZWKj+l/Z+hrjCKrfMblkcJaoq8rV3z07r3c1h5M2pwpnD
Tsk6D0yRw2INvA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:22:48 2025 by rpki-client