Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft
File: bxS5AO_2EKQYf2-9ReO4V9CJagA.mft (raw, json)
Hash identifier: al/j1CaXtRYINkfbLj8xI/KOrDQagVsAi62O1Xvit0w=
Subject key identifier: 6B:C8:4C:F8:5C:DD:5E:C8:C3:4F:F6:35:D6:1E:8D:8D:4A:50:1F:EC
Authority key identifier: 6F:14:B9:00:EF:F6:10:A4:18:7F:6F:BD:45:E3:B8:57:D0:89:6A:00
Certificate issuer: /CN=6f14b900eff610a4187f6fbd45e3b857d0896a00
Certificate serial: 0198D5BC3E287FD0295F6E43F2C81BF5D9FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxS5AO_2EKQYf2-9ReO4V9CJagA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft
Manifest number: 121C
Signing time: Sat 23 Aug 2025 07:02:20 +0000
Manifest this update: Sat 23 Aug 2025 07:02:20 +0000
Manifest next update: Sun 24 Aug 2025 07:02:20 +0000
Files and hashes: 1: SypHcS2TCeSzWsz9z2kBBl8vAYI.roa (hash: BOfV4yJp6FkVF9lKaxd4Gzr149eV94r4oonhHz+9iv4=)
2: bxS5AO_2EKQYf2-9ReO4V9CJagA.crl (hash: cG6OtbZhC05D85yzPxTRqIzUrNvDRbqoDRkfA73DQ8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxS5AO_2EKQYf2-9ReO4V9CJagA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:3e:28:7f:d0:29:5f:6e:43:f2:c8:1b:f5:d9:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f14b900eff610a4187f6fbd45e3b857d0896a00
Validity
Not Before: Aug 23 07:02:20 2025 GMT
Not After : Aug 24 07:02:20 2025 GMT
Subject: CN=6bc84cf85cdd5ec8c34ff635d61e8d8d4a501fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:34:8e:95:62:c2:39:7d:0c:3f:f5:90:e1:bc:
c1:1b:b4:cc:2c:f7:98:0f:9b:f6:15:a4:e7:ff:cc:
a3:bb:37:0a:e6:05:5f:64:f7:78:ac:64:7d:e3:90:
00:3e:b7:86:7b:75:47:c8:6c:6b:c9:a0:b3:65:b1:
64:be:a6:c3:99:5d:8e:37:18:ef:71:59:f2:75:04:
9a:d6:83:1a:c3:c8:c9:2c:29:c6:0b:1f:00:10:c5:
5f:35:a9:35:cb:cf:6b:fd:9e:db:d6:c6:bb:8c:0d:
ce:5f:43:a9:6f:b0:fd:8e:c9:df:11:22:31:93:eb:
7c:b9:61:ff:d6:23:1b:26:8e:e1:8f:4d:ab:14:ce:
64:f2:f4:a8:d2:6c:a3:b1:c1:8c:21:f2:31:98:d7:
4e:8b:a0:aa:01:49:49:61:dc:f3:4e:43:71:07:8c:
9d:07:c9:7c:fc:34:46:7d:6b:f6:51:3b:41:1a:ac:
ce:37:20:77:5a:b9:0c:ea:7c:f9:dd:4b:0f:4a:02:
15:5e:49:2e:76:f8:1d:42:67:81:e8:fd:dc:85:c8:
26:b8:44:0f:af:58:4d:5b:fe:89:b7:30:6b:28:90:
f3:ee:f7:e8:4b:1d:3b:9c:b1:05:4a:23:b2:a3:98:
0a:21:2e:48:91:70:a0:0b:43:bb:6a:ee:a2:dd:ee:
74:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C8:4C:F8:5C:DD:5E:C8:C3:4F:F6:35:D6:1E:8D:8D:4A:50:1F:EC
X509v3 Authority Key Identifier:
keyid:6F:14:B9:00:EF:F6:10:A4:18:7F:6F:BD:45:E3:B8:57:D0:89:6A:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxS5AO_2EKQYf2-9ReO4V9CJagA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:8c:a0:17:90:7f:e2:6a:7d:22:ab:bd:83:39:91:36:8b:4d:
0a:50:00:80:bc:fa:8b:66:5e:c6:72:c3:b4:25:8a:f5:69:a9:
24:79:20:de:92:44:e9:d0:8a:80:38:2f:5a:b7:37:34:cf:5a:
fc:61:28:47:7c:6a:54:d3:a7:7c:ea:cd:0b:9e:71:44:9c:c0:
5f:81:a2:69:0f:bd:58:2d:25:3c:d8:ac:3a:ae:bf:f7:3c:2a:
8a:d4:c4:30:32:58:fd:bf:4c:a7:97:64:b4:51:fb:5f:11:f4:
57:b1:72:e1:e6:2c:63:ce:94:41:f0:f4:4f:0b:4b:2e:e5:eb:
df:92:f6:52:eb:77:44:d4:4e:18:73:c5:d6:e0:53:cb:3d:00:
7d:ee:8d:6b:70:9a:c4:ad:89:ed:59:68:8d:c8:ce:68:66:be:
cf:1f:b7:11:c3:83:bb:9f:43:23:ee:64:21:ff:a9:95:b7:53:
4a:27:6e:17:48:eb:6e:19:92:df:e3:1b:ef:67:b6:1d:83:e8:
d6:82:90:7d:15:51:06:f5:fe:3f:0c:53:6a:00:49:7e:e2:7d:
85:f0:7a:96:d4:b9:82:19:6b:f0:3f:41:42:f1:5a:6f:dd:13:
bc:b0:71:1b:0e:30:14:79:7b:bf:09:8f:fb:e6:1c:70:ee:f3:
57:17:c0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:53 2025 by rpki-client