Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft
File: bxS5AO_2EKQYf2-9ReO4V9CJagA.mft (raw, json)
Hash identifier: mACmjwguq0csHQUJow07sRz7FzuM3HgYBSQcetWquLw=
Subject key identifier: 31:98:A6:56:97:13:E2:BA:D4:4E:CD:77:B9:44:5C:00:03:07:86:8E
Authority key identifier: 6F:14:B9:00:EF:F6:10:A4:18:7F:6F:BD:45:E3:B8:57:D0:89:6A:00
Certificate issuer: /CN=6f14b900eff610a4187f6fbd45e3b857d0896a00
Certificate serial: 019A011106EB45EF1331BD86C2F32004E999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxS5AO_2EKQYf2-9ReO4V9CJagA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft
Manifest number: 12B7
Signing time: Mon 20 Oct 2025 10:01:24 +0000
Manifest this update: Mon 20 Oct 2025 10:01:24 +0000
Manifest next update: Tue 21 Oct 2025 10:01:24 +0000
Files and hashes: 1: SypHcS2TCeSzWsz9z2kBBl8vAYI.roa (hash: BOfV4yJp6FkVF9lKaxd4Gzr149eV94r4oonhHz+9iv4=)
2: bxS5AO_2EKQYf2-9ReO4V9CJagA.crl (hash: NJObsDmEEbZSIm3SJzuIVSSvvqR3rwGGNNMjihZKTk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxS5AO_2EKQYf2-9ReO4V9CJagA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:11:06:eb:45:ef:13:31:bd:86:c2:f3:20:04:e9:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f14b900eff610a4187f6fbd45e3b857d0896a00
Validity
Not Before: Oct 20 10:01:24 2025 GMT
Not After : Oct 21 10:01:24 2025 GMT
Subject: CN=3198a6569713e2bad44ecd77b9445c000307868e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:56:60:3e:f6:41:1d:5e:68:78:e8:3a:08:74:
f5:77:0e:72:93:bf:c6:75:4e:96:34:f6:79:67:dd:
ee:dc:14:ea:16:a3:71:60:67:02:fc:fc:29:26:61:
37:32:b6:5d:1c:b2:d1:6d:f9:81:a3:74:bd:37:d8:
63:20:3d:3a:80:d0:85:98:99:00:42:c8:41:58:4a:
e8:b8:08:ca:04:ee:e2:45:54:d8:a1:c0:1f:ed:b6:
65:71:ee:c7:4b:f8:04:91:07:0d:d5:38:b1:d2:d8:
32:ff:c7:be:05:2e:19:da:cb:a2:f2:cd:f5:21:03:
ca:ee:a5:8a:ae:4c:d8:c0:d0:db:d9:16:00:d1:ab:
22:1a:fc:32:09:d5:21:1a:74:a9:b8:f4:c5:86:e4:
11:aa:7e:b5:1f:c9:a1:0b:f4:11:7d:c0:0c:e9:38:
44:4f:2c:85:a4:e1:25:8d:85:70:30:e9:66:45:d6:
3e:b9:45:5d:ed:29:5d:ea:71:2d:54:b2:08:c9:9f:
22:a6:2e:42:17:01:aa:87:cb:ac:c5:d4:a4:c5:de:
f2:f7:a5:51:cf:0c:95:8f:01:78:1c:8c:05:96:a9:
d9:2b:a7:c8:db:79:99:b9:2f:fe:b6:00:6a:97:0b:
d9:40:03:dc:12:8f:7d:db:11:e0:59:ae:b4:6f:35:
55:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:98:A6:56:97:13:E2:BA:D4:4E:CD:77:B9:44:5C:00:03:07:86:8E
X509v3 Authority Key Identifier:
keyid:6F:14:B9:00:EF:F6:10:A4:18:7F:6F:BD:45:E3:B8:57:D0:89:6A:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxS5AO_2EKQYf2-9ReO4V9CJagA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:0c:88:df:a5:f9:8d:3f:bb:ee:35:66:94:7a:0f:04:08:f0:
cf:09:16:fb:f6:38:db:9b:6f:70:98:54:f0:eb:42:5c:84:2b:
53:e6:1c:9c:0d:6c:49:21:cc:29:ce:9f:c4:99:54:76:21:ac:
be:96:4c:88:c2:b3:6d:1d:0f:9d:41:6a:79:66:c4:b5:84:5e:
4a:f6:55:f0:d5:d5:87:c9:d2:e8:39:4f:11:49:9a:41:7a:e2:
a6:22:16:25:b9:73:5b:52:da:ec:01:78:28:0b:03:14:ac:04:
7e:e4:a3:8d:f9:d3:b5:ef:75:54:05:9a:15:ea:44:5f:1e:36:
05:42:63:f6:b2:8d:e5:f8:a2:70:45:1f:41:89:25:a1:da:4b:
62:4b:af:59:86:c3:05:53:e0:93:52:cb:17:07:1a:15:18:df:
11:f6:b7:81:e1:8f:bf:fd:dd:51:ad:08:3d:18:0e:dc:fe:6f:
a6:02:cf:27:d8:48:2f:e9:12:17:0d:b0:7c:4c:cf:29:85:6f:
33:62:2e:b3:08:75:21:c4:35:ea:ab:f8:3a:0a:d7:e2:df:5f:
2f:c6:fc:fe:7e:db:7f:b9:b5:3d:51:e7:c6:64:e4:18:87:ba:
72:e5:1c:fc:65:9f:81:46:24:8c:8c:58:77:5f:87:ca:1f:44:
f0:d8:9f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:41:33 2025 by rpki-client