Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft
File: bxS5AO_2EKQYf2-9ReO4V9CJagA.mft (raw, json)
Hash identifier: 194620ccWbrQJyaAck5GAIJkqqiOuHNmIxKicVEmR+M=
Subject key identifier: 44:1D:52:86:14:3D:B4:B7:B0:A0:B6:CD:80:8C:59:66:90:5C:BB:16
Authority key identifier: 6F:14:B9:00:EF:F6:10:A4:18:7F:6F:BD:45:E3:B8:57:D0:89:6A:00
Certificate issuer: /CN=6f14b900eff610a4187f6fbd45e3b857d0896a00
Certificate serial: 0197C1920BA6E3DE6CA932F652DB38F6ADDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxS5AO_2EKQYf2-9ReO4V9CJagA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft
Manifest number: 118D
Signing time: Mon 30 Jun 2025 16:01:03 +0000
Manifest this update: Mon 30 Jun 2025 16:01:03 +0000
Manifest next update: Tue 01 Jul 2025 16:01:03 +0000
Files and hashes: 1: SypHcS2TCeSzWsz9z2kBBl8vAYI.roa (hash: BOfV4yJp6FkVF9lKaxd4Gzr149eV94r4oonhHz+9iv4=)
2: bxS5AO_2EKQYf2-9ReO4V9CJagA.crl (hash: 6pvLGBFqgZ30iKbZCjsGy779J0ECVxAjxLYV/uNkDKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxS5AO_2EKQYf2-9ReO4V9CJagA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 16:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:92:0b:a6:e3:de:6c:a9:32:f6:52:db:38:f6:ad:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f14b900eff610a4187f6fbd45e3b857d0896a00
Validity
Not Before: Jun 30 16:01:03 2025 GMT
Not After : Jul 1 16:01:03 2025 GMT
Subject: CN=441d5286143db4b7b0a0b6cd808c5966905cbb16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7a:df:d3:4a:de:e3:ec:25:cd:e6:c8:09:38:
06:39:5b:44:e5:34:6f:ce:d8:39:b4:5d:48:cd:96:
d7:fb:ce:22:72:73:36:ea:08:b6:70:cb:dc:e7:3a:
f7:a6:0d:38:15:1d:83:03:1a:48:cf:cd:c0:4d:a2:
a0:95:cb:db:01:d6:bc:42:99:4c:83:18:66:2c:98:
0d:d9:d0:bb:09:d6:03:6b:b1:35:fe:d7:ad:6b:e5:
dc:b9:f8:1b:09:d3:f9:63:55:62:81:43:f2:de:43:
3a:d8:e9:43:88:09:a0:70:cd:5c:71:8b:6f:ab:10:
15:b4:d0:e5:84:5d:11:d5:68:3d:e9:b4:28:81:4b:
d1:60:3b:70:26:86:85:b3:89:58:6a:c0:35:99:60:
99:9a:b3:0a:12:24:d7:9e:24:3d:9b:54:cd:17:ac:
5b:82:72:0f:b5:78:e9:37:bd:1c:b8:55:15:3a:59:
3c:e0:72:7b:24:46:fc:23:2d:7e:d2:01:5e:ab:86:
e1:34:a2:7c:dd:ff:65:84:d9:24:39:d9:ba:51:45:
9e:27:bc:1f:11:1f:35:3f:a6:b0:94:33:f6:00:36:
f5:7d:9a:45:04:55:5b:9a:51:5c:a9:71:bc:ff:bb:
f2:f8:25:44:dc:86:b7:0f:cc:4e:89:7c:c9:10:94:
dd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:1D:52:86:14:3D:B4:B7:B0:A0:B6:CD:80:8C:59:66:90:5C:BB:16
X509v3 Authority Key Identifier:
keyid:6F:14:B9:00:EF:F6:10:A4:18:7F:6F:BD:45:E3:B8:57:D0:89:6A:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxS5AO_2EKQYf2-9ReO4V9CJagA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:79:b3:65:4a:fc:7c:70:b1:ea:22:37:b5:24:df:99:9c:37:
8f:a2:b3:41:e1:ef:29:19:a4:c0:62:2a:c8:44:91:2a:b5:b4:
17:cf:88:c1:20:a7:8d:fe:23:df:20:1c:db:20:52:fc:20:63:
b7:9e:ad:8d:73:38:b9:c8:96:22:73:c3:e0:5d:7c:68:a2:f9:
b1:45:99:d9:d0:73:d3:01:c5:58:f4:38:77:81:ab:22:2a:f0:
09:f2:d2:71:50:b9:09:da:e3:e1:fc:1a:c6:21:8f:cb:41:d0:
d0:4e:0a:1c:99:62:2e:1d:9a:08:77:69:42:e9:e5:2c:02:5c:
30:5f:39:d9:9f:4b:4a:77:7d:11:a6:06:20:30:a0:9e:e7:d4:
81:4b:d0:21:a8:db:00:d9:26:d9:a9:cc:d8:53:cc:57:62:e7:
40:c8:22:62:02:d0:f8:a6:70:57:90:27:ae:1f:eb:07:16:1b:
fc:c3:2e:6c:9c:00:88:78:0a:89:6d:af:46:5b:a4:c5:eb:63:
2d:df:df:7c:c0:63:0b:12:7c:52:ef:84:e1:df:df:85:e0:8c:
92:a9:a9:45:69:aa:96:87:1c:45:61:ba:54:43:43:48:d4:f7:
86:c4:fc:81:ff:53:36:04:26:7d:bc:08:d2:da:d9:19:78:f5:
cc:2c:49:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:18:45 2025 by rpki-client