Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft
File: bxS5AO_2EKQYf2-9ReO4V9CJagA.mft (raw, json)
Hash identifier: djSfEGMMiNBnWwoWuCG32mHtyKzXQ7tvwigtEhIl4FI=
Subject key identifier: E5:C6:BE:F2:73:E2:C9:98:B5:A7:2C:12:4B:69:D4:5A:F6:CC:42:44
Authority key identifier: 6F:14:B9:00:EF:F6:10:A4:18:7F:6F:BD:45:E3:B8:57:D0:89:6A:00
Certificate issuer: /CN=6f14b900eff610a4187f6fbd45e3b857d0896a00
Certificate serial: 019842F5083AD647BAD9DA761255B838B4A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxS5AO_2EKQYf2-9ReO4V9CJagA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft
Manifest number: 11D0
Signing time: Fri 25 Jul 2025 19:00:11 +0000
Manifest this update: Fri 25 Jul 2025 19:00:11 +0000
Manifest next update: Sat 26 Jul 2025 19:00:11 +0000
Files and hashes: 1: SypHcS2TCeSzWsz9z2kBBl8vAYI.roa (hash: BOfV4yJp6FkVF9lKaxd4Gzr149eV94r4oonhHz+9iv4=)
2: bxS5AO_2EKQYf2-9ReO4V9CJagA.crl (hash: zsUajiIurZ3U7S1ILGC9OcxY3WVeJOUgiw8oW0vAIGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxS5AO_2EKQYf2-9ReO4V9CJagA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:f5:08:3a:d6:47:ba:d9:da:76:12:55:b8:38:b4:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f14b900eff610a4187f6fbd45e3b857d0896a00
Validity
Not Before: Jul 25 19:00:11 2025 GMT
Not After : Jul 26 19:00:11 2025 GMT
Subject: CN=e5c6bef273e2c998b5a72c124b69d45af6cc4244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:13:76:e9:e9:d8:01:d2:b3:26:5c:7e:9c:60:
17:7f:ab:e9:1f:ec:63:e3:01:a8:b8:11:6d:5e:c8:
4b:bb:84:a3:90:b7:b6:ff:86:3f:9e:83:eb:35:85:
cf:9a:a1:c2:f7:6a:af:3a:b8:f1:cd:da:54:5b:1a:
52:d8:88:2d:04:e9:0c:b6:68:ed:94:c5:30:01:f6:
86:5f:91:64:9c:43:e1:15:71:a6:9c:fa:d6:5f:f1:
a3:8d:bc:79:03:95:da:d0:f6:24:35:87:b0:88:87:
fc:34:aa:55:bd:85:fd:39:a8:0f:24:e5:f5:95:26:
84:5a:7c:8e:f2:11:f5:01:81:50:fb:66:cc:00:c1:
b6:b2:94:eb:4d:b8:f3:24:c8:42:1a:fc:42:5d:39:
df:c0:4c:b1:81:2b:86:69:c6:cb:82:d0:be:fd:b4:
39:2a:4e:67:4c:90:b1:65:0a:58:d4:38:1e:c3:01:
13:10:27:b8:6e:47:d3:91:36:9f:50:c0:2f:89:90:
19:5c:ae:53:1a:aa:8a:a4:e6:3f:d0:12:c2:85:7e:
41:c2:0b:99:86:29:ef:22:8c:a1:1e:eb:d3:87:30:
0b:47:27:89:4a:4c:ec:31:3d:72:d2:c9:35:91:a3:
f6:4f:43:0f:ca:31:4a:de:58:ed:d9:d0:d5:da:15:
ec:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C6:BE:F2:73:E2:C9:98:B5:A7:2C:12:4B:69:D4:5A:F6:CC:42:44
X509v3 Authority Key Identifier:
keyid:6F:14:B9:00:EF:F6:10:A4:18:7F:6F:BD:45:E3:B8:57:D0:89:6A:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxS5AO_2EKQYf2-9ReO4V9CJagA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:68:6f:a6:b0:7e:8d:bd:b3:88:72:68:34:d9:4a:0d:41:a7:
50:19:a6:0d:6e:1a:cc:23:b8:bb:f5:07:e3:6e:e9:74:a3:56:
6d:ca:9a:39:37:11:e2:9d:d6:9c:f4:0c:c3:49:36:10:d3:88:
e4:2a:02:a8:05:a8:a5:47:5a:54:9a:60:41:1a:61:4e:7d:91:
42:70:bb:fb:1e:ad:d8:61:db:fd:e7:e3:18:86:d5:88:8d:48:
83:06:57:7e:be:73:80:6a:3e:ae:ce:b4:72:49:ac:0a:37:8d:
10:b7:e5:a5:61:85:34:ee:63:93:a5:49:9f:7a:8b:e6:eb:3e:
39:e5:d9:64:ce:6f:8e:21:12:69:4f:ac:cf:46:3b:3d:6b:4d:
37:19:b0:a7:fa:1b:83:aa:03:23:64:fa:00:25:d6:bb:d5:8f:
28:a4:79:75:53:c7:35:2a:78:6a:d1:1b:e2:56:31:68:6b:34:
14:6a:b1:0e:64:74:e9:bb:33:56:9e:ed:cb:6e:5d:1d:b0:3d:
e3:f1:da:31:4a:d3:9e:ba:9a:b8:23:b8:e7:47:bb:bc:cd:db:
67:ad:3f:64:e3:87:c0:c1:00:69:b2:16:60:81:d3:fa:95:ea:
5f:0b:64:47:d6:98:8d:c4:1a:81:1b:e5:ae:a2:75:76:9b:d9:
52:44:ea:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhC9Qg61ke62dp2ElW4OLSmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMTRiOTAwZWZmNjEwYTQxODdmNmZiZDQ1ZTNiODU3ZDA4
OTZhMDAwHhcNMjUwNzI1MTkwMDExWhcNMjUwNzI2MTkwMDExWjAzMTEwLwYDVQQD
EyhlNWM2YmVmMjczZTJjOTk4YjVhNzJjMTI0YjY5ZDQ1YWY2Y2M0MjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhN26enYAdKzJlx+nGAXf6vpH+xj
4wGouBFtXshLu4SjkLe2/4Y/noPrNYXPmqHC92qvOrjxzdpUWxpS2IgtBOkMtmjt
lMUwAfaGX5FknEPhFXGmnPrWX/Gjjbx5A5Xa0PYkNYewiIf8NKpVvYX9OagPJOX1
lSaEWnyO8hH1AYFQ+2bMAMG2spTrTbjzJMhCGvxCXTnfwEyxgSuGacbLgtC+/bQ5
Kk5nTJCxZQpY1DgewwETECe4bkfTkTafUMAviZAZXK5TGqqKpOY/0BLChX5BwguZ
hinvIoyhHuvThzALRyeJSkzsMT1y0sk1kaP2T0MPyjFK3ljt2dDV2hXs1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOXGvvJz4smYtacsEktp1Fr2zEJEMB8GA1UdIwQY
MBaAFG8UuQDv9hCkGH9vvUXjuFfQiWoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnhTNUFPXzJFS1FZZjItOVJlTzRWOUNKYWdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS83YjE4MjYtYTZhZi00NzA0LThmODUt
NTE4MWEyZjBkMTk3LzEvYnhTNUFPXzJFS1FZZjItOVJlTzRWOUNKYWdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS83YjE4MjYtYTZhZi00NzA0LThmODUtNTE4MWEyZjBkMTk3
LzEvYnhTNUFPXzJFS1FZZjItOVJlTzRWOUNKYWdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIWhvprB+
jb2ziHJoNNlKDUGnUBmmDW4azCO4u/UH427pdKNWbcqaOTcR4p3WnPQMw0k2ENOI
5CoCqAWopUdaVJpgQRphTn2RQnC7+x6t2GHb/efjGIbViI1IgwZXfr5zgGo+rs60
ckmsCjeNELflpWGFNO5jk6VJn3qL5us+OeXZZM5vjiESaU+sz0Y7PWtNNxmwp/ob
g6oDI2T6ACXWu9WPKKR5dVPHNSp4atEb4lYxaGs0FGqxDmR06bszVp7ty25dHbA9
4/HaMUrTnrqauCO450e7vM3bZ60/ZOOHwMEAabIWYIHT+pXqXwtkR9aYjcQagRvl
rqJ1dpvZUkTq8g==
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:15:41 2025 by rpki-client