
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.mft
File: bX6kOhxHVXh9SR-6VjuIgR3Mxfg.mft (raw, json)
Hash identifier: iDHwp1xFvNY6sk6wAXwvfmc1saabvekaYlkLFbyWPok=
Subject key identifier: CA:09:7E:49:24:06:9A:56:FF:D3:44:A5:8B:E1:1F:25:46:91:3D:E9
Authority key identifier: 6D:7E:A4:3A:1C:47:55:78:7D:49:1F:BA:56:3B:88:81:1D:CC:C5:F8
Certificate issuer: /CN=6d7ea43a1c4755787d491fba563b88811dccc5f8
Certificate serial: 019758A43BD135427CE4F53A657095F4DED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.mft
Manifest number: 05F1
Signing time: Tue 10 Jun 2025 07:00:47 +0000
Manifest this update: Tue 10 Jun 2025 07:00:47 +0000
Manifest next update: Wed 11 Jun 2025 07:00:47 +0000
Files and hashes: 1: bX6kOhxHVXh9SR-6VjuIgR3Mxfg.crl (hash: TIpir3cu02SnfGreARZVQzhSPNhnZn8XmFqzVe3Gp2Q=)
2: e_fKzyMGP2BAukkTPFbz9htGhsU.roa (hash: R8piax2BZXmCIRcmiQxJAzyQx3Kr2idqCRP3833Mldo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:a4:3b:d1:35:42:7c:e4:f5:3a:65:70:95:f4:de:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7ea43a1c4755787d491fba563b88811dccc5f8
Validity
Not Before: Jun 10 07:00:47 2025 GMT
Not After : Jun 11 07:00:47 2025 GMT
Subject: CN=ca097e4924069a56ffd344a58be11f2546913de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:94:ec:e7:43:dc:66:23:b7:9d:8c:ca:7f:b0:
e6:b9:d2:06:89:bb:d3:7f:68:b6:23:ad:d8:61:0d:
a2:38:18:db:87:7d:58:bd:36:4d:e6:ca:22:01:6e:
20:36:f5:7f:f3:06:24:58:b9:23:fa:37:14:41:6c:
82:04:d9:2f:fc:7d:de:2c:d4:92:09:cf:54:bd:ef:
5d:37:af:cf:b5:9c:f1:f0:16:ef:c4:b6:f4:67:13:
49:5e:18:89:07:5b:5e:da:05:72:48:cf:70:25:ee:
ea:aa:30:f8:39:10:ee:17:64:4c:ba:d6:7f:98:c4:
b6:ab:1a:ad:f6:a5:1a:61:21:82:79:2d:76:79:2d:
d9:63:d5:ec:4d:26:13:63:4b:db:b8:27:cc:53:1c:
55:0c:6c:5f:ba:10:a2:d8:f3:c1:ff:93:a3:f0:8b:
ca:d7:66:c6:2a:ac:93:b1:69:9b:99:84:45:be:55:
67:5b:53:5f:90:8e:6b:fa:e8:6c:8e:b3:ca:85:f9:
d4:41:e5:b6:16:0f:cd:dd:40:87:65:49:ca:d4:e3:
ff:88:f5:43:ef:9c:44:4b:e4:13:66:57:08:68:21:
1e:83:8f:37:08:35:8a:05:a7:ef:2f:bf:de:8a:7f:
aa:da:c2:b5:f7:4e:6e:86:d6:1e:b6:bd:36:c0:e1:
34:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:09:7E:49:24:06:9A:56:FF:D3:44:A5:8B:E1:1F:25:46:91:3D:E9
X509v3 Authority Key Identifier:
keyid:6D:7E:A4:3A:1C:47:55:78:7D:49:1F:BA:56:3B:88:81:1D:CC:C5:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b3:be:4f:00:f1:2f:49:59:48:72:45:2f:b9:d9:7d:1a:d8:
77:e2:1a:56:ce:65:bc:b1:f5:6b:dd:77:51:a2:1e:02:1b:6b:
2a:fc:05:47:48:b3:79:1f:4d:ff:e9:85:94:f7:d0:08:bf:c3:
81:26:f2:7f:3a:81:2f:9b:2d:74:aa:2a:2a:c3:d4:25:28:e0:
42:04:d2:06:27:f2:45:fb:5f:5d:c5:ee:c4:ae:47:f1:59:7d:
30:4d:ef:46:b7:ff:6d:79:4d:60:b4:73:58:73:44:32:42:52:
e4:b3:53:84:45:d2:76:79:58:d6:17:44:5c:9b:b8:d5:0a:3b:
f2:e6:13:f8:84:fa:14:da:e1:e3:26:54:b1:c6:ba:27:fa:f8:
aa:97:21:d4:21:15:79:96:c9:ff:b7:13:39:ec:44:a0:43:f1:
43:2b:a7:ba:be:bb:11:67:1c:0e:8c:f5:c8:53:5b:db:e0:eb:
ec:c9:c9:22:b1:51:b0:25:4e:6b:c7:1c:45:5c:86:2d:6c:7a:
eb:da:f5:d7:12:8e:a1:dc:fa:66:b0:53:3d:8d:e7:dd:1c:1d:
3c:ba:3c:78:fa:60:c9:b5:24:2d:9d:dc:1e:f9:70:5c:bf:d4:
4b:4c:66:1a:29:2d:68:6e:98:f2:b3:83:07:e0:80:b1:f7:7a:
35:85:9d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:18:52 2025 by rpki-client