
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft
File: bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft (raw, json)
Hash identifier: ZxDcoJKf+CAeGT7V5oUY7SVuMpbYsnCo0eqDbrNryIc=
Subject key identifier: 9E:85:9D:53:2A:56:DB:E5:A5:B8:E4:8F:21:31:63:DF:D5:27:1F:BF
Authority key identifier: 6E:0C:67:40:40:D2:FD:FA:8B:9E:E2:7B:A8:6C:74:7D:6B:0E:CB:67
Certificate issuer: /CN=6e0c674040d2fdfa8b9ee27ba86c747d6b0ecb67
Certificate serial: 0199228C90B608F35EB38CA595726CEB9561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft
Manifest number: 1171
Signing time: Sun 07 Sep 2025 05:01:01 +0000
Manifest this update: Sun 07 Sep 2025 05:01:01 +0000
Manifest next update: Mon 08 Sep 2025 05:01:01 +0000
Files and hashes: 1: bgxnQEDS_fqLnuJ7qGx0fWsOy2c.crl (hash: RALfDcGKoF1h3FH9Xh8HJrH7zvdnI1gFgk2g1cefj2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:90:b6:08:f3:5e:b3:8c:a5:95:72:6c:eb:95:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e0c674040d2fdfa8b9ee27ba86c747d6b0ecb67
Validity
Not Before: Sep 7 05:01:01 2025 GMT
Not After : Sep 8 05:01:01 2025 GMT
Subject: CN=9e859d532a56dbe5a5b8e48f213163dfd5271fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:49:40:2b:0f:c3:04:69:02:ca:9e:5f:11:53:
80:3b:9d:5c:7c:59:f5:e7:05:8a:50:e7:1a:7a:15:
70:f5:ce:2d:65:ba:36:87:b9:4d:8a:b6:8b:65:b0:
37:04:dc:9a:42:91:6b:78:30:a7:7c:12:ad:82:a5:
e6:86:c2:b5:dc:62:82:91:15:a7:46:1f:5f:4c:84:
d8:56:22:97:1a:a7:80:c7:27:c1:0b:79:c0:38:53:
2d:84:ef:22:7c:a0:b5:92:5f:71:ea:b5:9a:4b:32:
2b:4b:48:b8:5c:2b:fe:d9:9e:af:b6:dc:ce:25:2d:
1c:7f:e1:cf:4c:a0:34:63:37:d8:57:80:0d:89:da:
48:93:10:4d:1e:e6:aa:ea:3e:9a:18:56:23:86:28:
9f:ea:cd:e7:2e:7b:d5:16:00:70:38:19:49:ff:6b:
02:39:97:98:10:74:df:26:61:ea:83:6a:2c:de:39:
2a:f2:53:40:8b:eb:97:90:48:ab:c5:f0:2f:92:b0:
6e:09:85:66:7b:19:84:79:b8:b0:ae:8e:94:12:df:
42:d0:2a:16:d8:14:de:f7:e8:fd:e7:a6:31:6b:51:
06:97:7b:a7:14:7e:68:3f:11:28:cd:43:a3:e1:db:
18:54:cf:30:c8:6c:41:6d:4d:4d:8b:87:78:33:8a:
7e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:85:9D:53:2A:56:DB:E5:A5:B8:E4:8F:21:31:63:DF:D5:27:1F:BF
X509v3 Authority Key Identifier:
keyid:6E:0C:67:40:40:D2:FD:FA:8B:9E:E2:7B:A8:6C:74:7D:6B:0E:CB:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:9e:8b:b1:2e:68:c6:03:c2:76:09:b4:8b:87:8b:9d:40:0b:
20:57:9c:8b:6c:82:a3:8c:f6:7c:3d:da:7a:7f:90:fc:98:1c:
ae:70:85:84:1a:7f:01:57:9d:f4:5b:95:f3:be:36:16:d9:56:
3d:d1:29:36:ee:7f:f1:aa:d3:49:01:fa:37:b5:be:6a:bd:3d:
4f:d4:ee:30:0e:33:19:c1:45:df:a2:07:be:72:3a:17:31:67:
1d:47:88:e3:94:dc:73:7a:35:1d:47:3e:2c:24:5d:6b:2c:b3:
05:f6:2b:1e:5b:6d:3e:bf:0b:56:7a:86:1e:68:99:32:e7:fb:
a7:fb:fe:e7:5c:64:46:54:23:18:23:b6:61:79:4f:18:fb:49:
93:64:a9:05:ec:fd:fd:1f:37:b5:f2:9b:19:fb:58:37:f3:91:
d3:e7:76:38:03:2f:b5:e0:ca:25:7b:5c:94:75:7d:76:9f:a6:
63:cf:05:92:20:b4:1b:32:98:86:dd:94:fd:30:ad:79:74:dd:
d3:73:77:1a:7a:d5:72:72:69:af:40:9c:3d:c3:96:1c:95:99:
5b:ca:a7:4e:08:51:31:fc:1e:a7:37:72:c4:1d:21:28:52:93:
94:e6:57:7d:0f:7c:e0:96:c9:2f:9a:4f:64:0d:38:b7:b0:2d:
09:4c:f3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:26:50 2025 by rpki-client