Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft
File: bxCL1a3fq_FR2QeePT00Emlmb6c.mft (raw, json)
Hash identifier: iT2hBuwmzYHCkHo2q/LOBZiDFbQx5GLvEDX9z1KQM98=
Subject key identifier: 31:8A:BE:61:34:61:47:9E:37:62:17:75:26:11:94:49:17:AB:BA:9D
Authority key identifier: 6F:10:8B:D5:AD:DF:AB:F1:51:D9:07:9E:3D:3D:34:12:69:66:6F:A7
Certificate issuer: /CN=6f108bd5addfabf151d9079e3d3d341269666fa7
Certificate serial: 0197488C6A1E2BC84B217438A1FE9E6FC35A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft
Manifest number: 06FE
Signing time: Sat 07 Jun 2025 04:00:51 +0000
Manifest this update: Sat 07 Jun 2025 04:00:51 +0000
Manifest next update: Sun 08 Jun 2025 04:00:51 +0000
Files and hashes: 1: SVN8chXXLiylZ6iSzxPfIxpS6Wc.roa (hash: S3c0fzdOzI2koB/V4F0MudazfO5SBRZZKt7wV9ucqpI=)
2: bxCL1a3fq_FR2QeePT00Emlmb6c.crl (hash: o823qjkcxgy860KBhM/389EHX8Gw2ARzCZPyqMSL+sQ=)
3: h7d4ZTDpPr-K2jwKQKNmXhUJLpc.roa (hash: JWS67wGbGixzjqGud+OGYY8Sh8Xk+/Z+C9GlJ0f+TYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:6a:1e:2b:c8:4b:21:74:38:a1:fe:9e:6f:c3:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f108bd5addfabf151d9079e3d3d341269666fa7
Validity
Not Before: Jun 7 04:00:51 2025 GMT
Not After : Jun 8 04:00:51 2025 GMT
Subject: CN=318abe613461479e376217752611944917abba9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:17:2e:93:53:eb:ca:5f:60:09:0e:2b:9b:4d:
e0:ce:b7:e7:c7:b2:ce:1d:5f:5d:35:47:d2:87:41:
54:66:5f:00:c2:71:94:16:87:4a:d3:3c:67:73:e1:
f5:33:cb:48:31:72:01:d3:63:b6:a3:d9:b4:4c:be:
99:90:6c:88:69:28:72:7e:9c:a7:5d:2b:99:b5:93:
a6:73:96:47:65:db:b9:18:2c:05:2e:65:e3:c2:e7:
9e:5c:97:79:8a:fb:4b:6e:1a:95:72:9a:39:66:bd:
71:45:02:e2:f4:84:aa:45:8f:99:d6:2a:4e:d0:d0:
8b:c5:87:2a:81:be:77:98:04:19:17:cf:3d:b6:6d:
dc:43:06:70:9a:14:f1:b2:4a:aa:ea:6e:28:98:b7:
01:ef:14:95:83:cc:51:10:c1:14:f0:12:b7:53:62:
6b:42:65:1f:3c:82:82:8a:1b:bf:ad:88:91:9f:e7:
4c:55:9b:a4:df:52:82:7a:d5:d6:1a:72:3b:8c:00:
96:4e:61:d0:fc:08:72:59:a4:de:61:c0:25:3d:46:
90:6f:1f:5f:2b:87:a1:4f:d1:b1:dd:ac:87:e6:17:
37:af:3f:e9:cf:75:70:ea:60:5e:59:4b:aa:f5:d5:
27:42:12:28:77:16:83:96:01:7e:5d:06:f0:18:ad:
fc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8A:BE:61:34:61:47:9E:37:62:17:75:26:11:94:49:17:AB:BA:9D
X509v3 Authority Key Identifier:
keyid:6F:10:8B:D5:AD:DF:AB:F1:51:D9:07:9E:3D:3D:34:12:69:66:6F:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:fc:2a:9a:d7:18:79:8a:cf:ad:b0:1a:24:c9:1b:83:77:60:
57:3a:ad:6f:cf:2c:3a:2d:dc:fb:c4:a9:fe:5f:9e:1b:dc:ae:
6d:8c:01:cb:24:d5:3c:3f:e2:d0:25:6a:df:dc:e5:d9:c3:12:
03:bd:86:df:c3:7d:b5:21:da:0d:cc:18:10:28:bd:5c:58:56:
a4:57:67:a0:ec:d6:2c:d2:9b:5b:ad:f6:d2:71:3b:0c:94:4b:
d4:86:e9:5f:4d:f5:24:f5:f6:db:0e:09:eb:4b:ff:e7:a3:22:
98:4e:11:42:01:a4:06:f4:e9:f2:57:6a:0b:72:92:e5:7d:c3:
f7:17:14:7c:4e:ed:f4:9f:e2:d3:45:49:97:cd:71:e7:eb:83:
d2:0e:e6:84:d5:32:3b:8e:3b:ea:9f:46:28:ad:6b:b9:51:86:
30:b6:4b:59:e1:77:97:9d:fb:62:64:15:95:d6:4e:9f:68:f6:
7d:b9:3d:7d:7a:60:00:c6:d1:4c:6d:ba:58:96:0d:a7:a7:bd:
ab:61:7a:ef:4d:3c:a0:a3:99:b8:45:61:29:2a:05:45:62:7c:
a9:58:c0:62:01:40:f1:be:d3:00:8a:8c:9b:68:e0:3c:17:ee:
87:d7:8e:a5:d2:ec:e2:e7:d7:9d:1b:92:b5:19:4e:a1:b6:86:
39:fc:ca:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:21:22 2025 by rpki-client