Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
File: bcXjzvXaXn_fw2TF1aBALTpnhtw.mft (raw, json)
Hash identifier: kAU9tLKKOkvN37chuS2ehR43s+zKuNY1ju8zAC/pMuE=
Subject key identifier: EF:DB:DF:D1:39:40:B0:40:8E:3C:25:99:8D:9A:91:3A:B9:F8:CD:E4
Authority key identifier: 6D:C5:E3:CE:F5:DA:5E:7F:DF:C3:64:C5:D5:A0:40:2D:3A:67:86:DC
Certificate issuer: /CN=6dc5e3cef5da5e7fdfc364c5d5a0402d3a6786dc
Certificate serial: 01992330D59F0859FFA8C863EBC87BB370FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
Manifest number: 0F0C
Signing time: Sun 07 Sep 2025 08:00:26 +0000
Manifest this update: Sun 07 Sep 2025 08:00:26 +0000
Manifest next update: Mon 08 Sep 2025 08:00:26 +0000
Files and hashes: 1: DoUsi8lBp24xgpF7Cj5k0M8Xf1k.roa (hash: 8DoQ+UjZ0y3DouoJyhRBNdxsuMKM8IPBGox8SgTwz/M=)
2: bcXjzvXaXn_fw2TF1aBALTpnhtw.crl (hash: 7UBuXsi5gO126CYM0KDVE5GTiZBxZLvBWf+oyKsCDEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:d5:9f:08:59:ff:a8:c8:63:eb:c8:7b:b3:70:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dc5e3cef5da5e7fdfc364c5d5a0402d3a6786dc
Validity
Not Before: Sep 7 08:00:26 2025 GMT
Not After : Sep 8 08:00:26 2025 GMT
Subject: CN=efdbdfd13940b0408e3c25998d9a913ab9f8cde4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fe:da:74:5a:c9:54:89:12:3e:34:71:53:fa:
f7:e8:25:86:d2:5d:3c:b6:7a:e2:4e:e3:3c:f8:21:
02:f3:ba:da:83:d2:80:67:98:55:67:3d:b9:f1:a3:
ff:7d:29:4f:56:e3:31:1e:0c:d3:fd:66:09:a6:ff:
54:b7:1a:a5:a0:b7:b1:1a:84:e5:2d:0d:70:16:d0:
c4:fb:dd:4d:67:66:16:e5:fd:d2:c0:e8:00:d6:54:
f2:78:b1:1a:04:1a:c1:b1:77:0a:bd:35:53:35:42:
90:8f:da:8a:7e:f4:9a:8a:02:e5:af:7d:29:be:0e:
dc:04:2f:11:7e:2c:fe:ed:22:ea:f6:ec:7f:89:f1:
9b:05:ac:75:c2:ff:e8:90:b7:f8:1a:7f:4f:c2:cf:
99:1d:42:56:e4:2b:57:47:27:c6:85:ed:38:71:05:
38:f0:88:d9:fd:ea:31:90:96:08:f5:bd:59:0b:d2:
4d:34:dc:69:89:7a:07:63:f7:58:58:0f:cd:57:b5:
f9:2e:5d:e7:ae:c5:f5:76:51:10:e0:8b:f6:3b:8f:
ca:b2:1c:5e:83:88:c8:41:6d:b8:88:4e:c1:58:7e:
39:56:fb:82:65:f3:8a:05:db:ad:37:3a:a7:93:a6:
6b:8a:bd:54:12:07:96:42:be:e8:cc:9e:42:65:33:
69:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:DB:DF:D1:39:40:B0:40:8E:3C:25:99:8D:9A:91:3A:B9:F8:CD:E4
X509v3 Authority Key Identifier:
keyid:6D:C5:E3:CE:F5:DA:5E:7F:DF:C3:64:C5:D5:A0:40:2D:3A:67:86:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:45:0b:dc:a5:8e:07:8f:96:fa:40:26:d1:c2:c5:7f:9e:0c:
e3:87:4a:a1:b8:05:a8:d8:57:2a:83:16:85:8b:e4:98:c5:2a:
b8:e0:e5:30:ff:ec:c7:b7:0c:b9:aa:75:64:d6:71:62:a1:fb:
72:bf:4e:28:64:38:e4:35:8e:d2:12:0f:73:75:41:96:7a:03:
7a:ff:f4:fd:cf:d3:87:39:8d:5e:a3:d2:23:dc:c2:7a:e6:42:
e1:b2:8f:8b:0b:0f:00:f2:5a:2c:50:ce:a5:44:be:60:37:d1:
d4:da:1d:96:c5:ae:3d:cc:91:ef:0f:26:1b:a0:55:25:8a:6f:
b9:c0:02:95:8e:76:29:f7:3d:15:70:8a:f3:33:4c:67:73:50:
b2:48:3f:5d:3b:4b:cb:92:29:49:bb:c6:d8:9d:f4:7b:ac:46:
a9:a4:12:a2:ad:fb:5f:79:a7:c9:d8:1d:e6:76:99:63:cb:14:
f8:7a:4d:da:5a:e0:78:c4:6a:3a:67:94:57:c1:36:d7:d0:40:
7c:9e:49:b2:83:6c:99:ff:ae:a8:3a:d9:e1:31:6a:b8:58:90:
bc:a3:91:74:f2:7a:12:e0:18:71:6e:63:fa:8d:d5:9a:b7:f1:
85:a7:4e:dd:08:6b:2b:c1:3c:4f:f1:66:1f:49:72:68:6c:d5:
35:79:8a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:34:24 2025 by rpki-client