Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.mft
File: bX6kOhxHVXh9SR-6VjuIgR3Mxfg.mft (raw, json)
Hash identifier: qwiYTK15m4YaQRnVJi1Z+Dwtw+WvvKAangddJtOlbho=
Subject key identifier: 3B:9B:7E:BA:6E:BF:98:6F:26:C7:B6:0C:F4:5A:DD:FE:A9:92:C3:C9
Authority key identifier: 6D:7E:A4:3A:1C:47:55:78:7D:49:1F:BA:56:3B:88:81:1D:CC:C5:F8
Certificate issuer: /CN=6d7ea43a1c4755787d491fba563b88811dccc5f8
Certificate serial: 019889C53F487CCFAD9A86E6EB9BA4FEE625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.mft
Manifest number: 068F
Signing time: Fri 08 Aug 2025 13:01:01 +0000
Manifest this update: Fri 08 Aug 2025 13:01:01 +0000
Manifest next update: Sat 09 Aug 2025 13:01:01 +0000
Files and hashes: 1: bX6kOhxHVXh9SR-6VjuIgR3Mxfg.crl (hash: XA6rnO8rceAnPF2+In4V/es5f1963cjfRZ0KUtR7ZKs=)
2: e_fKzyMGP2BAukkTPFbz9htGhsU.roa (hash: R8piax2BZXmCIRcmiQxJAzyQx3Kr2idqCRP3833Mldo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:c5:3f:48:7c:cf:ad:9a:86:e6:eb:9b:a4:fe:e6:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7ea43a1c4755787d491fba563b88811dccc5f8
Validity
Not Before: Aug 8 13:01:01 2025 GMT
Not After : Aug 9 13:01:01 2025 GMT
Subject: CN=3b9b7eba6ebf986f26c7b60cf45addfea992c3c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6a:cb:f2:22:0c:31:9c:1a:dd:cb:b1:86:c1:
6f:02:8c:63:26:6c:d9:24:23:1c:e6:e1:1c:01:64:
af:f3:bc:d8:5c:4a:3e:28:9f:99:bc:c5:46:00:97:
73:83:59:6b:69:35:1f:bd:79:e0:2b:dc:6f:98:79:
97:8c:5e:05:83:1c:d1:13:7b:f5:09:5d:c6:7e:40:
3e:65:d0:8b:41:df:19:67:03:cd:74:d6:22:82:df:
b6:dd:c2:68:46:e4:13:54:a8:88:a3:d2:f3:96:73:
43:71:4a:df:ec:43:a8:50:28:31:26:c6:2e:8b:98:
af:08:4e:8f:6c:53:72:22:59:43:ef:ce:63:16:22:
5c:1a:bf:40:32:b0:54:8d:69:70:7c:7b:a5:b7:2a:
fb:64:86:2c:d4:87:e4:da:6f:0e:1a:6c:38:67:71:
3d:46:05:62:a8:56:e9:ca:70:53:e9:62:a4:dd:0a:
a0:04:9b:1d:4f:c3:1d:0a:4a:2e:c1:cc:5e:3d:50:
53:40:dc:d2:d5:26:9e:22:77:fd:00:45:7d:15:b9:
69:0b:8f:e5:3b:b0:ac:8a:ad:c8:de:19:7c:12:c3:
50:4d:98:ae:3b:b4:20:c8:95:f3:a5:ca:4a:31:43:
52:a8:00:d0:a3:0a:e9:07:1c:da:85:71:2b:cb:76:
67:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9B:7E:BA:6E:BF:98:6F:26:C7:B6:0C:F4:5A:DD:FE:A9:92:C3:C9
X509v3 Authority Key Identifier:
keyid:6D:7E:A4:3A:1C:47:55:78:7D:49:1F:BA:56:3B:88:81:1D:CC:C5:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c3:af:f4:04:dd:18:f2:2c:bc:d2:32:78:b4:b7:7f:48:90:
0b:34:aa:07:d0:87:e1:cc:29:90:25:5f:18:66:90:99:e6:ac:
41:3a:bd:a6:ed:4f:40:c5:54:24:29:cd:8e:0f:0d:a8:27:85:
39:3c:e6:04:21:79:7d:7b:ad:22:b6:e3:de:9a:e3:eb:4c:4e:
31:bf:91:56:e4:11:88:55:0e:ce:7d:57:a8:ca:ec:d0:58:21:
73:20:ab:b0:2d:c7:e6:4d:55:5d:89:71:1c:70:4e:6d:47:18:
5f:a0:83:c8:df:c6:cc:e0:e6:d4:97:50:63:ef:4b:4a:9e:c3:
b5:c0:e0:a0:93:5f:76:7e:7f:c4:ed:df:60:50:16:45:17:a5:
fc:ba:46:03:37:ec:db:70:f7:10:50:61:4c:91:15:c9:46:f8:
99:bf:90:60:42:fd:eb:e0:6b:6e:4b:52:31:be:73:99:b4:28:
13:18:0e:a6:85:da:fe:d8:a0:cc:90:39:05:29:f2:db:84:84:
5f:a4:60:63:58:69:c9:74:82:cc:33:fb:fb:fb:c1:55:53:c4:
6f:5b:ef:03:d8:a2:b1:40:49:b7:f3:ad:82:08:82:6e:11:ac:
e5:e6:78:c4:3f:bd:fb:97:19:41:2a:19:0f:ef:95:4d:b0:00:
e9:e2:e3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:32:48 2025 by rpki-client