Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft
File: bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft (raw, json)
Hash identifier: CkFh/ngcKvhq6mWWxTJEvmArH/r5Om7c6y85mM714MA=
Subject key identifier: 25:15:EE:BC:B7:02:02:4D:30:7D:6A:0F:7A:17:E4:98:E1:55:CC:F8
Authority key identifier: 6E:0C:67:40:40:D2:FD:FA:8B:9E:E2:7B:A8:6C:74:7D:6B:0E:CB:67
Certificate issuer: /CN=6e0c674040d2fdfa8b9ee27ba86c747d6b0ecb67
Certificate serial: 01988FC7253B73EF9BD69F29A649A48ACC8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft
Manifest number: 1125
Signing time: Sat 09 Aug 2025 17:00:49 +0000
Manifest this update: Sat 09 Aug 2025 17:00:49 +0000
Manifest next update: Sun 10 Aug 2025 17:00:49 +0000
Files and hashes: 1: bgxnQEDS_fqLnuJ7qGx0fWsOy2c.crl (hash: BPGRohbkGynILL6yCYLeo3QZ0gpl6fwnAyA6+c2KS8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:c7:25:3b:73:ef:9b:d6:9f:29:a6:49:a4:8a:cc:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e0c674040d2fdfa8b9ee27ba86c747d6b0ecb67
Validity
Not Before: Aug 9 17:00:49 2025 GMT
Not After : Aug 10 17:00:49 2025 GMT
Subject: CN=2515eebcb702024d307d6a0f7a17e498e155ccf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:df:65:4e:e0:84:ea:e2:57:79:f7:98:4a:b2:
92:20:c8:df:1a:8b:97:ca:9c:6a:3b:f9:d8:ec:c6:
3c:b5:43:cd:ce:0f:7a:4b:99:28:0f:55:d3:ac:bb:
1d:af:ca:e6:01:63:52:e4:bc:a7:17:44:fd:f3:5f:
6e:bf:48:f5:7a:1e:2b:92:7a:ec:92:c7:2f:40:5c:
48:36:ce:9e:a0:5b:28:e3:c2:05:e3:60:3b:9e:4a:
76:5e:3c:02:e5:18:a8:aa:3d:a0:73:5b:96:a9:52:
cc:ff:e9:3f:44:8e:5a:fb:a5:0c:d8:75:80:78:1f:
06:35:43:64:db:27:e3:59:8e:86:9e:aa:3d:4a:cc:
a4:61:d0:81:5c:f9:a3:87:89:ce:47:ff:c1:d7:9f:
fe:b6:04:8c:7e:1a:ff:ac:7e:c9:ac:74:eb:af:77:
fe:f5:3d:73:60:2f:d5:ce:43:8f:f0:be:0e:51:da:
c8:5e:c2:ee:ac:a6:3f:a5:28:db:38:f6:f0:40:c4:
47:41:fd:2e:45:0e:aa:76:0c:76:63:96:10:57:04:
e6:74:87:78:b1:d4:95:a5:ff:24:e3:aa:51:aa:0c:
a9:17:c9:0a:57:3c:ed:45:c8:c1:00:22:8f:b9:fd:
0a:c1:9d:d0:9e:26:34:40:fe:3a:6c:2f:88:9a:1f:
5b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:15:EE:BC:B7:02:02:4D:30:7D:6A:0F:7A:17:E4:98:E1:55:CC:F8
X509v3 Authority Key Identifier:
keyid:6E:0C:67:40:40:D2:FD:FA:8B:9E:E2:7B:A8:6C:74:7D:6B:0E:CB:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:4e:73:ed:3d:0f:fd:a9:5a:22:48:01:6d:04:03:4f:5c:96:
4d:34:a1:3f:24:64:b9:8d:d3:51:aa:d5:d3:39:a6:98:0e:f4:
ac:c1:07:ae:69:63:d0:d7:e2:7c:53:c7:7c:7c:78:36:94:95:
11:2a:b2:c1:0d:10:91:36:1e:43:0f:a5:d7:6b:9f:05:8d:25:
ad:52:97:7c:1e:f9:81:c1:8c:57:29:5b:b1:6f:97:b6:08:a4:
68:15:d8:0a:b3:81:6d:f5:23:93:f8:a2:e6:c3:76:a7:74:51:
60:cc:d4:45:67:85:58:df:4b:d0:03:13:ee:87:04:a5:6f:cb:
f5:85:0c:e8:2f:7b:bf:88:c6:bc:19:89:07:d8:ad:c2:fb:ca:
cb:f5:81:55:7a:1a:4f:73:f3:c6:1f:72:a1:bc:d6:e2:89:eb:
30:9e:2b:24:ed:b1:d8:3d:e7:1a:f8:3e:e7:de:c2:65:5a:7f:
99:d4:a6:2e:68:2a:61:11:23:9e:a8:f0:a6:04:ff:da:10:d4:
d9:77:d3:fd:38:36:76:ea:5a:79:2d:ab:3f:60:bd:5d:14:03:
e7:d5:6d:ce:7c:fe:44:0a:54:04:ce:bd:7b:b5:b3:14:94:43:
84:c6:17:01:94:a1:e3:bb:cd:27:55:47:f8:5d:00:66:73:79:
ab:6f:ca:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:22:29 2025 by rpki-client