Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft
File: bxCL1a3fq_FR2QeePT00Emlmb6c.mft (raw, json)
Hash identifier: Ja81wSSYiwYa48pI0s8Q3FU4zCG1gkiMgDIeDst5lYs=
Subject key identifier: 23:9A:78:F1:35:9F:1B:37:CB:7A:EB:AF:4B:88:36:F5:FF:6E:92:A8
Authority key identifier: 6F:10:8B:D5:AD:DF:AB:F1:51:D9:07:9E:3D:3D:34:12:69:66:6F:A7
Certificate issuer: /CN=6f108bd5addfabf151d9079e3d3d341269666fa7
Certificate serial: 01976960EB90F057E68E9A5639F2EDF99E25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft
Manifest number: 070F
Signing time: Fri 13 Jun 2025 13:00:48 +0000
Manifest this update: Fri 13 Jun 2025 13:00:48 +0000
Manifest next update: Sat 14 Jun 2025 13:00:48 +0000
Files and hashes: 1: SVN8chXXLiylZ6iSzxPfIxpS6Wc.roa (hash: S3c0fzdOzI2koB/V4F0MudazfO5SBRZZKt7wV9ucqpI=)
2: bxCL1a3fq_FR2QeePT00Emlmb6c.crl (hash: DJffgO7ZcQodbyBlJI4IozBOmO86b7tDJfCdO0ZRN64=)
3: h7d4ZTDpPr-K2jwKQKNmXhUJLpc.roa (hash: JWS67wGbGixzjqGud+OGYY8Sh8Xk+/Z+C9GlJ0f+TYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:eb:90:f0:57:e6:8e:9a:56:39:f2:ed:f9:9e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f108bd5addfabf151d9079e3d3d341269666fa7
Validity
Not Before: Jun 13 13:00:48 2025 GMT
Not After : Jun 14 13:00:48 2025 GMT
Subject: CN=239a78f1359f1b37cb7aebaf4b8836f5ff6e92a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:20:20:32:62:84:a4:eb:da:4e:36:9d:aa:78:
c1:d9:1d:8a:df:e1:e1:9e:9e:0d:dd:3d:08:28:e5:
92:4d:77:61:13:a8:4c:a8:0a:a3:ed:d5:b1:97:1e:
bd:3d:80:89:43:b9:c6:12:bf:17:e8:dd:28:97:06:
2d:a1:bc:b7:5e:9a:71:b2:d8:9a:f5:f4:7c:b5:d4:
77:3d:5b:42:3f:ad:f4:1b:d0:85:09:13:14:a8:13:
5a:88:5c:2a:a6:52:32:58:73:2a:2a:56:08:c5:8a:
58:75:aa:2e:89:44:7b:1e:b7:23:66:41:46:c7:b2:
b0:3d:81:59:24:da:ae:08:52:66:b5:09:11:53:52:
3a:2c:d4:ca:40:db:63:74:00:b5:65:80:00:41:09:
3a:3e:e4:0d:4a:b5:df:41:4e:8f:8e:d7:d4:8e:59:
44:24:ca:9e:8b:c7:0f:8c:0a:f9:b6:07:34:d0:ae:
4e:26:5e:0c:fc:11:af:13:8b:36:84:79:7b:d3:1f:
b3:e2:4a:3e:56:a5:c3:0f:17:52:96:9a:b9:33:71:
32:fe:27:d3:e1:bc:59:37:59:6f:40:96:42:9f:a9:
23:4c:4e:10:bb:df:82:46:4f:fc:39:32:3c:76:5d:
57:ca:fc:89:6c:9c:3c:de:f4:80:85:32:77:4e:7d:
e9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9A:78:F1:35:9F:1B:37:CB:7A:EB:AF:4B:88:36:F5:FF:6E:92:A8
X509v3 Authority Key Identifier:
keyid:6F:10:8B:D5:AD:DF:AB:F1:51:D9:07:9E:3D:3D:34:12:69:66:6F:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:e6:26:10:57:b7:b1:d9:77:55:0c:4d:df:3d:fc:c1:bb:1e:
95:1c:22:51:fe:22:6b:7f:47:82:8c:63:16:db:16:08:07:f5:
94:33:58:7e:36:52:e0:50:7f:df:5d:47:51:5a:ab:9f:c5:ed:
42:5d:92:fa:ea:3d:e1:96:52:a8:31:c7:e8:b5:01:6d:f8:69:
0c:db:3d:8a:e8:6a:5c:d8:8a:b1:3c:ca:90:4b:b5:25:d1:82:
a0:1c:14:32:63:3f:bb:f8:7d:62:93:1b:66:b9:98:dd:25:17:
aa:48:0d:0a:6a:98:5f:ec:58:ae:a0:be:ea:6c:d0:f3:da:c7:
62:02:e9:df:f0:a3:ff:e0:ec:75:d9:34:de:dd:1e:dc:17:5b:
35:da:f1:19:ab:ba:38:92:64:b7:8d:f0:9c:b0:f6:eb:ac:2b:
71:7d:0c:53:b7:71:e1:1f:13:4b:e0:b0:2e:63:4a:11:51:54:
91:88:1a:9b:66:79:85:37:44:13:ad:99:af:23:83:f0:b8:b8:
11:49:95:4c:2a:52:5f:9e:ae:99:a1:45:77:df:f5:c3:7e:0a:
96:f0:01:17:55:49:37:37:4f:f7:0a:0f:0f:a8:6d:5e:ef:46:
cb:8d:2f:ea:6c:89:f7:d3:e5:dc:de:e4:b4:49:0f:54:0e:1a:
21:4f:df:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:56:20 2025 by rpki-client