Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
File: bjehCkoCc_QfrPdEDVnzmtXq9ks.mft (raw, json)
Hash identifier: QYrakP5vYYOO4qrA75hJZrO3of0yERynuAKiQ84VWWA=
Subject key identifier: 3F:96:7B:EA:1D:9A:9A:51:0F:20:CB:0C:86:74:39:F2:D5:D9:24:6F
Authority key identifier: 6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B
Certificate issuer: /CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b
Certificate serial: 01983D97ABECC7706F4A72A5CEED665F8325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
Manifest number: 07A9
Signing time: Thu 24 Jul 2025 18:00:06 +0000
Manifest this update: Thu 24 Jul 2025 18:00:06 +0000
Manifest next update: Fri 25 Jul 2025 18:00:06 +0000
Files and hashes: 1: 2WHBj7nv7xMvbv08rHniyjR0Fos.roa (hash: NBxIqPQUMGuLMFXfKzH7d1UwTfg7bcWtx2M9b2UcFWM=)
2: bjehCkoCc_QfrPdEDVnzmtXq9ks.crl (hash: 5C/RyysVXkh+lu94IHOsGSPxqHLPzaVbX0HF1jv8yX8=)
3: cq_1j-d1kfo1p9Be3sTMytcMD24.roa (hash: JNpsnNRxrePb5e9Un324eWpFZYp8SbD0XvG6AqlNJIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:97:ab:ec:c7:70:6f:4a:72:a5:ce:ed:66:5f:83:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b
Validity
Not Before: Jul 24 18:00:06 2025 GMT
Not After : Jul 25 18:00:06 2025 GMT
Subject: CN=3f967bea1d9a9a510f20cb0c867439f2d5d9246f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a0:80:de:7b:3e:28:bf:32:2a:98:0c:17:a4:
74:53:08:a3:05:d3:7b:25:de:17:c3:ec:d7:8a:33:
d5:70:9d:26:ac:70:d5:ff:55:b2:af:04:af:e2:48:
a5:3a:16:ab:d6:90:af:d4:1f:12:ad:f5:c8:58:0c:
27:cd:c2:2b:45:38:80:b1:a0:05:03:b4:2f:51:0f:
63:e0:73:03:29:a1:74:0a:d8:f5:ad:17:2f:6b:87:
d9:6d:d5:47:ca:f6:d8:27:d6:bd:0c:ca:ba:e4:37:
ed:48:2a:d7:4c:fd:66:cd:bb:89:77:f3:43:fc:b1:
5d:86:6b:0a:bd:49:67:05:e8:39:1d:99:22:78:cb:
5f:c5:bb:b9:67:e9:1d:98:58:d9:3c:00:11:b8:0e:
47:fe:94:40:c0:e8:86:12:51:11:20:08:3f:e1:43:
84:19:43:75:4b:75:26:db:e4:c1:5b:7f:9d:34:ae:
08:4a:6c:e9:6c:13:b5:f2:b7:26:6e:20:2b:72:d2:
ce:3d:49:c5:e4:2b:3f:ab:7b:51:22:72:cb:01:5e:
8c:18:59:5c:fa:3d:8a:c0:69:d5:a3:24:63:3c:f8:
0b:9c:f8:2e:89:82:04:6d:7c:a2:46:ad:5a:fd:6d:
f9:e6:50:f8:97:83:49:f8:8a:57:11:d6:03:07:5b:
bc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:96:7B:EA:1D:9A:9A:51:0F:20:CB:0C:86:74:39:F2:D5:D9:24:6F
X509v3 Authority Key Identifier:
keyid:6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f9:c7:fe:84:0c:02:00:29:34:ac:a2:75:76:fa:7e:17:29:
2a:e0:49:e1:43:3b:ac:72:8d:b4:9c:4f:ca:4e:5f:8b:2c:29:
2e:2b:9a:eb:01:49:79:c6:80:7d:5d:bb:4f:0d:dc:84:ef:d0:
0c:bf:f5:50:3b:7a:bf:27:77:a0:fb:7a:ea:7e:6c:56:66:71:
b7:af:fe:bf:41:1a:09:b9:42:d2:91:88:54:20:cc:76:c5:ed:
7a:48:bb:cf:08:66:52:e3:f7:3d:6e:c1:59:64:4f:76:c0:dc:
50:9d:6c:15:c2:f4:de:14:42:65:df:02:75:e4:63:77:c6:de:
3d:de:d1:17:eb:9c:83:4c:63:2c:32:08:57:bb:0f:6d:51:48:
5c:73:a4:78:5d:7d:7a:5a:e2:2a:ec:ce:19:f1:f9:91:73:c9:
d9:b8:94:63:b9:6d:d2:82:31:d7:03:05:4c:71:79:e5:a3:ae:
0b:31:41:df:67:9b:b1:f6:32:76:04:54:d4:d0:65:34:f0:45:
b8:9f:68:f9:61:4f:21:d8:18:9f:56:ae:c2:43:9c:cb:7e:7d:
3b:22:1b:2f:ad:18:64:1d:9d:99:57:bd:09:bf:6c:22:f9:2c:
c4:94:01:25:29:2b:00:d6:13:25:97:35:60:83:5a:fc:67:61:
68:ea:0d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:30:05 2025 by rpki-client