Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
File: bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft (raw, json)
Hash identifier: RiDMRouY5ycdtRUAHjLXwdSv/NR2KjHB2mqGypWynK8=
Subject key identifier: 6B:57:90:13:B3:DC:E3:FF:BD:EB:D3:2D:82:AB:F7:E9:3A:B2:FB:C9
Authority key identifier: 6E:AE:4B:B0:51:39:80:C8:7F:9B:AC:59:29:52:C0:95:77:7A:C1:2E
Certificate issuer: /CN=6eae4bb0513980c87f9bac592952c095777ac12e
Certificate serial: 01974C69BEC572206659734D780BBDC05138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
Manifest number: 01D9
Signing time: Sat 07 Jun 2025 22:01:27 +0000
Manifest this update: Sat 07 Jun 2025 22:01:27 +0000
Manifest next update: Sun 08 Jun 2025 22:01:27 +0000
Files and hashes: 1: C_vZrzZdhy-uejOZ6_GWZTSm_n0.roa (hash: 79ZNhw6Fw3tlIyCfv3zLmQ4ilyJAmRJY2DfEyitGouQ=)
2: bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl (hash: s/CTm/uMuK3EycQ6JgQ7L4w+BRai0JCzt3VS/lifGOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 22:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:be:c5:72:20:66:59:73:4d:78:0b:bd:c0:51:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eae4bb0513980c87f9bac592952c095777ac12e
Validity
Not Before: Jun 7 22:01:27 2025 GMT
Not After : Jun 8 22:01:27 2025 GMT
Subject: CN=6b579013b3dce3ffbdebd32d82abf7e93ab2fbc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fe:06:a6:97:96:aa:e4:4b:03:8e:f0:66:33:
3c:9b:4b:a9:aa:20:e5:21:5a:57:e0:34:c8:6e:2d:
cf:b1:79:cc:01:0b:3e:a4:f2:2a:5e:93:bd:c9:d3:
41:5f:fb:6a:aa:7e:37:f2:90:78:ed:43:39:d7:f3:
46:ce:4a:65:9e:2e:9e:15:98:8b:95:b4:e1:22:5c:
85:9d:94:db:80:7c:f6:fd:92:53:13:64:eb:25:7f:
b1:be:9a:1a:2e:3f:33:7c:aa:b7:1b:6f:76:43:f6:
83:27:8a:30:39:0e:30:18:af:7f:96:ff:90:5b:83:
c7:57:4c:7e:12:ea:da:1d:20:5d:ea:e7:64:6c:de:
85:31:25:53:23:e6:65:2d:95:48:cf:39:a7:dc:69:
9d:9c:61:f1:df:d9:6c:05:87:61:a7:68:6f:b3:89:
e8:0f:8c:e8:0a:1c:32:b6:88:f8:7c:67:14:78:e3:
93:b5:07:5a:0b:d8:d4:df:5d:f0:ae:8e:f8:95:8f:
3e:08:6f:d8:c4:34:ec:0b:56:c9:55:80:f1:5d:d2:
86:11:43:71:e0:6c:8b:7e:be:d3:40:75:1b:41:5b:
41:70:09:78:32:dc:ee:61:78:ff:1b:6d:76:a2:19:
dc:99:ae:0d:c3:91:41:33:c0:5e:b1:ab:97:53:97:
ed:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:57:90:13:B3:DC:E3:FF:BD:EB:D3:2D:82:AB:F7:E9:3A:B2:FB:C9
X509v3 Authority Key Identifier:
keyid:6E:AE:4B:B0:51:39:80:C8:7F:9B:AC:59:29:52:C0:95:77:7A:C1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:b5:74:bd:d3:a6:a6:fb:b7:fb:fd:a7:9e:98:af:82:38:86:
3c:dc:48:09:1c:5f:d1:5e:ee:94:df:7b:ba:47:b7:80:17:19:
fc:e0:91:08:2a:39:99:65:a1:96:ae:b2:51:b6:74:57:11:20:
62:e4:9b:4f:38:93:73:c3:16:f0:cc:8f:24:7a:5d:5c:dc:5a:
78:a4:0b:ad:4e:bd:58:f2:f7:ba:a1:23:65:2b:2f:b0:89:9a:
a2:c1:68:cd:b4:6e:50:54:9e:3a:b1:9e:a6:a8:8e:87:9a:11:
32:6f:5e:76:2c:6c:c0:08:6c:be:8e:a8:2a:c4:ab:d4:61:2a:
9d:e4:1c:f3:6d:e4:ec:d0:4f:c2:6c:e2:0f:0c:1b:c7:f4:13:
f0:9a:0e:e3:7c:e1:e7:5a:d0:25:b0:47:4d:ef:b2:18:d1:13:
54:9f:51:be:0b:02:dd:ef:a3:02:33:96:67:f1:3e:11:47:13:
fc:1c:4d:c9:55:a2:18:ff:d1:5c:5f:41:b7:26:2a:5d:db:2a:
2f:99:f4:3f:df:86:37:f7:f2:7e:70:ec:c7:4f:29:99:b2:e1:
7d:11:40:80:5a:a6:74:08:44:38:ad:7c:32:a4:5a:6e:07:59:
06:9f:82:ff:47:6a:e8:0b:76:af:fd:78:fe:8a:14:47:01:09:
22:f1:c3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:41:54 2025 by rpki-client