Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
File: bj5QHSUT5a7UQj1-smXmCCKo540.mft (raw, json)
Hash identifier: MugNRRnzscPSufW7T7ZpqD1PmIz1/a8xsy4/KqwEqhs=
Subject key identifier: 69:26:E7:DE:F4:AA:81:24:D4:CB:B2:1C:45:DD:3A:2F:93:F2:82:AB
Authority key identifier: 6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D
Certificate issuer: /CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
Certificate serial: 0197499F569B137A0B69770D2E588B6859C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
Manifest number: 1268
Signing time: Sat 07 Jun 2025 09:01:08 +0000
Manifest this update: Sat 07 Jun 2025 09:01:08 +0000
Manifest next update: Sun 08 Jun 2025 09:01:08 +0000
Files and hashes: 1: OpzjX_30NcDVzI3ln4sLOuG7_Mo.roa (hash: rW6xgGR1vzj/wyImvrzrumKsIhFoGNfZPJbpPmbWZ1U=)
2: bj5QHSUT5a7UQj1-smXmCCKo540.crl (hash: HVILEm0tRTXFP2wGKqBK5DdhrlQBhQD8olnZjrVqqag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:56:9b:13:7a:0b:69:77:0d:2e:58:8b:68:59:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
Validity
Not Before: Jun 7 09:01:08 2025 GMT
Not After : Jun 8 09:01:08 2025 GMT
Subject: CN=6926e7def4aa8124d4cbb21c45dd3a2f93f282ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:48:d2:5a:cc:1e:fe:91:71:06:94:b8:7c:68:
1f:a8:8e:17:57:0e:d8:92:0c:b6:ad:d8:b5:64:a8:
d1:ce:19:d6:de:f3:77:ee:24:b1:eb:fb:e0:11:f7:
22:b4:44:1e:ac:7b:3b:7d:7f:e5:88:6d:7e:7d:b3:
0f:d3:ce:fb:04:71:cf:82:91:19:33:25:1d:00:ac:
77:3e:b4:40:c6:6e:b8:3d:7c:3f:e2:76:da:cf:73:
4c:c7:fa:53:54:fa:b0:6e:45:60:d1:a9:e7:80:1a:
01:14:39:df:1e:4f:28:a8:5c:01:f7:c3:28:5c:ec:
a5:6a:12:45:54:20:92:79:8c:d8:eb:74:79:4b:b9:
26:5a:9b:ac:02:51:86:ea:21:2a:e5:c8:17:ce:7c:
0d:14:8a:9d:e7:4d:c6:f6:03:3a:d2:e1:28:1c:5d:
dc:68:25:c3:bf:eb:ee:84:13:a1:d0:f1:10:fe:b7:
09:09:c0:20:8d:f5:2d:8b:2a:fd:6a:5b:d5:66:e7:
16:bc:39:28:bb:9d:0b:fb:da:8a:6c:02:22:73:e1:
fa:ba:09:6d:95:34:7f:97:8e:f4:47:6f:ef:5a:4b:
95:d7:2d:8d:7b:7e:62:08:01:bb:9d:ac:1b:2e:9a:
73:af:c5:18:31:7a:d0:14:cd:67:bc:c3:5b:83:9e:
c6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:26:E7:DE:F4:AA:81:24:D4:CB:B2:1C:45:DD:3A:2F:93:F2:82:AB
X509v3 Authority Key Identifier:
keyid:6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f7:01:69:fb:b6:3f:93:ca:1d:00:26:20:70:39:21:ab:0c:
0d:e1:67:46:04:c3:c1:39:7b:ac:96:6b:57:4d:45:28:b8:34:
a3:81:d8:73:a1:71:0c:25:f6:9a:1e:d8:90:10:11:f1:e3:5b:
68:a3:5c:37:95:cb:d6:83:39:00:62:f6:07:48:5a:c3:ce:62:
c5:59:02:24:7d:33:cc:75:0b:f1:ad:52:78:74:d8:97:0b:51:
c0:4d:01:66:25:d4:82:fc:c5:4a:3f:e4:71:c7:fe:15:42:33:
19:eb:c5:a3:f9:9b:5b:d8:40:de:7c:d6:aa:a0:c7:9d:14:78:
f5:9e:94:7e:dd:fa:d1:d1:02:87:c6:a1:3e:17:f2:f6:0a:85:
dc:1e:eb:cd:2a:b3:48:92:24:ee:aa:45:e1:7d:92:06:d7:8c:
52:ac:64:17:6f:1c:3d:07:ed:0a:ea:99:a0:78:da:81:14:59:
82:43:a3:02:a8:52:61:5b:de:3c:c5:a4:0e:cf:69:5c:91:5a:
28:4d:9c:4e:fb:bb:69:48:09:e3:9a:01:06:e2:e0:0d:25:d8:
83:7f:57:b0:94:20:10:90:6e:f4:8f:64:69:28:eb:21:80:ef:
fa:f9:15:41:b1:a7:25:3e:e8:59:c0:fd:da:7a:ee:13:52:28:
15:0d:76:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:44:49 2025 by rpki-client