Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
File: bj5QHSUT5a7UQj1-smXmCCKo540.mft (raw, json)
Hash identifier: McATv3M5AK5WZnwV4A1EkCW6vHXyZi1f24umMwrHIyo=
Subject key identifier: 37:E4:46:E9:B5:0C:4A:FC:AF:07:AC:79:24:59:F3:F9:7E:C2:D1:38
Authority key identifier: 6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D
Certificate issuer: /CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
Certificate serial: 019A34FD8ED419216424B4C4CACFC97D9F7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
Manifest number: 13EB
Signing time: Thu 30 Oct 2025 12:00:23 +0000
Manifest this update: Thu 30 Oct 2025 12:00:23 +0000
Manifest next update: Fri 31 Oct 2025 12:00:23 +0000
Files and hashes: 1: OpzjX_30NcDVzI3ln4sLOuG7_Mo.roa (hash: rW6xgGR1vzj/wyImvrzrumKsIhFoGNfZPJbpPmbWZ1U=)
2: bj5QHSUT5a7UQj1-smXmCCKo540.crl (hash: Vn1ax0svD3QWcXuz5lCJSazoOVXgY1TwAi064FMcXgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 12:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:34:fd:8e:d4:19:21:64:24:b4:c4:ca:cf:c9:7d:9f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
Validity
Not Before: Oct 30 12:00:23 2025 GMT
Not After : Oct 31 12:00:23 2025 GMT
Subject: CN=37e446e9b50c4afcaf07ac792459f3f97ec2d138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2d:28:db:2a:cf:32:be:c9:ad:fa:00:b3:98:
81:34:15:40:f6:35:d0:19:95:33:6d:0e:43:c4:90:
c3:49:1f:63:fd:06:a1:86:de:fb:48:20:b6:7f:ad:
4d:e4:3e:8b:a3:ac:2d:af:b4:fb:85:4b:6c:f4:cb:
00:c9:0c:8a:5a:2c:3d:92:ac:ca:b3:b4:54:00:c2:
7b:7e:81:7c:7f:e2:55:03:ba:3c:a2:b9:55:e8:3a:
99:5a:a4:27:ee:6a:8c:03:4b:0a:a4:0e:7c:7d:c9:
04:7a:50:77:17:e7:68:4e:40:91:cb:18:ff:23:65:
1f:43:ac:fe:71:56:f8:1f:10:da:04:e3:97:b9:7d:
c4:c5:05:1e:b6:b1:55:80:ae:72:35:60:49:25:b2:
15:55:41:91:42:a1:00:ff:53:c7:65:ad:b4:9a:53:
db:83:99:ea:69:3f:da:b1:29:e1:64:e5:fb:f5:b0:
ec:58:c9:92:30:c0:d0:a2:d1:76:39:4a:b9:f4:de:
ea:93:5d:ea:c2:35:8d:04:9d:28:5c:97:01:8a:fb:
ac:6c:3b:47:70:44:a7:0f:86:d6:8a:7e:bd:fa:71:
29:35:0c:94:44:98:9f:bf:29:a8:9a:87:52:7e:bf:
63:d1:43:a1:49:ca:87:fb:77:07:a0:bd:15:c8:5a:
0c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E4:46:E9:B5:0C:4A:FC:AF:07:AC:79:24:59:F3:F9:7E:C2:D1:38
X509v3 Authority Key Identifier:
keyid:6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:06:c1:2c:4b:88:aa:cf:2d:60:01:c3:35:e5:31:28:03:23:
05:80:49:16:cc:b6:5a:65:e8:a2:a4:b9:b3:5b:c1:50:c8:92:
cf:1c:92:df:e5:e7:8d:93:cb:4f:bf:7a:e5:e1:1c:f6:16:30:
67:7d:bf:8e:bc:05:a9:b8:29:36:8c:7f:bb:11:36:01:6e:6c:
27:ec:fa:e2:74:81:e7:df:53:65:49:53:23:0a:84:ee:53:b6:
45:6e:78:03:ac:cf:fd:1c:59:6c:5c:82:70:3c:a4:5a:92:ed:
1d:7c:b3:f9:c9:97:1c:af:8a:a2:9e:6f:b7:5e:45:1f:e1:d3:
43:ea:cb:ca:b8:3d:b5:6e:bd:35:90:3f:a8:d6:6d:85:2b:08:
4a:7a:3c:e2:89:99:a1:4a:e6:3b:5e:5c:a5:f7:f2:0c:1d:af:
01:69:eb:ed:10:49:cf:d2:e8:e0:a9:f4:7b:b5:2a:25:b1:23:
8c:7d:d5:70:ad:9d:8b:47:c7:05:b2:cd:38:05:41:77:b8:a3:
11:e5:a7:ac:80:bd:33:97:d5:2e:62:44:71:57:17:34:35:32:
8a:be:33:46:58:da:54:0b:45:40:29:1f:61:d2:b3:a8:6e:e5:
61:46:68:a1:03:aa:28:ca:6a:2c:9f:90:ef:f1:96:f3:af:e4:
f6:c1:e8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 21:54:48 2025 by rpki-client