Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
File: bj5QHSUT5a7UQj1-smXmCCKo540.mft (raw, json)
Hash identifier: Gj4nPulK1Ww6qCwmwHw4IJ+h3Y+dzh1+Zs2dxEjKkqU=
Subject key identifier: A2:E5:CC:9D:B0:5A:6B:F0:B0:C1:EB:34:4C:DA:C6:CB:B7:7F:CE:1B
Authority key identifier: 6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D
Certificate issuer: /CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
Certificate serial: 01993FBAA1D2362FF588C8E7BE21BEE7F3ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
Manifest number: 136C
Signing time: Fri 12 Sep 2025 21:00:19 +0000
Manifest this update: Fri 12 Sep 2025 21:00:19 +0000
Manifest next update: Sat 13 Sep 2025 21:00:19 +0000
Files and hashes: 1: OpzjX_30NcDVzI3ln4sLOuG7_Mo.roa (hash: rW6xgGR1vzj/wyImvrzrumKsIhFoGNfZPJbpPmbWZ1U=)
2: bj5QHSUT5a7UQj1-smXmCCKo540.crl (hash: UCf5VBVRGHeSTLklFVvqRO/N00b/PLhQ7JU7nSyOtlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Sep 2025 21:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3f:ba:a1:d2:36:2f:f5:88:c8:e7:be:21:be:e7:f3:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
Validity
Not Before: Sep 12 21:00:19 2025 GMT
Not After : Sep 13 21:00:19 2025 GMT
Subject: CN=a2e5cc9db05a6bf0b0c1eb344cdac6cbb77fce1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9a:fd:27:38:3b:41:65:fc:6e:df:33:66:91:
26:03:ad:7a:3f:48:49:8f:f1:58:5b:e2:7c:fa:c7:
91:af:84:25:54:22:08:75:c5:93:c7:87:ed:64:db:
af:aa:04:7d:8d:9c:12:47:2e:e7:35:3b:66:09:12:
58:39:a5:c6:a9:8a:c3:c4:e6:62:05:b3:d7:3d:2c:
93:f0:41:cb:93:92:1e:f5:e3:47:73:7d:01:4c:fe:
66:52:4b:76:db:ee:35:3d:5c:36:05:d5:e9:8a:dd:
68:03:f9:b1:06:5f:39:95:a8:4c:59:9f:40:6f:1b:
24:e6:a0:18:38:52:99:b0:5e:3a:2d:b2:82:b9:d5:
f5:f9:17:0f:a4:b9:6c:23:df:bf:86:4f:63:d5:e5:
e5:ce:f1:a4:09:f2:9a:32:39:b9:30:fc:c2:39:44:
ec:66:3e:99:81:42:c8:5e:8b:f9:95:cd:68:8c:8a:
15:f9:2c:05:a5:be:85:ca:1c:05:81:a5:6f:7e:9c:
e3:b3:ed:ee:5a:d7:45:00:ff:ac:e8:a3:94:2e:f5:
8c:65:c8:79:be:1c:5a:67:15:93:24:2a:26:05:e1:
6b:fd:33:e0:e4:54:c9:0a:68:f2:3e:c7:41:5c:fc:
08:60:6a:15:62:78:fc:76:14:6f:e6:d9:60:c9:22:
59:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E5:CC:9D:B0:5A:6B:F0:B0:C1:EB:34:4C:DA:C6:CB:B7:7F:CE:1B
X509v3 Authority Key Identifier:
keyid:6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:41:5b:c7:2a:32:29:75:cc:f8:b2:73:e8:50:81:f7:fd:00:
19:8a:9d:76:a9:74:fd:04:4a:40:6c:93:b6:46:37:26:45:4e:
e8:47:a6:a2:74:53:bb:f7:e6:49:a2:7a:3f:63:4e:34:86:71:
2f:95:42:b1:29:30:29:bd:bc:c1:4e:15:db:c5:d3:48:7d:c0:
56:4a:f1:1e:09:0e:60:4f:24:e7:6f:b6:e0:09:29:fb:f9:e6:
f9:16:b3:5d:b0:09:7f:3c:a8:11:20:a2:12:5c:27:66:2e:af:
71:2d:5e:da:be:68:cc:2f:60:59:70:9e:c3:fc:bb:43:73:c1:
59:e4:6e:e3:b7:69:3f:94:a2:92:fc:0f:f2:dd:f9:08:84:fa:
fc:7a:3b:34:9d:9b:a8:4b:e2:a4:64:2d:e2:dc:b1:80:80:ab:
9a:95:63:8d:eb:5f:95:db:e3:9a:92:5f:88:b6:af:75:1e:d5:
bc:04:de:6c:6a:d7:2f:ad:65:7c:cf:45:5c:bc:38:18:c2:bb:
a2:5f:2a:4e:73:53:1f:c0:05:fc:85:47:b4:9b:97:c1:1e:db:
00:0d:b7:cb:7a:31:22:c6:6d:a3:09:a2:a5:51:1d:21:ac:ca:
b4:fb:93:38:6d:f7:cb:59:7c:6a:67:91:de:09:e3:81:b2:6a:
ca:5f:13:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 13 06:48:29 2025 by rpki-client