Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft
File: bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft (raw, json)
Hash identifier: jW8LJnWCPiH0z0VibNwqWvIpaklXYVeoVP612rMGzgw=
Subject key identifier: 6E:FD:EF:15:FD:6D:AA:C2:40:89:AA:05:74:D4:B0:D9:3D:C4:BC:14
Authority key identifier: 6C:9B:3E:19:FD:1F:43:0F:51:45:D6:DB:92:41:A5:05:7E:D9:6C:B3
Certificate issuer: /CN=6c9b3e19fd1f430f5145d6db9241a5057ed96cb3
Certificate serial: 019922C37C86AAB07B5F8770C3980602AE35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft
Manifest number: 0D03
Signing time: Sun 07 Sep 2025 06:01:00 +0000
Manifest this update: Sun 07 Sep 2025 06:01:00 +0000
Manifest next update: Mon 08 Sep 2025 06:01:00 +0000
Files and hashes: 1: _MMRM5gPmnbq2reAxzdSDLSF69Y.roa (hash: cjqAj6GsWqy7BzMKUAnCFHbn8leWiofU15doogJDNHE=)
2: bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.crl (hash: liArbny5DBqADO/D6xQuuhRQx8BbQMDy8n0od6g+Q70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:7c:86:aa:b0:7b:5f:87:70:c3:98:06:02:ae:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c9b3e19fd1f430f5145d6db9241a5057ed96cb3
Validity
Not Before: Sep 7 06:01:00 2025 GMT
Not After : Sep 8 06:01:00 2025 GMT
Subject: CN=6efdef15fd6daac24089aa0574d4b0d93dc4bc14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e4:ef:ec:e6:e2:1f:ac:6d:fe:34:e8:d3:1f:
e4:3e:de:2c:c5:c3:63:8f:bf:43:3a:31:b0:83:59:
9a:d8:ab:93:ea:91:af:45:b3:90:19:ef:fc:a2:e2:
13:69:86:53:bc:94:50:d4:65:b6:42:79:16:aa:b2:
5a:0b:14:83:93:18:14:3d:21:65:f2:9d:ee:91:63:
87:47:f3:89:99:bd:a2:c9:85:09:74:f0:82:a3:f3:
e5:72:30:01:3b:8c:6d:b4:be:e1:95:a3:c9:76:63:
d5:7f:1d:06:8c:ab:af:58:37:60:12:03:a1:f0:46:
aa:f3:5f:b0:cf:f6:f2:63:07:bb:86:b6:c6:09:57:
a3:10:20:b8:0e:5b:f9:09:36:fe:3e:f5:02:1f:b3:
b0:8e:88:81:e7:91:2f:51:1a:2b:ee:47:e9:2a:d9:
1c:3d:24:39:74:a0:45:d0:67:8f:a3:7a:fe:d7:87:
5c:d9:13:1b:58:95:7b:59:6e:b1:91:dd:95:d3:6f:
1b:9b:cd:39:7e:e8:67:03:a7:e2:45:08:10:81:9a:
0f:b9:91:56:86:03:d9:aa:00:5b:cd:f3:92:9f:f2:
ec:9f:ac:f7:ce:2c:df:5f:85:35:d3:5a:be:1d:a5:
b0:56:1f:85:60:88:56:2b:b7:85:ca:cf:26:42:35:
df:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FD:EF:15:FD:6D:AA:C2:40:89:AA:05:74:D4:B0:D9:3D:C4:BC:14
X509v3 Authority Key Identifier:
keyid:6C:9B:3E:19:FD:1F:43:0F:51:45:D6:DB:92:41:A5:05:7E:D9:6C:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ae:6f:f7:e1:b1:e9:7b:09:87:a4:cb:dc:6b:61:b9:45:6f:
43:90:f2:0b:c1:ac:a2:1e:12:f4:69:9a:ba:3d:63:16:36:17:
67:10:72:02:0c:b2:f2:aa:cb:de:87:61:86:0a:1d:d5:ae:f4:
0b:d7:67:e5:0d:2f:e2:9a:81:a7:21:9f:44:31:24:74:ec:8e:
88:78:6d:ca:a1:0f:d9:28:00:35:ae:e3:7e:ea:ea:64:05:30:
8c:b0:4d:da:89:3c:e2:8f:09:8f:b5:c8:4e:97:af:3c:62:24:
d0:f7:66:3d:39:a7:fe:bf:13:fd:18:62:75:b6:7a:bd:50:66:
46:e9:01:2f:f2:64:ea:28:ed:bc:cb:d1:f3:37:f8:bc:a6:69:
0a:de:af:2b:c4:8a:6b:80:1c:ef:06:99:de:5d:59:4c:b7:bb:
f0:7e:40:f4:34:d6:31:49:16:6f:19:09:05:52:ee:6c:a1:2c:
4b:09:54:d6:fa:76:55:4e:59:4a:f8:48:30:d7:e5:2c:c8:6b:
c0:61:f9:32:b2:48:22:0f:32:2f:e6:9c:a8:ff:9e:0a:c1:5c:
99:7f:0e:a1:7d:4b:3e:11:99:81:14:2c:e8:5d:65:9f:50:09:
ee:cc:4e:35:2a:85:1a:c9:91:1d:c0:1a:b9:0f:e8:8e:cf:a9:
19:39:21:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:42:35 2025 by rpki-client