Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
File: bsJOKsnNUzmWUVkM85Gta78bPiY.mft (raw, json)
Hash identifier: IjtXWV/6NZ3IDGXBo4FvBmUayzJTQPopncGe5tk9QUY=
Subject key identifier: 1F:82:C4:F0:8F:E0:DB:81:14:4B:B6:F5:4E:9E:70:3F:4C:0E:71:05
Authority key identifier: 6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26
Certificate issuer: /CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26
Certificate serial: 01976884D8E0325E953D95151DBACE61501C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
Manifest number: 06F5
Signing time: Fri 13 Jun 2025 09:00:26 +0000
Manifest this update: Fri 13 Jun 2025 09:00:26 +0000
Manifest next update: Sat 14 Jun 2025 09:00:26 +0000
Files and hashes: 1: JztZZ5jdsYiJwH6r3ruJ841yjPA.roa (hash: fWtXOGVQeuynraDkbnyZnR91bHF3bELX/gnfpid099o=)
2: bsJOKsnNUzmWUVkM85Gta78bPiY.crl (hash: gd2Irki7jexWKXGS0WTLyf3bnEhBj2L+TTey2RGVdy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:84:d8:e0:32:5e:95:3d:95:15:1d:ba:ce:61:50:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26
Validity
Not Before: Jun 13 09:00:26 2025 GMT
Not After : Jun 14 09:00:26 2025 GMT
Subject: CN=1f82c4f08fe0db81144bb6f54e9e703f4c0e7105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1f:18:ab:f7:ff:a9:77:d4:ed:f3:fc:a3:38:
fa:77:ca:2d:9e:59:bf:90:74:d6:76:6c:25:e6:70:
22:59:24:ed:a9:a5:72:26:56:9a:42:8e:d6:1d:30:
37:a1:f4:77:6f:ef:05:cc:fb:c7:e7:f9:b1:1c:a4:
41:3b:5b:b9:a4:f0:96:f9:40:04:60:40:cb:fd:3a:
37:f8:b6:0d:19:95:88:08:62:a5:49:5b:31:cf:3f:
99:fd:96:66:92:49:94:ee:46:fc:f1:a4:7d:80:db:
6c:40:e7:4e:33:db:43:94:17:71:9a:54:c7:19:73:
d1:65:d6:4c:d3:2e:7c:ca:48:a2:6e:d5:b5:f1:40:
2b:8a:b6:ea:77:b1:ca:eb:78:0b:8c:02:27:c5:3a:
41:7e:fe:e2:b9:d4:25:cb:c4:52:91:78:e2:f0:bd:
6a:98:5c:cd:05:54:d1:18:17:dd:4e:ec:0f:67:f4:
a9:2a:6f:56:1a:20:8e:f4:e3:aa:f5:ce:6d:85:5d:
cb:19:7f:c0:1a:cf:06:de:be:96:94:98:65:57:a0:
16:bf:ea:0e:ea:1a:e5:e3:25:ea:20:1f:0a:df:47:
63:5d:ba:65:69:33:ba:e4:c9:0b:5f:25:72:78:32:
16:b1:bb:6f:24:05:48:93:0b:c5:71:a1:75:52:99:
b2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:82:C4:F0:8F:E0:DB:81:14:4B:B6:F5:4E:9E:70:3F:4C:0E:71:05
X509v3 Authority Key Identifier:
keyid:6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6d:df:8e:e3:bf:c0:cd:9c:6e:74:4d:79:8e:51:30:c3:bd:
2e:b4:83:11:b8:3b:d9:10:21:7f:8f:d8:cd:b2:e5:71:4a:8f:
09:96:25:ac:af:10:0d:ca:18:9a:ac:c7:24:38:1f:20:74:81:
a8:c1:cf:5f:da:d1:e7:01:64:1c:6b:0c:fd:2e:71:ed:68:95:
22:34:62:8a:30:86:03:22:ef:e3:43:a1:c5:a7:f7:71:9f:db:
58:2b:4e:3a:81:86:f7:78:86:2f:56:58:62:70:20:1c:3d:8c:
6d:47:3e:5e:3d:78:e9:1b:ea:1e:34:8e:81:04:a3:5d:9f:15:
b0:73:2c:fa:4c:1f:99:4c:2e:35:32:e8:a5:3e:aa:8d:0f:73:
24:29:9b:0c:2d:e1:c5:71:03:0c:04:4d:24:47:1f:0d:7d:2e:
63:87:97:a2:5d:e0:a2:9f:c4:7e:8b:19:bb:62:12:1d:12:d3:
6b:e4:29:97:79:10:2c:37:75:87:4b:0a:7c:4d:33:a8:21:b2:
24:59:6f:ef:c5:bc:57:cf:68:32:b3:62:2e:17:e7:f9:68:bd:
1e:a4:a0:7c:6a:31:29:a5:33:bc:cd:e4:a8:53:89:1e:6c:84:
02:4f:6a:67:be:01:84:46:89:9a:52:b8:69:82:65:91:8f:6a:
81:b0:84:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:09:52 2025 by rpki-client