Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
File: bsJOKsnNUzmWUVkM85Gta78bPiY.mft (raw, json)
Hash identifier: w+e+lHjixS3opR8N6A2FwcSsZb0zfVtQWQJD7yALeg8=
Subject key identifier: 44:81:EB:0B:B8:B5:CB:EC:F0:89:69:30:95:FC:AB:6D:E2:27:B6:C2
Authority key identifier: 6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26
Certificate issuer: /CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26
Certificate serial: 019874F4E833B8CF475CB80A4BDA6D4E9C6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
Manifest number: 0780
Signing time: Mon 04 Aug 2025 12:01:03 +0000
Manifest this update: Mon 04 Aug 2025 12:01:03 +0000
Manifest next update: Tue 05 Aug 2025 12:01:03 +0000
Files and hashes: 1: JztZZ5jdsYiJwH6r3ruJ841yjPA.roa (hash: fWtXOGVQeuynraDkbnyZnR91bHF3bELX/gnfpid099o=)
2: bsJOKsnNUzmWUVkM85Gta78bPiY.crl (hash: 8QtcQ8M2ruA2FYWvjz0XXBGJnlPNu/Ek6+uh1uC+Yj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:e8:33:b8:cf:47:5c:b8:0a:4b:da:6d:4e:9c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26
Validity
Not Before: Aug 4 12:01:03 2025 GMT
Not After : Aug 5 12:01:03 2025 GMT
Subject: CN=4481eb0bb8b5cbecf089693095fcab6de227b6c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f5:86:7d:e2:27:eb:e9:a0:5b:97:15:b0:d6:
d6:b4:09:f0:42:9f:87:d5:22:d6:33:c1:7c:1c:1e:
5d:af:2b:90:5e:d2:e0:61:0b:80:d4:45:e7:e7:5d:
cf:e2:06:14:99:7e:ec:32:2f:52:98:f5:a3:35:9c:
ad:4d:0f:82:e5:bf:f1:75:31:2a:66:e6:19:b5:14:
d7:cb:87:6a:a9:96:d6:19:22:0a:38:09:85:99:f8:
a0:3f:2e:05:59:b8:ca:e2:ba:e2:47:47:07:e4:e7:
32:e3:e6:51:6f:4d:fa:aa:a3:49:db:e6:9e:51:c7:
28:a7:2f:44:97:08:ab:c2:bc:39:0d:23:7b:57:2d:
78:f0:ff:4a:5d:7d:85:0f:b5:c4:10:a4:fa:5b:6c:
7d:f2:8e:4d:3c:ee:3f:4f:c8:2e:86:d6:b1:dc:eb:
e5:6e:92:4b:da:64:89:7c:4a:fe:bc:90:1f:ff:ff:
38:9d:e3:de:57:59:c5:03:4f:76:23:de:cc:ac:27:
57:da:25:a2:e0:42:b6:5c:20:fe:29:4d:19:ac:80:
d0:48:be:be:33:9f:a8:60:5e:a0:5e:83:85:be:7a:
b4:1d:fd:9e:ca:89:de:ab:2f:15:fd:66:0f:11:4d:
f8:bf:3e:4c:76:ea:9f:b7:85:45:c8:96:77:b0:79:
7e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:81:EB:0B:B8:B5:CB:EC:F0:89:69:30:95:FC:AB:6D:E2:27:B6:C2
X509v3 Authority Key Identifier:
keyid:6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:aa:8a:13:69:4c:97:74:ce:aa:67:e6:7e:0a:d8:16:05:a7:
8d:1e:33:79:b0:3e:90:8d:7e:90:c4:a5:6d:39:d4:35:6a:85:
8f:5c:c4:79:1a:cb:4c:ae:77:ee:80:93:8b:53:e4:9e:86:71:
de:41:46:db:86:b2:a6:73:6b:ea:d0:dc:9d:d0:c0:3d:24:47:
3f:41:7b:c7:b1:2c:66:32:0e:f0:dd:85:9e:24:ca:c3:45:78:
e8:72:94:f1:2f:f1:1f:ff:8a:40:1b:3b:d5:fc:9b:a0:e2:ee:
2b:77:65:34:76:6d:2a:a0:9c:52:fa:df:bc:94:05:c8:3c:b2:
8f:9b:91:12:7c:e9:83:16:2d:d4:d2:f0:13:b2:61:a3:93:e7:
40:a1:85:00:28:7c:87:a2:21:4a:d9:f2:03:ab:59:75:9e:a6:
8d:0c:12:a0:3b:2c:15:6c:97:c5:ab:3e:4a:32:10:d6:0e:81:
53:27:ca:b7:0c:82:18:08:15:3a:54:2b:58:c0:aa:c2:be:93:
8f:20:ab:68:47:b9:39:38:dc:7f:4c:90:1c:e9:a1:07:ad:e9:
1d:00:51:2c:74:0a:0a:3e:ef:d6:4f:92:f8:b8:f2:ff:df:93:
0c:8f:17:1b:d3:22:4e:ae:bd:cd:47:a0:c4:2f:57:9e:44:2c:
41:4b:ca:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:38:12 2025 by rpki-client