Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft
File: bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft (raw, json)
Hash identifier: zVAbxyJBj6MES4eqx0qXa5qyVxWlgNCsv0FNV5PL89o=
Subject key identifier: 11:DD:2E:27:5F:74:ED:70:0A:48:60:51:56:99:4F:27:02:C8:C0:B8
Authority key identifier: 6C:95:FD:CA:36:7B:CE:19:E2:F2:53:B7:8F:36:08:FF:34:14:28:C9
Certificate issuer: /CN=6c95fdca367bce19e2f253b78f3608ff341428c9
Certificate serial: 0198A1288894B6B941BF83FC92F7CAE183D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJX9yjZ7zhni8lO3jzYI_zQUKMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft
Manifest number: 01F9
Signing time: Wed 13 Aug 2025 02:00:44 +0000
Manifest this update: Wed 13 Aug 2025 02:00:44 +0000
Manifest next update: Thu 14 Aug 2025 02:00:44 +0000
Files and hashes: 1: Lf1xzTXAc6SiNDJtIVl8iWMf5b4.roa (hash: Mlu5t33KkThbOioHblpilqA5fDGAJvYvW4onNzjvD5s=)
2: bJX9yjZ7zhni8lO3jzYI_zQUKMk.crl (hash: 4oKgwU6ScsAdwgT17a31NU1T5BknfY1wOE5k0iFx/fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bJX9yjZ7zhni8lO3jzYI_zQUKMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:28:88:94:b6:b9:41:bf:83:fc:92:f7:ca:e1:83:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c95fdca367bce19e2f253b78f3608ff341428c9
Validity
Not Before: Aug 13 02:00:44 2025 GMT
Not After : Aug 14 02:00:44 2025 GMT
Subject: CN=11dd2e275f74ed700a48605156994f2702c8c0b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:16:f4:b7:44:4a:e4:88:f5:18:53:3d:24:70:
45:96:c4:31:81:e0:15:3c:e7:1b:09:e4:39:6f:f2:
2e:e1:2e:37:33:d5:88:8f:b3:0d:5a:5d:4d:72:f7:
47:a0:e2:ef:63:c3:42:98:ab:b4:e8:16:23:3f:30:
63:65:4c:61:30:57:ab:ad:8d:f2:0a:cb:14:c6:1e:
34:03:f3:fc:f0:e3:47:0a:96:33:47:33:43:f7:99:
b3:fe:20:bd:6a:09:eb:c6:87:af:fb:5f:bb:a9:2d:
e6:b7:d9:7a:c4:80:5c:c0:50:48:cd:b6:4b:b0:ca:
7b:38:26:71:e5:26:a4:73:34:06:48:97:83:9b:a8:
38:8d:7c:ff:c6:29:a1:8a:a6:40:1d:65:12:55:8f:
7b:8b:40:d2:91:8f:cf:0d:3f:98:36:3e:49:cc:36:
51:53:a9:aa:b9:4a:38:ff:e6:2e:00:b1:39:3b:90:
79:d6:f0:24:98:be:b2:4a:23:f4:e6:6a:fc:d0:48:
00:1b:6a:d2:68:2f:36:fe:d4:78:03:a3:21:f7:e3:
bc:f3:62:1b:72:cc:78:45:3b:c7:d9:8a:61:6b:5e:
11:06:f9:6e:48:0f:a0:7a:5e:6c:ae:ee:57:7b:e5:
9f:5c:a1:df:9c:46:fa:4e:76:ba:c1:24:4e:2f:4f:
ad:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DD:2E:27:5F:74:ED:70:0A:48:60:51:56:99:4F:27:02:C8:C0:B8
X509v3 Authority Key Identifier:
keyid:6C:95:FD:CA:36:7B:CE:19:E2:F2:53:B7:8F:36:08:FF:34:14:28:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJX9yjZ7zhni8lO3jzYI_zQUKMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:04:87:f4:ba:59:5e:3f:8a:4e:19:f7:6e:32:50:a2:d1:9b:
f5:1c:13:42:24:15:f0:34:6d:95:07:41:ae:57:37:da:fa:e0:
20:5a:6a:15:84:b4:fb:f4:e5:0f:51:9f:fe:bf:ed:92:20:8c:
5c:7f:df:77:8c:3d:90:9d:76:16:cf:a5:0c:6a:03:6e:7d:1c:
0e:c3:ee:f1:bd:0d:06:d8:c1:29:2e:18:5d:df:76:9f:07:ea:
2d:a7:8a:ca:38:48:78:44:06:a5:8f:36:57:06:7c:9d:7c:d2:
dd:bd:39:44:51:33:f1:be:56:95:29:52:1d:e9:de:0b:35:9e:
51:e7:03:ea:66:70:3b:b7:03:72:ec:f2:da:53:05:e2:3b:13:
aa:7e:72:d1:32:c7:31:29:0d:33:76:ee:dc:9d:4a:31:b3:8e:
56:f5:61:d2:b9:c8:6f:9c:30:23:5c:90:ee:d6:cd:16:af:64:
da:94:8b:1e:f7:83:95:80:11:40:a0:83:f2:37:5c:ec:b4:ca:
ed:b2:83:9a:36:11:fe:4b:c7:2e:ab:2e:fc:0e:60:07:b0:1b:
bc:0b:da:8c:93:6c:56:f1:7e:96:e3:25:c0:8f:a0:ab:a6:fb:
97:be:01:3e:a4:fc:46:ed:91:5c:ed:45:ba:37:25:e5:74:10:
a4:6e:f5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:29:24 2025 by rpki-client