Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
File: bj5QHSUT5a7UQj1-smXmCCKo540.mft (raw, json)
Hash identifier: wylebq3+wlvOgXZiNeD2gc5YLoMOK/ODh01ALQoLhz8=
Subject key identifier: E5:1D:A3:6E:E3:DA:98:48:71:24:17:97:A5:61:08:28:6C:E1:26:DF
Authority key identifier: 6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D
Certificate issuer: /CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
Certificate serial: 0196771ECB920700CA988CE56554FAA63457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
Manifest number: 11FB
Signing time: Sun 27 Apr 2025 12:00:28 +0000
Manifest this update: Sun 27 Apr 2025 12:00:28 +0000
Manifest next update: Mon 28 Apr 2025 12:00:28 +0000
Files and hashes: 1: OpzjX_30NcDVzI3ln4sLOuG7_Mo.roa (hash: rW6xgGR1vzj/wyImvrzrumKsIhFoGNfZPJbpPmbWZ1U=)
2: bj5QHSUT5a7UQj1-smXmCCKo540.crl (hash: y3BSDI3KDhN7G2ouOKgKIcs1N3Cpha5U5lZpijxwyFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:cb:92:07:00:ca:98:8c:e5:65:54:fa:a6:34:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
Validity
Not Before: Apr 27 12:00:28 2025 GMT
Not After : Apr 28 12:00:28 2025 GMT
Subject: CN=e51da36ee3da984871241797a56108286ce126df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:73:fa:7a:49:9e:95:5a:6f:44:1c:fc:0e:79:
f1:33:b1:ea:97:d8:15:eb:a8:53:02:f9:cb:b2:c2:
42:29:f7:52:ac:8d:6f:27:07:71:c7:61:e9:cf:08:
73:7f:9c:ca:cd:7e:68:c3:a4:5f:4e:70:38:be:49:
cd:74:c4:22:d9:61:bd:be:f3:23:16:ba:40:79:e6:
71:9a:fd:5d:78:dd:93:6a:65:7c:56:f1:1b:13:9a:
93:35:13:7a:a2:50:38:3e:a2:07:88:86:9c:97:29:
3f:15:a2:18:27:ce:55:98:a6:bd:63:8a:4d:3a:a7:
fe:00:5e:ba:e0:13:d1:80:16:d5:70:94:62:bc:3e:
b8:68:33:2e:1d:85:09:0e:3e:9f:e8:5c:f9:49:3d:
60:a6:08:1d:bb:19:2d:3d:79:16:23:73:e1:e6:4f:
5a:fd:b6:3b:7a:f9:50:e9:c6:6a:c7:e8:b8:ca:52:
6d:04:e0:28:33:b2:e1:e7:49:54:51:cf:cf:05:71:
1f:39:c9:5e:84:96:2c:7b:f0:4d:6a:f3:ee:85:74:
5f:d9:81:fa:d4:27:07:2e:af:75:69:fd:b2:87:99:
db:5e:2e:fd:67:c2:b8:89:80:fd:d8:7b:5e:90:e0:
06:cb:ab:cf:1d:f3:2d:88:04:0b:d7:c8:c5:69:3c:
cc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:1D:A3:6E:E3:DA:98:48:71:24:17:97:A5:61:08:28:6C:E1:26:DF
X509v3 Authority Key Identifier:
keyid:6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:25:48:76:bc:d3:38:5a:30:87:56:ad:b9:84:97:b8:22:68:
83:e6:2a:1a:d4:93:32:74:da:91:47:83:b3:61:f3:55:e0:48:
ce:bb:1c:69:a9:36:9a:15:95:00:9f:b4:d5:25:2d:ed:00:b2:
bb:f9:1e:c3:3f:e2:a8:ca:46:f5:47:77:2c:b7:45:6e:1f:45:
8a:2c:07:64:b1:a9:e8:78:c3:a5:35:4d:b3:cb:dc:6a:81:d1:
58:c8:0d:1f:ff:9c:be:a4:c8:05:16:4a:85:34:c1:93:c4:0a:
07:e7:9f:dd:e8:b0:54:bb:78:9f:e0:48:8d:94:79:a1:af:b8:
c5:61:1c:fa:93:6b:a4:92:d3:04:4b:f0:4c:0e:40:26:51:18:
54:d8:56:9e:eb:50:6b:8c:e5:fa:45:3a:bb:89:c4:88:3c:06:
51:38:20:3d:42:4c:d8:cb:39:a4:b5:b3:f2:63:2b:ba:7b:ac:
f7:c0:02:5c:84:4d:84:c5:18:b8:eb:40:5e:6c:d3:8e:93:db:
c2:28:48:b4:ea:52:cf:48:cd:95:ba:44:66:97:d4:22:d6:c1:
83:e0:14:29:06:2a:b1:39:03:3c:bd:fc:5c:c6:a6:86:6d:bf:
01:58:8e:20:46:a6:2b:3e:f7:24:25:24:3d:92:cf:ca:89:2e:
b2:c9:9d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:33:42 2025 by rpki-client