Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
File: bj5QHSUT5a7UQj1-smXmCCKo540.mft (raw, json)
Hash identifier: hoIYAwMEavGVTRzV9jwwnUUwN32KqWg9kESJ/8Wd1PI=
Subject key identifier: C3:A4:53:04:CE:77:B7:0E:EF:F7:C6:F6:8A:34:0A:2C:14:C1:E9:A1
Authority key identifier: 6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D
Certificate issuer: /CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
Certificate serial: 01987AC043063041B421DF26F4CA8186E8F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
Manifest number: 1306
Signing time: Tue 05 Aug 2025 15:01:17 +0000
Manifest this update: Tue 05 Aug 2025 15:01:17 +0000
Manifest next update: Wed 06 Aug 2025 15:01:17 +0000
Files and hashes: 1: OpzjX_30NcDVzI3ln4sLOuG7_Mo.roa (hash: rW6xgGR1vzj/wyImvrzrumKsIhFoGNfZPJbpPmbWZ1U=)
2: bj5QHSUT5a7UQj1-smXmCCKo540.crl (hash: yRxWXsz1GKHtlB4az4oPgbzlUn/tcaB0d5iJRm8iAXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:c0:43:06:30:41:b4:21:df:26:f4:ca:81:86:e8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
Validity
Not Before: Aug 5 15:01:17 2025 GMT
Not After : Aug 6 15:01:17 2025 GMT
Subject: CN=c3a45304ce77b70eeff7c6f68a340a2c14c1e9a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:49:f6:f4:6b:0e:d2:a3:d1:54:7c:62:19:d0:
02:9f:56:3a:43:66:a4:b6:1c:8e:a1:22:ed:2c:56:
6d:95:79:ea:30:14:93:2d:cc:e9:ca:8b:f0:4f:79:
66:23:cb:04:12:2b:e9:7f:8f:f5:9e:d7:3d:0b:94:
78:22:13:a8:4a:4f:71:6a:02:2a:7d:8d:90:50:80:
7b:ab:37:5a:81:bf:3c:e8:8d:78:51:93:28:66:a3:
55:c9:b1:8f:40:05:79:3f:98:10:78:26:ec:b7:92:
fa:f3:be:30:33:cd:6b:8f:60:20:11:ab:a7:0c:eb:
31:d7:2c:b3:2e:41:e7:98:33:a9:3c:0c:a0:ba:75:
f2:c7:7c:82:f4:57:8f:35:ba:f3:c1:90:c8:d2:ee:
61:2c:22:12:03:70:3e:b1:3b:a3:93:46:9f:b0:21:
5c:62:f3:16:95:ef:6e:30:15:35:78:ca:82:b8:b5:
e1:a5:45:39:1a:6e:62:f9:7c:eb:0e:65:c3:78:e0:
1d:30:a1:fd:16:ea:6a:12:d3:7e:b9:40:59:f3:ae:
57:77:d1:d8:51:c4:4a:5d:f7:30:52:37:7c:04:74:
8d:b7:1c:0a:11:c7:e4:a9:40:20:8e:3f:a8:87:80:
1b:87:32:e6:2b:cb:c8:79:ea:eb:21:13:8b:96:da:
d5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A4:53:04:CE:77:B7:0E:EF:F7:C6:F6:8A:34:0A:2C:14:C1:E9:A1
X509v3 Authority Key Identifier:
keyid:6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:9b:6b:50:06:93:23:9f:97:3e:89:7c:33:c6:33:2d:59:fc:
d7:e3:cb:ca:39:e6:ab:97:c9:07:29:eb:3d:12:44:14:c1:12:
a8:dd:08:67:58:af:38:26:a6:a3:18:aa:6c:eb:b3:b0:c8:94:
d7:62:5b:64:4c:93:56:8d:6e:86:fd:2a:2a:fd:dc:5c:ba:d8:
18:d1:9b:a1:8f:cb:f0:ff:98:ba:ce:80:73:e4:be:99:16:49:
b9:36:3b:92:f4:60:66:26:fd:28:4d:f6:9b:d4:31:ba:46:85:
da:42:4f:e9:44:8d:87:89:23:64:ef:12:97:72:50:5e:e5:1d:
98:a3:d3:0a:fb:c4:40:ad:67:c4:d5:a7:69:05:5b:09:dc:c6:
76:0b:59:c0:4b:9b:43:34:5a:86:24:11:73:9f:dc:58:81:1d:
89:1e:7b:a4:cb:80:13:33:fa:13:8b:96:09:7b:13:37:ac:7a:
22:e5:45:7d:c7:ab:56:d1:d8:c8:0a:26:65:73:e9:7c:dd:26:
00:67:39:f9:f8:61:4f:61:ce:45:a4:aa:05:52:f5:70:e8:52:
30:eb:ef:7a:95:46:c1:56:61:fb:54:46:c9:15:b5:a0:6c:c8:
b0:fd:dc:06:a8:8c:b9:2e:11:0f:c0:89:fe:85:85:49:c8:60:
8d:a2:c4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:23:18 2025 by rpki-client