Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
File: bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft (raw, json)
Hash identifier: 3qvv+D+nGPP5IDgrac3XbEZPGPXgGcz7oGiN2UVA0v4=
Subject key identifier: 90:26:56:9C:52:16:60:BC:24:9A:A4:E3:CC:BE:C6:CF:0F:C1:07:4B
Authority key identifier: 6E:AE:4B:B0:51:39:80:C8:7F:9B:AC:59:29:52:C0:95:77:7A:C1:2E
Certificate issuer: /CN=6eae4bb0513980c87f9bac592952c095777ac12e
Certificate serial: 0197C61422EF7D062A8ABD4110E72C195FBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
Manifest number: 0218
Signing time: Tue 01 Jul 2025 13:01:37 +0000
Manifest this update: Tue 01 Jul 2025 13:01:37 +0000
Manifest next update: Wed 02 Jul 2025 13:01:37 +0000
Files and hashes: 1: C_vZrzZdhy-uejOZ6_GWZTSm_n0.roa (hash: 79ZNhw6Fw3tlIyCfv3zLmQ4ilyJAmRJY2DfEyitGouQ=)
2: bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl (hash: /ys0eKDI0LGdZEpWzUfJJ04OZ/YoMpaz6/gGaUAxUaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:14:22:ef:7d:06:2a:8a:bd:41:10:e7:2c:19:5f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eae4bb0513980c87f9bac592952c095777ac12e
Validity
Not Before: Jul 1 13:01:37 2025 GMT
Not After : Jul 2 13:01:37 2025 GMT
Subject: CN=9026569c521660bc249aa4e3ccbec6cf0fc1074b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2e:bf:5c:1b:ac:2f:92:74:bb:cc:34:91:59:
20:4d:10:35:65:03:56:05:4c:06:db:76:79:af:c2:
b1:e4:15:74:6b:95:04:b4:c4:49:7d:6f:ef:e4:cc:
f1:17:29:2b:2b:53:3a:9d:a5:91:6f:92:43:14:e6:
5a:ff:02:a2:f8:79:7e:a3:9a:f0:78:58:7e:db:bb:
a4:96:44:5c:65:ca:0f:85:78:b5:a0:49:78:7b:da:
12:b6:41:77:9f:0a:6f:ee:fc:f3:11:90:e2:a2:b9:
74:67:a2:79:82:e3:e0:8b:de:d3:82:6c:1d:1a:ae:
18:44:d9:05:f5:2a:df:9c:62:21:60:4e:bf:eb:bc:
45:bb:6c:91:aa:55:a6:50:28:de:08:e3:ae:86:10:
f6:cd:40:7d:cd:b9:16:91:7a:39:77:4a:38:1d:82:
24:99:82:c2:74:0b:a8:35:88:4d:ce:9a:ee:7d:af:
a5:b6:b4:a2:a5:47:10:31:83:4f:84:fc:91:91:68:
40:d8:d4:91:c2:ec:8c:d5:46:ec:9b:40:95:bf:b2:
41:92:30:a6:eb:7b:82:3e:b1:e9:33:ea:d6:9b:b3:
fe:c0:59:a7:83:d2:fc:61:d7:8c:81:b2:1c:27:f9:
e6:01:62:43:18:5b:6c:ba:37:ab:30:45:05:8e:7e:
73:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:26:56:9C:52:16:60:BC:24:9A:A4:E3:CC:BE:C6:CF:0F:C1:07:4B
X509v3 Authority Key Identifier:
keyid:6E:AE:4B:B0:51:39:80:C8:7F:9B:AC:59:29:52:C0:95:77:7A:C1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:65:50:2a:df:b9:1d:4e:31:d7:8f:3e:bb:6b:92:ff:35:66:
7c:26:22:10:e6:82:a4:98:a7:bf:63:b7:e4:8e:a6:2e:38:59:
5c:fb:98:21:63:0a:d9:35:d4:a7:ea:0a:04:ac:62:d1:43:ac:
0f:c3:e0:7e:a8:27:96:8d:eb:5b:da:e8:cd:f3:fe:44:4f:1a:
a3:9c:df:e8:8e:4f:e8:50:50:1f:e8:49:20:4a:48:07:a9:05:
bd:b3:f7:94:e4:da:cf:c5:64:c6:f3:72:d6:94:74:ab:e7:5c:
51:68:3e:56:c1:90:43:48:b4:16:5e:6b:b0:8c:b3:0f:c2:98:
e0:7d:0d:57:9a:de:dd:d6:63:6e:18:8a:e0:54:c9:98:7a:3e:
3d:27:82:0b:84:96:77:47:be:f8:32:45:29:2e:6c:8b:b5:ac:
cc:10:08:23:29:0c:5f:41:51:a6:37:cd:af:64:1e:74:91:e1:
fb:41:01:13:90:68:34:8c:a9:10:d0:d9:85:18:8a:33:3e:d1:
09:e8:4d:62:2e:a9:3a:13:d5:5b:39:1b:61:fe:48:2a:d5:29:
fa:5f:fd:9c:a9:89:50:2e:8d:20:7a:09:95:2d:ca:0c:00:83:
42:c4:36:00:34:de:c1:80:56:64:8b:a8:76:8e:40:9b:95:64:
35:a3:f8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:05:27 2025 by rpki-client