Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.mft
File: bJSdK9ZO4X711H-WPj1depgrEq8.mft (raw, json)
Hash identifier: Tk9K4vwZpemY1Wsr+QjtM0WXs43eJWKdAj3Upwqc5/E=
Subject key identifier: DF:0A:57:66:EF:BB:BF:76:8C:9E:FE:E5:C2:FD:E4:26:08:02:11:46
Authority key identifier: 6C:94:9D:2B:D6:4E:E1:7E:F5:D4:7F:96:3E:3D:5D:7A:98:2B:12:AF
Certificate issuer: /CN=6c949d2bd64ee17ef5d47f963e3d5d7a982b12af
Certificate serial: 0197B70F1E00A910D5A404876316D2A16352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJSdK9ZO4X711H-WPj1depgrEq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.mft
Manifest number: 0A21
Signing time: Sat 28 Jun 2025 15:01:50 +0000
Manifest this update: Sat 28 Jun 2025 15:01:50 +0000
Manifest next update: Sun 29 Jun 2025 15:01:50 +0000
Files and hashes: 1: OyVcB1brzSxuoeEjBo4fT0W9OFc.roa (hash: sut6tQHQTuBMJAc0/1shERZEk1RWFKSSDeDy5cd5Klo=)
2: bJSdK9ZO4X711H-WPj1depgrEq8.crl (hash: 7wDZHUjsUmRlFODiYMiJhUkj+xidrafMO9+axCyGEE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bJSdK9ZO4X711H-WPj1depgrEq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:1e:00:a9:10:d5:a4:04:87:63:16:d2:a1:63:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c949d2bd64ee17ef5d47f963e3d5d7a982b12af
Validity
Not Before: Jun 28 15:01:50 2025 GMT
Not After : Jun 29 15:01:50 2025 GMT
Subject: CN=df0a5766efbbbf768c9efee5c2fde42608021146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c6:6b:1c:b5:3d:07:df:40:06:6f:4d:e8:88:
37:f7:24:56:74:3b:63:19:9f:8c:a7:43:8a:85:df:
cb:64:13:9a:71:48:8f:e1:6a:08:a9:65:0f:f9:eb:
c6:4f:bf:a5:5a:32:37:4c:df:0d:3e:e6:6d:29:27:
d4:88:17:c2:8b:f0:54:76:0d:80:b5:fd:b3:7a:9c:
65:65:33:14:9a:60:ed:46:e0:68:72:b8:c2:81:a6:
01:c6:e7:89:b2:9f:96:3d:6d:ed:e2:ac:18:33:59:
25:65:fe:66:6c:c5:04:23:42:89:62:3f:ac:e3:b8:
e0:12:32:aa:0d:07:45:7c:43:61:ae:e5:b2:98:e1:
d4:31:57:c3:ee:ea:c7:aa:14:fe:7b:b3:49:96:02:
6d:b3:4c:30:b0:25:68:96:33:ad:1a:5d:18:03:c0:
37:59:4b:f4:f2:2b:67:b7:eb:e2:8b:ff:67:43:ad:
e3:ba:01:27:a6:77:12:fd:50:cf:06:43:43:13:20:
2c:4c:7e:3b:e7:36:35:62:25:e3:a2:5e:60:4e:41:
8b:05:75:fe:cd:38:ff:9a:6f:56:19:03:7d:f5:2d:
0f:48:f5:d2:02:4c:de:48:9d:dd:c7:67:5f:ad:57:
e5:2c:0d:02:94:f2:94:1d:10:94:e5:72:e3:39:f0:
18:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0A:57:66:EF:BB:BF:76:8C:9E:FE:E5:C2:FD:E4:26:08:02:11:46
X509v3 Authority Key Identifier:
keyid:6C:94:9D:2B:D6:4E:E1:7E:F5:D4:7F:96:3E:3D:5D:7A:98:2B:12:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJSdK9ZO4X711H-WPj1depgrEq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:db:6d:81:3b:24:48:4e:4e:40:e1:08:ae:1d:2b:e2:e3:63:
b2:a7:a9:a1:66:05:de:45:11:e1:a8:86:77:be:63:9c:b1:51:
e1:8e:0f:6f:31:d9:13:9c:f5:db:e6:a9:5e:ca:a4:9e:9a:16:
5b:c6:57:b3:1a:c2:8d:a7:b2:02:8f:f2:a5:17:f2:5e:0b:52:
55:fe:ec:a0:b8:b6:9a:09:e2:eb:8f:8d:fa:12:b8:42:61:8d:
41:a2:ba:ee:e1:c9:47:79:1c:93:9f:4e:98:44:5b:ef:3b:af:
b4:e5:39:9b:97:db:65:96:87:4b:91:7b:1c:ef:f4:fa:a5:e6:
b3:4d:76:5f:f2:4f:9d:e6:31:fd:a8:06:cb:a4:5a:76:d3:8e:
0e:2a:d0:96:60:ae:df:6d:5b:bc:7c:65:d8:02:fc:46:01:7d:
b1:5f:55:c4:f9:1a:b0:58:c3:83:59:10:8a:ea:36:a4:43:c0:
1b:c6:1c:de:3b:56:5b:41:a5:34:83:46:2f:7f:5f:75:cb:ea:
43:56:af:f1:16:78:45:05:20:1e:a5:28:d2:b5:22:68:c2:4d:
3e:04:67:e1:05:3d:95:e7:44:45:02:0b:fb:d9:a9:9f:e0:e8:
51:24:c4:fb:a1:ea:cd:36:0f:6b:9f:3d:93:d7:5d:d8:7f:d9:
5d:ca:4a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:02:00 2025 by rpki-client