Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
File: bj5QHSUT5a7UQj1-smXmCCKo540.mft (raw, json)
Hash identifier: N/6ypdVkitwlg6rvwcq/myguhNr0uMyTBvhklcT28ak=
Subject key identifier: A1:5D:4C:7F:AE:18:A0:88:7A:14:AD:F4:3C:C6:4D:17:F4:C2:FF:15
Authority key identifier: 6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D
Certificate issuer: /CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
Certificate serial: 01969DBE6BCEA85F12227881A64F44D6405E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
Manifest number: 120F
Signing time: Mon 05 May 2025 00:00:24 +0000
Manifest this update: Mon 05 May 2025 00:00:24 +0000
Manifest next update: Tue 06 May 2025 00:00:24 +0000
Files and hashes: 1: OpzjX_30NcDVzI3ln4sLOuG7_Mo.roa (hash: rW6xgGR1vzj/wyImvrzrumKsIhFoGNfZPJbpPmbWZ1U=)
2: bj5QHSUT5a7UQj1-smXmCCKo540.crl (hash: HWdGK5X79xIoVuXWiDQOE1bm/taFtZPI7iAqFfS8Tgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:be:6b:ce:a8:5f:12:22:78:81:a6:4f:44:d6:40:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
Validity
Not Before: May 5 00:00:24 2025 GMT
Not After : May 6 00:00:24 2025 GMT
Subject: CN=a15d4c7fae18a0887a14adf43cc64d17f4c2ff15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:59:31:b7:f5:ef:cc:3d:84:a1:58:7f:4c:bb:
ac:7e:19:11:96:d3:2f:24:ed:a6:b4:a7:ce:e6:5a:
19:f8:63:6a:cc:26:fe:f8:0a:ab:f5:76:12:c0:3a:
db:4b:d1:56:93:0c:64:71:f5:3a:84:c9:fe:33:3c:
22:5a:f2:54:83:f0:12:7d:68:f7:0a:0d:2a:ea:19:
6b:15:d7:d2:bd:7b:22:f9:5a:d1:b6:62:e9:0d:75:
a7:af:53:36:17:04:c9:59:7a:bb:70:44:9a:bb:74:
d3:d7:4b:b0:76:f3:ab:ec:69:9f:ae:80:f3:4a:e3:
63:57:15:25:39:8e:24:f0:be:76:b0:bd:22:c6:1d:
e5:73:62:e2:2f:19:34:32:82:af:fa:8c:2f:6d:70:
f2:87:00:d8:3d:2b:b8:e3:b8:54:b7:46:39:c6:0a:
10:2a:49:1d:81:c1:08:4d:93:47:61:3e:b0:65:d2:
5a:60:f9:52:55:43:78:60:75:4f:85:62:d7:69:08:
47:9d:64:41:9d:f6:e5:f2:a6:9f:12:2b:6e:d4:73:
51:8a:48:f9:3b:47:a8:28:f5:d9:22:3e:71:ea:ea:
e1:84:10:2e:c7:01:91:6c:67:92:cf:9c:34:2e:5e:
56:71:60:00:1e:15:dc:86:5b:91:9c:3b:7d:94:38:
a6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5D:4C:7F:AE:18:A0:88:7A:14:AD:F4:3C:C6:4D:17:F4:C2:FF:15
X509v3 Authority Key Identifier:
keyid:6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:67:11:c9:42:f7:7e:16:04:9b:8b:f7:35:0e:32:55:83:0f:
ce:89:05:2e:9e:96:60:9d:e1:76:55:1d:44:d0:a4:2c:80:ef:
15:61:dc:b2:1b:64:4f:54:dc:44:f6:9b:15:6c:68:d6:d2:3b:
41:e3:e4:93:63:fc:75:16:10:e8:42:cb:84:01:29:72:50:06:
9c:f7:ee:44:5d:21:16:da:b6:97:4c:a6:78:a3:b5:72:96:ec:
78:e7:d2:eb:94:15:59:e1:03:97:8d:2a:f1:b5:e3:c9:bd:40:
7c:50:5c:06:8f:c9:94:2c:72:bd:84:da:99:80:50:59:4f:a5:
b4:54:53:f2:99:1c:0c:cb:a0:a8:53:da:f0:27:f3:17:e2:4d:
61:3c:92:0f:14:83:e1:75:32:bc:f7:d5:c7:59:07:bc:d0:90:
75:84:f0:ba:dc:35:61:16:87:1f:10:59:3f:71:55:fb:ed:b7:
88:64:73:0b:ed:64:fb:a3:6f:fb:20:fe:12:d2:6b:45:96:0a:
0f:1f:e8:83:f0:ac:82:f0:6f:4b:5d:61:03:cc:6f:26:91:4b:
4d:09:83:ea:a3:c2:b9:f6:1f:98:36:e9:4f:e8:cd:92:1a:0a:
15:26:1f:f3:c6:1e:f8:ed:bf:6b:ea:61:f9:37:4d:52:2b:88:
2f:9e:30:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 07:09:50 2025 by rpki-client