Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
File: bj5QHSUT5a7UQj1-smXmCCKo540.mft (raw, json)
Hash identifier: fTdwQBu+Sz7hZrc8h0sDMlzVYJTaKzQ2NfarU0/WqrA=
Subject key identifier: A5:76:B2:D4:33:82:DD:13:00:1F:19:BD:FF:A3:16:E0:10:2D:CD:8B
Authority key identifier: 6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D
Certificate issuer: /CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
Certificate serial: 0199FB0EC0CC32F1C24A06514DB26E3779A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
Manifest number: 13CD
Signing time: Sun 19 Oct 2025 06:01:11 +0000
Manifest this update: Sun 19 Oct 2025 06:01:11 +0000
Manifest next update: Mon 20 Oct 2025 06:01:11 +0000
Files and hashes: 1: OpzjX_30NcDVzI3ln4sLOuG7_Mo.roa (hash: rW6xgGR1vzj/wyImvrzrumKsIhFoGNfZPJbpPmbWZ1U=)
2: bj5QHSUT5a7UQj1-smXmCCKo540.crl (hash: gl0bOe+jguVsvBPzkq/XgcW3KO6OhjD/Nm7vxdbSHjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:c0:cc:32:f1:c2:4a:06:51:4d:b2:6e:37:79:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
Validity
Not Before: Oct 19 06:01:11 2025 GMT
Not After : Oct 20 06:01:11 2025 GMT
Subject: CN=a576b2d43382dd13001f19bdffa316e0102dcd8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c7:8a:ca:d0:e5:76:66:43:e8:00:bc:e8:e4:
0c:99:f4:20:4c:6a:83:b8:70:4d:36:3a:67:39:5f:
17:56:0c:ec:dc:8e:38:c5:9b:68:22:8b:c1:82:fa:
bc:8c:e5:f0:66:62:02:98:c9:58:d0:79:a1:1b:e7:
5c:12:b8:dc:26:4c:79:7b:06:2e:c5:5e:bc:04:9f:
12:0a:06:c7:1e:56:46:6f:ac:ae:8f:54:c1:34:63:
0f:ce:29:ba:90:77:27:1f:fa:9a:ba:a9:08:68:36:
77:f5:61:38:0f:72:c0:3a:e4:96:73:8e:32:a7:5d:
6e:4b:5e:0a:08:35:b2:13:77:30:c3:07:10:2b:04:
90:c3:40:04:0f:87:31:72:5c:20:66:6f:70:d6:a1:
59:14:4a:8b:8b:9a:82:d4:ee:5e:cf:e0:f8:24:4b:
e5:fb:e8:89:e9:59:42:5e:3b:17:ad:92:70:0a:ff:
8e:d4:c1:2e:e8:5f:ce:0a:29:d9:5e:35:49:f7:49:
c7:42:6a:c4:48:92:4a:78:f1:64:14:64:0a:71:8d:
60:3c:3a:47:40:74:ce:d3:d2:d4:ff:b8:f7:a3:e2:
e0:f8:25:7a:e0:1e:54:1d:2a:9d:cc:f8:af:a5:3d:
27:aa:71:46:00:9c:45:f1:e3:e0:ec:23:77:e1:8d:
54:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:76:B2:D4:33:82:DD:13:00:1F:19:BD:FF:A3:16:E0:10:2D:CD:8B
X509v3 Authority Key Identifier:
keyid:6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:a9:5c:1e:65:25:da:bf:f6:23:05:79:63:75:5e:26:23:41:
a7:93:f9:6c:f4:bb:eb:3f:ad:c0:e6:83:49:c3:a4:2e:a5:06:
20:a8:02:8e:74:41:55:67:34:cd:65:d3:e4:30:26:9c:8b:56:
9e:07:cb:1e:60:4c:08:07:82:e1:07:62:23:cc:60:30:55:7b:
b9:23:b3:b2:34:d4:f4:70:db:91:9c:aa:de:12:9d:b0:3d:30:
fb:87:d4:e0:d5:94:a0:4d:42:22:fc:2a:ae:8e:a9:ec:ba:08:
2c:14:1e:00:7c:64:a7:b0:b9:c0:66:5a:df:b7:7c:69:9a:d1:
04:33:55:5b:7d:69:b5:a0:4f:71:a2:70:55:3f:14:4e:bf:a8:
86:e3:0f:2c:ea:27:ad:b8:1b:6b:fb:b6:3a:68:35:4b:f7:34:
ac:f9:ad:19:4f:63:8e:a0:ef:94:a0:b8:a6:ab:f4:0f:8c:1f:
a8:72:4b:ea:1d:73:96:a2:8b:6a:d5:b0:60:84:68:51:35:42:
fe:a5:af:47:bd:2f:26:14:d2:38:fa:32:5f:33:fe:21:ed:4e:
ca:4e:98:26:ef:cd:ad:a7:2f:ed:4a:f3:01:78:46:e4:a1:89:
97:94:f3:74:49:49:2b:70:46:51:86:0d:fa:c4:70:0b:e0:fc:
f3:55:75:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:27 2025 by rpki-client