Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
File: bj5QHSUT5a7UQj1-smXmCCKo540.mft (raw, json)
Hash identifier: SbpxUJK/wgqZ48jSBbUVkpE0tmO4fzGodKB1hDeT30Y=
Subject key identifier: 35:23:9D:D0:17:77:41:F3:06:9F:FA:5D:CD:F0:21:A7:A6:33:2B:7A
Authority key identifier: 6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D
Certificate issuer: /CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
Certificate serial: 0198D773AA4A5055A3172EE3B4578B3D8F68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
Manifest number: 1336
Signing time: Sat 23 Aug 2025 15:02:18 +0000
Manifest this update: Sat 23 Aug 2025 15:02:18 +0000
Manifest next update: Sun 24 Aug 2025 15:02:18 +0000
Files and hashes: 1: OpzjX_30NcDVzI3ln4sLOuG7_Mo.roa (hash: rW6xgGR1vzj/wyImvrzrumKsIhFoGNfZPJbpPmbWZ1U=)
2: bj5QHSUT5a7UQj1-smXmCCKo540.crl (hash: YZpbyJZ0gBKoSQqqoAindQ8/YeSSgaQd9UT0BmZF7RM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:aa:4a:50:55:a3:17:2e:e3:b4:57:8b:3d:8f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
Validity
Not Before: Aug 23 15:02:18 2025 GMT
Not After : Aug 24 15:02:18 2025 GMT
Subject: CN=35239dd0177741f3069ffa5dcdf021a7a6332b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:78:05:34:42:2d:4f:e5:0c:8e:e0:d7:26:9c:
c4:19:fd:65:31:eb:27:14:32:9a:54:61:3c:97:b2:
50:44:dc:73:e2:7e:f9:77:c9:54:a4:b3:2b:fa:a7:
ba:84:e1:76:fc:58:7d:81:04:5b:60:25:dd:d5:60:
fc:a2:08:22:8e:dc:0d:cc:9f:7e:b6:a1:8e:47:1c:
05:18:6b:76:70:17:4f:8f:02:5e:60:34:64:fd:b2:
7f:fb:cf:a1:9e:6d:fc:25:46:f1:ed:d6:75:c1:50:
8b:36:62:a3:47:90:fe:5e:a9:97:0f:e7:ee:d2:55:
27:fd:0e:c9:bc:a7:68:c2:f7:c0:b9:04:8f:96:79:
ee:ee:74:43:dc:28:8f:4d:ad:97:20:65:0f:68:09:
84:3f:cd:3f:04:8b:6a:f5:78:2a:4b:71:83:f5:5e:
91:c9:f3:29:b4:f6:2e:c7:72:39:b6:26:e6:13:06:
93:b3:c3:d6:d1:e7:f4:d3:4c:8d:77:ed:c8:93:2e:
cf:50:52:54:f7:a8:c2:41:d4:2f:96:3b:34:7b:ee:
78:c4:01:16:44:0d:d7:28:d6:88:39:30:da:26:d8:
fc:cf:31:ae:b6:8c:ac:63:3e:0d:10:43:ee:f7:ed:
77:fd:34:0a:99:8a:d5:d5:01:50:ec:a9:d8:4c:d3:
88:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:23:9D:D0:17:77:41:F3:06:9F:FA:5D:CD:F0:21:A7:A6:33:2B:7A
X509v3 Authority Key Identifier:
keyid:6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:cd:2c:ad:1a:c5:73:f9:77:96:0e:29:36:fe:43:f1:b6:4c:
03:84:d8:5f:db:fe:15:46:7f:1f:0e:e5:97:28:be:89:73:31:
02:4a:d5:51:86:d2:bc:4e:96:f5:08:0f:80:e7:d5:b8:c7:cf:
a7:57:f9:6c:4e:1f:2e:78:e3:07:54:a1:86:f3:69:ac:f1:ea:
d7:6c:1d:4d:e0:d4:c9:14:10:35:1c:80:08:21:62:7e:72:f6:
af:01:73:51:69:b4:a8:4a:db:6f:6a:06:e1:5d:32:de:03:44:
a7:3c:4c:0a:3e:72:90:64:6f:ea:bb:cd:aa:bc:9b:31:a6:58:
26:d2:1d:5b:32:28:08:dc:52:3f:c9:dd:e2:1b:64:f4:9b:14:
1b:b3:64:9d:6b:96:27:43:89:a9:1f:02:c7:58:bc:dc:3c:62:
bf:7a:79:b3:ab:cc:00:47:b8:f0:67:5a:2a:ca:36:c1:64:4a:
33:fb:85:c6:a7:24:ae:a9:6d:4f:88:a2:0e:f3:55:fd:8f:95:
fc:b3:18:d6:8d:b0:44:be:49:6f:4f:b1:8b:7d:df:f4:d3:10:
72:e9:b2:d3:c6:24:16:dd:03:49:72:a9:1d:56:04:4d:47:c8:
3b:3c:3f:12:aa:23:e9:62:1a:04:27:7b:88:62:c2:63:6d:89:
a5:4a:d7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:53:47 2025 by rpki-client