
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft
File: bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft (raw, json)
Hash identifier: dnr7GihYAzR+VVmaIAVH23PC3hPGREdZKnQ19+bjubY=
Subject key identifier: 24:64:6F:8C:0B:4B:4C:B4:35:09:69:6F:7C:56:FD:F1:E8:F3:6F:66
Authority key identifier: 6C:9B:3E:19:FD:1F:43:0F:51:45:D6:DB:92:41:A5:05:7E:D9:6C:B3
Certificate issuer: /CN=6c9b3e19fd1f430f5145d6db9241a5057ed96cb3
Certificate serial: 0199FCFDB839FDA05A43D839E631BD9CCCB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft
Manifest number: 0D74
Signing time: Sun 19 Oct 2025 15:01:50 +0000
Manifest this update: Sun 19 Oct 2025 15:01:50 +0000
Manifest next update: Mon 20 Oct 2025 15:01:50 +0000
Files and hashes: 1: _MMRM5gPmnbq2reAxzdSDLSF69Y.roa (hash: cjqAj6GsWqy7BzMKUAnCFHbn8leWiofU15doogJDNHE=)
2: bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.crl (hash: auXLINF0rulptWvFVvBdtKcBv4HQ+LPVDFI9cMt5hnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:b8:39:fd:a0:5a:43:d8:39:e6:31:bd:9c:cc:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c9b3e19fd1f430f5145d6db9241a5057ed96cb3
Validity
Not Before: Oct 19 15:01:50 2025 GMT
Not After : Oct 20 15:01:50 2025 GMT
Subject: CN=24646f8c0b4b4cb43509696f7c56fdf1e8f36f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:df:9e:bb:1b:be:0c:18:66:81:7c:1d:33:5f:
76:0c:55:23:86:4d:e4:9c:d7:9c:ee:ae:2e:84:46:
a2:03:4d:c4:ed:de:73:57:38:9a:4c:e4:b7:9b:04:
0f:ad:de:62:ba:47:d1:28:aa:12:69:13:87:5b:a3:
f1:ca:b3:e2:6f:6a:4d:f8:4f:c3:d5:16:cc:f4:61:
48:8c:ee:32:33:da:37:69:c0:4d:38:ce:9e:a9:e9:
0b:6b:b2:34:f8:ae:f0:37:3b:43:81:28:49:9b:41:
3c:a8:3d:93:4a:03:53:75:9c:24:c4:5f:38:11:42:
78:1b:be:19:a2:46:ac:44:fb:be:32:d1:d0:af:50:
2b:8b:a0:70:0e:16:f6:c3:4c:cc:82:27:3b:17:40:
03:4d:d6:6f:16:f0:b4:27:8b:2e:e6:59:73:24:49:
a1:5c:92:0a:bb:72:a5:e3:87:46:6e:ee:d8:66:2d:
7b:0d:07:2f:36:27:a2:53:73:17:b3:b7:59:40:fd:
9b:9f:27:c9:a3:48:1b:d1:d4:08:d4:d5:2c:82:f5:
a9:fe:0a:dc:98:62:33:02:88:cf:9b:d1:3e:d7:bb:
40:9b:6e:c4:b2:e1:d6:bd:64:8b:68:7f:8f:a3:cf:
04:9a:cc:56:65:42:bd:78:49:51:ce:33:f3:71:99:
e1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:64:6F:8C:0B:4B:4C:B4:35:09:69:6F:7C:56:FD:F1:E8:F3:6F:66
X509v3 Authority Key Identifier:
keyid:6C:9B:3E:19:FD:1F:43:0F:51:45:D6:DB:92:41:A5:05:7E:D9:6C:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:4e:e4:ee:49:e7:15:97:1c:28:69:2d:1d:6e:cb:26:ce:74:
78:04:fe:e3:18:8e:38:e3:d2:12:b0:79:d6:bc:b4:0d:fc:3a:
b5:dc:3c:eb:4c:12:5a:d8:87:50:d3:4c:ce:7e:bf:c8:7b:3e:
61:27:0e:3b:bd:46:dd:15:ee:b6:35:28:82:9a:7e:47:3b:e5:
25:0a:9d:ac:ec:aa:bd:a6:70:16:e7:7e:02:8f:af:22:11:33:
a9:19:09:7a:a2:6e:11:7d:be:3c:95:53:08:0a:83:b9:86:ea:
3d:e4:96:e9:89:6b:3e:12:89:a4:67:3e:95:80:d5:18:2e:8e:
53:63:5b:d1:f8:ed:11:ac:2d:31:4c:36:bb:49:5f:12:82:78:
4a:f0:05:3c:53:63:4e:8a:9a:26:87:1f:08:27:1f:84:94:a5:
13:7a:a6:c1:57:b3:a6:d1:82:ba:31:75:53:03:a6:b7:0c:fd:
da:03:13:61:3e:dc:c0:c1:ac:8d:74:99:e3:7c:e2:a9:2c:0a:
50:37:2d:44:15:2e:69:96:71:c0:2c:d9:42:e4:4c:ed:d6:c4:
09:fa:0b:70:06:4f:01:25:a8:35:2e:d0:8b:e0:3a:df:d8:2c:
1b:49:76:76:72:a8:3e:b9:0c:15:26:83:da:c9:e6:de:a6:e6:
bf:2a:d9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:53 2025 by rpki-client