Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
File: BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft (raw, json)
Hash identifier: sKSduVORR1MUOo2AhM1STpFcTQvVQtjLlf/vViKOQdA=
Subject key identifier: 99:BE:5F:3A:8F:5B:6E:E2:E7:E2:D2:19:FE:09:25:26:03:CD:50:B3
Authority key identifier: 04:90:43:47:A2:36:1A:CE:D7:C3:70:F7:44:6D:E7:08:27:7E:E6:D1
Certificate issuer: /CN=04904347a2361aced7c370f7446de708277ee6d1
Certificate serial: 0197B82102C393804A03B5A2575C5FA21405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
Manifest number: 04B5
Signing time: Sat 28 Jun 2025 20:01:00 +0000
Manifest this update: Sat 28 Jun 2025 20:01:00 +0000
Manifest next update: Sun 29 Jun 2025 20:01:00 +0000
Files and hashes: 1: BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl (hash: D9IOLNU2a7gV5EMtPplf+vVTR17SVNCQU3vy0WKz3u8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:02:c3:93:80:4a:03:b5:a2:57:5c:5f:a2:14:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04904347a2361aced7c370f7446de708277ee6d1
Validity
Not Before: Jun 28 20:01:00 2025 GMT
Not After : Jun 29 20:01:00 2025 GMT
Subject: CN=99be5f3a8f5b6ee2e7e2d219fe09252603cd50b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ec:9f:7d:5b:6b:78:a5:93:d6:31:cf:e5:01:
7a:12:9f:d6:d5:0b:d1:40:0f:a9:35:36:99:74:7d:
2d:12:30:07:b7:c9:1d:ff:c4:4b:e0:9a:55:37:19:
88:83:da:ea:68:eb:06:a2:c8:e4:13:52:3c:84:c6:
49:0b:35:a0:ce:2b:05:91:2a:a0:c1:bc:94:14:17:
81:b2:c2:d6:6e:b6:30:69:79:dd:93:8e:3e:9a:ef:
98:ee:24:20:b7:5f:79:1d:3c:4f:e7:49:68:53:cb:
b5:e5:29:1f:0f:83:b5:5f:bd:8f:f3:af:c6:bb:54:
1f:a5:de:9c:52:95:08:f2:83:8b:95:9a:b6:e3:97:
f3:ff:2e:c9:5c:70:0a:96:1b:7f:78:7d:e5:c3:b4:
61:57:f0:dd:ef:fc:c8:70:43:61:79:15:18:6c:45:
ab:03:e6:98:7f:79:fe:f5:ed:18:69:ec:60:36:7a:
83:a6:fd:63:2b:dd:36:a9:4f:d7:4f:1b:b0:06:0a:
3f:83:c8:2f:34:1a:08:c1:55:19:fd:21:8d:b1:f0:
99:70:a4:a8:d5:bc:55:48:35:8f:26:22:5e:2c:a9:
84:d3:65:34:74:9d:f0:ff:a2:b2:24:c3:f5:37:a0:
09:df:0b:1d:4a:34:30:a1:e5:c8:34:94:f1:86:47:
33:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BE:5F:3A:8F:5B:6E:E2:E7:E2:D2:19:FE:09:25:26:03:CD:50:B3
X509v3 Authority Key Identifier:
keyid:04:90:43:47:A2:36:1A:CE:D7:C3:70:F7:44:6D:E7:08:27:7E:E6:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:89:3c:85:50:fe:8a:04:62:40:7f:1d:94:94:02:62:c0:22:
e1:11:90:e8:8e:30:47:ff:2d:20:be:bc:1c:78:a8:d8:06:28:
0d:98:c4:c0:ac:e9:dd:d4:d2:44:c0:e9:8f:96:6c:8b:92:bd:
d9:32:0b:96:1e:5f:32:c3:94:10:6b:4b:9a:3b:cd:5b:cb:6d:
b0:f0:af:b2:13:d7:70:d0:73:0e:da:2e:43:1b:e1:cc:8a:e4:
50:f4:57:6b:37:6a:35:29:5f:6f:31:83:65:34:88:b6:dc:05:
4d:6f:2f:46:ef:c1:a1:2a:bc:83:fc:6a:63:8c:bf:0a:f5:f1:
e1:7e:4d:b6:4b:e3:d8:54:0c:b0:8d:f2:8e:cf:09:21:78:69:
4b:4c:a9:a9:14:53:be:00:09:46:8f:d1:13:fa:bc:9d:3b:c3:
7c:b5:52:5e:b8:74:7a:f5:c0:12:b9:fa:8d:71:47:88:4d:2e:
3b:ed:dc:09:f7:14:e3:68:a3:a2:62:27:a7:db:40:43:0d:28:
5f:fa:d0:ef:b5:f3:45:04:69:ee:97:91:28:d8:69:a9:dc:26:
e9:f8:05:c5:dd:7b:25:bf:2e:f2:21:2e:f6:15:ef:08:f1:5d:
e3:5e:e7:f1:40:cd:2c:da:07:c6:3e:0a:12:ef:d3:6a:06:55:
56:9b:89:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:38 2025 by rpki-client