Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
File: BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft (raw, json)
Hash identifier: QjgzpI00caWqsYzflbzHqKrKGMA+/V1iOUQ2AQeOmYY=
Subject key identifier: BF:1B:98:FB:32:D6:A7:F6:12:7E:B1:53:03:DC:1C:60:77:61:2F:D9
Authority key identifier: 04:90:43:47:A2:36:1A:CE:D7:C3:70:F7:44:6D:E7:08:27:7E:E6:D1
Certificate issuer: /CN=04904347a2361aced7c370f7446de708277ee6d1
Certificate serial: 0198D404B753D7F4C6A3CDBCF041A991678B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
Manifest number: 0548
Signing time: Fri 22 Aug 2025 23:02:15 +0000
Manifest this update: Fri 22 Aug 2025 23:02:15 +0000
Manifest next update: Sat 23 Aug 2025 23:02:15 +0000
Files and hashes: 1: BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl (hash: bC/HBp5k49jfUIguu/AR4Mr9y2FtBKVxu0NI/Zq/SD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:b7:53:d7:f4:c6:a3:cd:bc:f0:41:a9:91:67:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04904347a2361aced7c370f7446de708277ee6d1
Validity
Not Before: Aug 22 23:02:15 2025 GMT
Not After : Aug 23 23:02:15 2025 GMT
Subject: CN=bf1b98fb32d6a7f6127eb15303dc1c6077612fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:91:24:a3:9c:66:7f:44:1e:74:79:18:ee:af:
8c:80:b1:fc:c1:09:47:67:b9:3e:7e:bb:24:86:57:
29:b3:38:de:73:c8:3b:86:c8:de:c4:f5:e6:13:ac:
81:fc:1a:b8:8d:89:10:62:b7:a6:85:1c:d3:a1:18:
91:e8:99:c8:c4:2d:58:76:57:c6:49:09:14:ed:d5:
b2:c2:2c:91:d9:27:da:2e:dc:86:a7:80:17:58:8e:
5a:3b:a6:60:aa:dd:92:54:1b:c0:bb:d6:7e:1b:d7:
5f:d7:88:a5:46:79:56:c7:7a:42:d8:1f:12:8b:36:
99:b3:45:19:cb:bd:c1:8e:80:61:17:85:0a:19:11:
bd:a5:10:93:4d:d0:9f:ec:07:64:15:5c:6c:6e:58:
9f:b7:72:66:69:d5:50:de:f4:8d:85:e2:dc:e7:be:
84:9b:b7:80:5c:28:33:5e:c7:ab:09:36:f1:a7:87:
6d:c5:2a:a8:3b:fa:42:48:df:f0:82:26:a4:61:06:
4d:c5:f5:f9:12:91:41:62:6f:0b:f7:22:02:aa:f4:
b6:7c:36:9b:b9:5e:ea:d5:f5:65:bf:ee:07:87:04:
a1:e2:a4:54:83:5d:f5:70:a8:54:29:d6:a2:71:8b:
56:ea:bc:bc:11:bd:6d:f6:12:6a:ef:2b:32:82:70:
c5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1B:98:FB:32:D6:A7:F6:12:7E:B1:53:03:DC:1C:60:77:61:2F:D9
X509v3 Authority Key Identifier:
keyid:04:90:43:47:A2:36:1A:CE:D7:C3:70:F7:44:6D:E7:08:27:7E:E6:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c2:43:9b:0c:81:8e:b1:fd:35:47:01:08:b7:87:79:2d:03:
d4:88:f5:48:d1:c9:7a:86:6a:f2:12:1f:73:f7:9d:8b:97:1e:
97:f4:2a:d1:a9:f0:0c:be:56:44:c5:5d:87:39:86:ed:c4:4c:
71:9c:92:15:c0:ef:85:d2:80:71:c6:18:a3:fd:3f:d0:08:30:
23:7c:f3:8e:8c:bb:bd:38:dc:e8:a2:6f:b6:2c:e7:01:74:b8:
58:ce:53:8d:65:c5:35:e7:5a:c1:40:1b:91:56:61:fa:c3:8c:
a3:c5:96:1d:31:f3:4a:5a:ac:76:13:24:3d:87:02:c0:56:20:
fb:81:c5:98:af:e4:bd:0f:b5:3d:4f:00:4a:0b:95:fb:9f:df:
9f:ed:9a:07:69:ba:aa:c4:a7:8c:dd:a6:8f:9c:ba:9e:d1:7d:
20:0d:75:9e:2c:3b:68:1a:17:bc:3b:21:69:9b:76:ef:0c:bd:
49:2d:21:a9:69:17:f4:04:8e:d5:d3:fb:29:9b:50:dd:b2:f0:
91:b0:93:86:95:19:38:53:9e:72:19:3a:4b:b4:a0:23:7a:0b:
48:2e:07:10:cc:4c:01:b4:74:19:53:b9:d7:c5:1e:75:bf:33:
4e:41:0a:c3:33:b3:96:e0:4b:19:89:6a:95:5b:b0:f8:fb:10:
dc:f5:32:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:47:55 2025 by rpki-client