Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
File: BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft (raw, json)
Hash identifier: D09YFSS8k45Yh2HpdY8cWx1PVCjMoaHfiMV6wbq16Bk=
Subject key identifier: 08:CE:13:58:CD:15:DE:E6:AC:8D:61:85:D7:33:63:55:F0:47:E2:5D
Authority key identifier: 04:90:43:47:A2:36:1A:CE:D7:C3:70:F7:44:6D:E7:08:27:7E:E6:D1
Certificate issuer: /CN=04904347a2361aced7c370f7446de708277ee6d1
Certificate serial: 0199FB7CEA9ED039C2FF39CDE94B23F0ECD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
Manifest number: 05E1
Signing time: Sun 19 Oct 2025 08:01:31 +0000
Manifest this update: Sun 19 Oct 2025 08:01:31 +0000
Manifest next update: Mon 20 Oct 2025 08:01:31 +0000
Files and hashes: 1: BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl (hash: wtwEtAzRLCmv6daVyuDPlkVCdQPc0c0aNcjznueY7mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ea:9e:d0:39:c2:ff:39:cd:e9:4b:23:f0:ec:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04904347a2361aced7c370f7446de708277ee6d1
Validity
Not Before: Oct 19 08:01:31 2025 GMT
Not After : Oct 20 08:01:31 2025 GMT
Subject: CN=08ce1358cd15dee6ac8d6185d7336355f047e25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:57:6e:a8:82:e9:e9:fe:60:ed:84:ce:08:eb:
92:26:71:9a:96:60:86:f5:d1:f0:81:9f:a9:a8:46:
bb:96:5f:05:7d:60:5c:9f:ba:68:4d:4d:58:4a:2c:
71:0e:24:f6:64:0e:47:c0:7a:37:09:d4:28:8c:5f:
ca:d4:c3:58:59:d1:a4:70:c7:0e:c0:a8:23:3e:80:
c0:15:f4:ed:97:0b:6a:5d:2c:b1:91:6e:d4:d8:57:
c1:dd:a5:77:e7:ca:99:1d:68:87:9e:2e:24:44:f1:
d8:fd:24:14:e3:6c:62:75:53:aa:b1:9e:9d:63:02:
61:be:92:b2:18:29:8b:38:e2:eb:4f:7e:fb:d7:a9:
8b:5f:50:5d:f0:f7:38:fb:87:b8:d8:75:a5:6c:52:
05:16:15:64:73:39:61:78:aa:61:a6:95:bb:42:61:
d6:ae:32:13:dd:52:4a:80:38:8f:d7:0e:d9:9c:59:
37:a3:9f:de:7a:71:d0:1c:fb:66:b6:f8:6f:4f:94:
0a:aa:db:da:dc:a5:c5:12:7e:79:ee:f2:c2:cb:b8:
e0:43:f6:7e:d5:9a:57:7e:5a:63:e4:0f:c7:92:4d:
15:be:25:a7:a5:0f:ac:a9:9c:a6:e0:dd:2b:b6:6e:
6d:f8:41:78:2f:a7:37:6c:b6:ce:1b:cb:b5:4e:11:
3c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CE:13:58:CD:15:DE:E6:AC:8D:61:85:D7:33:63:55:F0:47:E2:5D
X509v3 Authority Key Identifier:
keyid:04:90:43:47:A2:36:1A:CE:D7:C3:70:F7:44:6D:E7:08:27:7E:E6:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:cb:5e:7d:87:f2:02:90:74:65:48:3c:7e:43:a1:59:c2:39:
57:e5:66:e2:b0:e7:86:bf:0f:b1:97:aa:bf:74:13:3a:fa:35:
e1:f1:73:5e:e5:ed:f0:ff:15:a0:5f:ee:30:6a:c8:84:d7:9a:
76:1e:ef:03:d4:33:ce:bd:e1:9c:ee:0f:e5:23:05:bf:4c:21:
00:51:33:76:93:45:28:c8:ac:17:a1:cb:62:67:d3:1a:a5:a2:
36:73:5c:16:7f:d9:75:97:73:7c:9a:b7:e3:d3:d0:f7:69:1a:
29:03:1a:49:d3:95:81:74:7b:33:4a:95:9d:d1:72:e0:51:0d:
77:fe:70:14:42:d8:a1:42:d9:e6:c9:7f:0e:89:c7:bd:ac:f2:
6c:c7:f0:54:ff:ce:65:f4:c0:3c:50:32:37:bd:64:80:d7:3e:
f9:65:4c:d3:11:6d:60:2e:90:52:fd:d7:6f:3e:8b:c1:80:6d:
4b:ab:78:64:2d:91:f5:87:e5:f6:11:7f:04:29:08:9b:64:2f:
c5:31:6f:3f:c5:26:de:e5:d6:8f:c0:46:5a:8d:8d:83:7d:c0:
2d:f8:97:d8:95:ae:4c:eb:82:41:75:c5:5c:0d:0f:73:06:51:
b3:f1:38:b5:7c:3d:e3:48:d9:65:c1:7b:2e:a5:3c:e5:0d:ac:
17:b7:a7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:16 2025 by rpki-client