Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
File: BjyTAb89LhVgz69-3EGnw-yKFqY.mft (raw, json)
Hash identifier: eZR8J8BJ5D78rNlrvvq5wrBsSzCBI14mnOcEoO1kP7E=
Subject key identifier: 9A:7E:B5:70:B1:B8:3A:D8:E2:37:63:4C:13:71:A0:72:0D:77:24:F5
Authority key identifier: 06:3C:93:01:BF:3D:2E:15:60:CF:AF:7E:DC:41:A7:C3:EC:8A:16:A6
Certificate issuer: /CN=063c9301bf3d2e1560cfaf7edc41a7c3ec8a16a6
Certificate serial: 0199FF2293BFF2AB30D222F0C07E3F7946D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
Manifest number: 16E1
Signing time: Mon 20 Oct 2025 01:01:19 +0000
Manifest this update: Mon 20 Oct 2025 01:01:19 +0000
Manifest next update: Tue 21 Oct 2025 01:01:19 +0000
Files and hashes: 1: BjyTAb89LhVgz69-3EGnw-yKFqY.crl (hash: LlLpGX1PhXqy5QgVYift66BiVc6epTB4JuMi/yOgNBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:93:bf:f2:ab:30:d2:22:f0:c0:7e:3f:79:46:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=063c9301bf3d2e1560cfaf7edc41a7c3ec8a16a6
Validity
Not Before: Oct 20 01:01:19 2025 GMT
Not After : Oct 21 01:01:19 2025 GMT
Subject: CN=9a7eb570b1b83ad8e237634c1371a0720d7724f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5c:7c:f2:d6:fe:e6:66:80:5c:a2:ea:05:bf:
9f:22:09:8a:58:b8:c7:b5:86:05:a0:9c:ba:3c:27:
eb:5b:4b:a3:57:40:09:f3:a3:f6:f6:9c:d8:7b:f0:
2f:b8:19:02:83:a1:5d:0f:4f:ac:3a:30:b9:ed:20:
a7:c1:a9:7e:8d:14:f3:93:37:92:62:02:ed:57:c6:
1f:70:32:e2:4b:f6:f2:ff:c1:0e:b2:2e:2a:cc:0c:
43:41:0c:a5:38:5c:09:66:34:8b:b5:80:89:c6:53:
4a:2d:22:00:1a:1b:9e:25:b6:20:af:fb:8a:55:e3:
14:c4:78:d5:7a:f7:b3:d7:aa:ed:a9:53:46:6f:56:
d8:e4:48:d4:bc:85:b4:c4:51:d9:6d:05:91:a4:0c:
22:c1:f9:16:a1:da:c4:3c:33:c0:e0:d6:29:97:d7:
8b:8f:40:1e:5f:10:d9:2e:ca:7b:76:51:5c:61:03:
28:05:29:62:1e:7e:6d:0b:f0:6b:ad:b2:d8:ec:e9:
b0:e3:74:53:e6:2e:47:58:1d:99:45:f6:95:a7:78:
ad:3f:d6:cd:a6:eb:27:8f:a5:b0:47:b5:0e:84:f3:
9e:0e:9c:f7:53:0c:26:d2:ed:34:4c:5a:97:ab:00:
00:bd:4d:46:e3:99:e3:21:28:dc:1d:4b:12:84:7d:
f2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7E:B5:70:B1:B8:3A:D8:E2:37:63:4C:13:71:A0:72:0D:77:24:F5
X509v3 Authority Key Identifier:
keyid:06:3C:93:01:BF:3D:2E:15:60:CF:AF:7E:DC:41:A7:C3:EC:8A:16:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:85:02:e9:db:51:3d:12:c5:45:0a:8d:bd:5a:c5:30:cd:e1:
71:8c:4b:de:1b:c2:1d:a3:c8:7a:c2:97:83:12:e1:70:15:44:
f5:c3:74:de:9e:04:be:43:a8:77:ce:1b:8e:d0:e6:f1:7e:a5:
32:2a:33:cf:6b:36:ba:80:44:0c:b3:86:b7:e4:6c:5b:b5:4c:
54:f0:fb:67:83:e7:ae:e5:cf:36:d0:05:58:3b:7b:4c:a7:b4:
76:8b:e3:96:d6:5a:9e:6f:01:c4:5b:10:6a:73:c1:32:67:75:
b2:14:84:a9:66:93:4e:64:5b:e6:54:3b:53:3d:44:30:04:10:
38:db:04:a2:b3:9d:74:d2:c1:08:32:24:cf:95:d0:c5:58:48:
a3:2a:c9:b6:a2:4e:46:01:c1:8a:27:4a:f6:4a:ef:2a:a9:32:
e6:f4:f2:0b:69:fb:24:92:ff:32:82:d6:0a:d6:56:b8:5e:e2:
c2:75:fd:d2:7b:ad:ff:20:59:c5:2f:af:ef:5f:6f:cb:88:48:
47:c1:3e:fe:da:ed:5b:7c:f5:d1:93:b8:a8:d5:0d:6e:21:d1:
71:38:c9:0c:bb:3d:d0:29:09:6f:f9:ce:3d:f8:09:4b:fd:c7:
6a:53:d8:5f:d3:b3:ae:ee:85:b9:96:c4:fe:70:9f:1a:a5:21:
c6:4a:f1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:45:44 2025 by rpki-client