Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
File: BjyTAb89LhVgz69-3EGnw-yKFqY.mft (raw, json)
Hash identifier: LZ7D9GxFWaK9hYhEAX/UIURxudZpDYR9hfTH2V8U9LA=
Subject key identifier: 92:42:1F:26:C7:18:16:4C:85:90:67:81:FD:3B:8A:10:F0:E2:5B:40
Authority key identifier: 06:3C:93:01:BF:3D:2E:15:60:CF:AF:7E:DC:41:A7:C3:EC:8A:16:A6
Certificate issuer: /CN=063c9301bf3d2e1560cfaf7edc41a7c3ec8a16a6
Certificate serial: 0197B7EA65B1ADFBB2E4A7B85AD3102CD1D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 19:01:21 +0000
Manifest this update: Sat 28 Jun 2025 19:01:21 +0000
Manifest next update: Sun 29 Jun 2025 19:01:21 +0000
Files and hashes: 1: BjyTAb89LhVgz69-3EGnw-yKFqY.crl (hash: rDoOYnL/FEsyw/SYkmHCWej6/fpozbUcbELztgQATbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:65:b1:ad:fb:b2:e4:a7:b8:5a:d3:10:2c:d1:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=063c9301bf3d2e1560cfaf7edc41a7c3ec8a16a6
Validity
Not Before: Jun 28 19:01:21 2025 GMT
Not After : Jun 29 19:01:21 2025 GMT
Subject: CN=92421f26c718164c85906781fd3b8a10f0e25b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4d:d9:0a:5b:ea:d3:ab:12:1e:e0:c0:42:c3:
06:c3:e1:95:39:4d:7e:0e:26:18:c7:b3:60:a3:a5:
df:3f:df:04:1d:ab:a0:18:12:0d:f9:0c:68:c0:e6:
14:e3:ee:83:e4:01:29:a6:36:ae:1a:85:61:4d:f4:
0b:74:91:bd:05:1f:1b:70:73:71:b5:ec:f2:e5:da:
1b:df:88:cb:8c:0e:32:53:53:e1:84:7c:98:44:69:
f4:b1:6c:f2:a8:6e:11:33:ae:0f:fb:a8:13:e2:69:
39:0b:75:21:97:db:4e:8a:ce:9c:2b:52:80:67:83:
7b:1c:9f:28:ea:58:8e:d4:dc:e7:79:fc:4d:10:c1:
00:58:bf:40:ba:15:3e:20:1a:90:62:92:da:d5:da:
0a:84:c8:fc:4c:9d:ae:cd:4a:3b:be:07:4d:9f:ad:
61:cd:6e:52:8e:38:04:c9:ae:36:de:4d:f2:df:b3:
64:3e:b2:ea:74:2e:37:75:d3:b3:4a:fd:95:c0:8d:
28:bc:cd:ff:8c:1e:6d:60:2b:6e:a2:0a:29:74:0f:
83:e4:d7:ad:49:4f:2b:f4:85:f2:71:6d:a6:3a:72:
08:8b:2c:e6:a1:fb:27:e8:7b:1b:9e:ce:6e:a1:ce:
d1:0c:b3:c2:d2:00:1f:9b:f0:f5:ed:6a:0a:7d:05:
53:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:42:1F:26:C7:18:16:4C:85:90:67:81:FD:3B:8A:10:F0:E2:5B:40
X509v3 Authority Key Identifier:
keyid:06:3C:93:01:BF:3D:2E:15:60:CF:AF:7E:DC:41:A7:C3:EC:8A:16:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:78:97:d9:74:e6:2f:38:ba:4d:79:a1:69:6b:62:34:83:10:
94:70:29:4c:7e:56:f6:a0:0d:11:c2:9b:61:4f:fc:49:97:96:
f1:b8:0a:9c:f3:0d:17:90:7a:61:0e:15:04:47:c1:4b:20:4b:
e4:8c:d2:d0:42:82:a3:ae:3e:9e:83:d0:46:ac:a6:a3:ce:45:
06:b5:fa:8d:df:bc:cc:a0:98:dc:e1:44:53:94:11:75:37:0b:
2e:5b:57:cd:fc:7e:51:67:8b:2c:51:b0:0e:a0:aa:07:87:0d:
bf:f4:80:6a:a8:8b:d6:3b:60:1e:12:45:08:2b:db:9d:55:78:
6d:ed:98:db:21:a8:1c:4e:a8:03:e0:2f:47:e8:0d:8a:45:a4:
7c:9b:d2:f5:91:1f:5d:4e:5c:63:05:0f:24:7e:8f:e7:f1:25:
31:6d:fa:10:d0:af:77:50:a4:13:5f:dc:45:14:13:53:97:99:
f7:84:b4:82:4d:30:f0:fc:a7:4e:b6:fb:53:ec:65:71:a3:5e:
d0:6f:07:eb:f0:8e:d7:4c:58:c6:aa:ea:50:d2:21:7f:ea:89:
52:07:12:46:6b:64:7f:1e:15:75:d8:ad:18:56:d8:b7:bd:16:
c9:2d:d0:cb:86:8d:8d:5d:94:24:d0:43:fd:46:8e:87:c9:c3:
d7:8d:89:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:34 2025 by rpki-client