Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
File: BjfRzl3D-oAOHR3PvaqEH93UOQU.mft (raw, json)
Hash identifier: InKsXOs8gzUhUy0huXRmMdA5PjqpWNlcRSFF4rxRoNk=
Subject key identifier: 1B:1F:01:B9:23:02:93:87:62:D6:56:21:80:B7:29:29:06:1C:63:C2
Authority key identifier: 06:37:D1:CE:5D:C3:FA:80:0E:1D:1D:CF:BD:AA:84:1F:DD:D4:39:05
Certificate issuer: /CN=0637d1ce5dc3fa800e1d1dcfbdaa841fddd43905
Certificate serial: 0199FD34753F01550F257BEAD975D6D0CD1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjfRzl3D-oAOHR3PvaqEH93UOQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
Manifest number: 152C
Signing time: Sun 19 Oct 2025 16:01:37 +0000
Manifest this update: Sun 19 Oct 2025 16:01:37 +0000
Manifest next update: Mon 20 Oct 2025 16:01:37 +0000
Files and hashes: 1: BjfRzl3D-oAOHR3PvaqEH93UOQU.crl (hash: I/IWJ36NifzEHXyF6CBL4+yp9I0PkKbkQVo9IiOwqVA=)
2: cqs27uyShJLHJ19HI0wbuu9K6Mw.roa (hash: Io5SItgYrsPuNxUpvFI/wIElXAajrpA8wR3rTKWJTBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjfRzl3D-oAOHR3PvaqEH93UOQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:75:3f:01:55:0f:25:7b:ea:d9:75:d6:d0:cd:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0637d1ce5dc3fa800e1d1dcfbdaa841fddd43905
Validity
Not Before: Oct 19 16:01:37 2025 GMT
Not After : Oct 20 16:01:37 2025 GMT
Subject: CN=1b1f01b92302938762d6562180b72929061c63c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5a:7a:63:a5:f1:e7:f3:ef:28:aa:db:e1:dd:
93:b8:24:77:25:22:96:65:a6:03:6a:31:aa:1c:8a:
45:12:53:60:32:77:e1:03:ac:16:3f:5b:68:71:f0:
e8:bf:64:a0:7c:b2:5d:81:af:53:12:ea:32:54:3a:
62:61:f2:20:03:b1:09:90:36:f7:94:aa:5f:2e:a0:
73:de:6f:37:45:d3:00:04:0c:91:ea:59:11:60:3e:
51:4e:13:9b:a6:11:c2:7f:89:24:66:08:42:f0:53:
95:bb:a7:4f:03:60:03:de:d7:75:55:1a:21:50:84:
9f:6d:cf:59:27:b4:a7:f5:ee:05:ee:43:7f:07:e9:
8b:e5:87:1b:11:a9:74:b4:43:2d:35:c2:cb:2b:20:
70:f3:dc:6e:86:5f:2d:4c:02:6b:a1:c6:13:8d:e0:
12:ab:50:38:5e:95:63:66:a9:cc:a1:5b:e1:29:3a:
b2:ed:cd:4f:d2:57:fb:85:41:f7:8f:65:d6:83:31:
73:e0:dd:07:09:11:c3:bd:5d:9d:43:5e:99:87:4c:
4f:37:af:72:9d:09:9f:1f:4d:03:42:0f:8d:62:1c:
d3:30:35:27:97:2e:e2:d2:f0:4e:40:51:80:37:18:
0c:d0:4d:59:82:09:42:62:9a:b6:de:72:cc:c3:34:
5a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1F:01:B9:23:02:93:87:62:D6:56:21:80:B7:29:29:06:1C:63:C2
X509v3 Authority Key Identifier:
keyid:06:37:D1:CE:5D:C3:FA:80:0E:1D:1D:CF:BD:AA:84:1F:DD:D4:39:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjfRzl3D-oAOHR3PvaqEH93UOQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:7f:12:4c:33:38:9f:4f:4d:54:cc:0f:8a:ba:91:c0:da:7b:
e4:74:83:84:14:36:a9:f0:1b:a8:51:fb:65:91:2c:d3:a2:13:
db:35:7c:09:91:47:d8:87:37:48:9b:00:16:d6:5a:cf:4d:d5:
8f:db:eb:69:15:12:05:3f:f6:b9:f7:ee:ed:43:ed:80:34:7c:
10:74:08:40:cd:e8:21:5f:2d:a6:db:7e:02:18:be:7d:56:f5:
a7:b8:f4:f1:67:80:12:8c:55:29:c4:70:d5:90:c9:23:4b:4a:
ca:6b:68:99:de:88:ec:35:ff:9a:3c:60:79:f6:fd:9b:4c:3d:
97:67:e8:3e:2e:ba:12:32:5f:d1:19:99:2c:75:6d:22:1b:3d:
d1:99:29:2a:98:13:a8:b0:87:9e:e7:e7:ce:d1:05:12:61:9c:
3f:9f:d1:6d:d7:f7:c0:a9:79:32:0c:4d:a6:ce:7f:61:38:0c:
31:ce:a1:30:fd:12:0f:2a:21:f3:1e:81:9a:85:ce:58:5b:12:
72:11:3f:72:4e:ba:a6:af:33:3f:2f:d3:59:e7:3d:56:2f:18:
49:00:38:fc:96:09:d6:cf:b9:33:4c:6e:47:65:4a:75:26:7b:
c7:d7:02:32:33:e5:14:3e:05:71:63:ee:45:1c:77:3a:b9:cb:
1c:43:f1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:39 2025 by rpki-client