Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
File: BjfRzl3D-oAOHR3PvaqEH93UOQU.mft (raw, json)
Hash identifier: Hu4a0Cjhh5pdpcJV5scU/JIDNH/uKsZ5RQuQP3zw8iQ=
Subject key identifier: B7:86:FC:1E:20:2D:2F:01:5E:C2:94:9E:22:80:83:CD:71:4A:19:B4
Authority key identifier: 06:37:D1:CE:5D:C3:FA:80:0E:1D:1D:CF:BD:AA:84:1F:DD:D4:39:05
Certificate issuer: /CN=0637d1ce5dc3fa800e1d1dcfbdaa841fddd43905
Certificate serial: 0198D5BB84C4FB221A86070658DB52ED38DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjfRzl3D-oAOHR3PvaqEH93UOQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
Manifest number: 1493
Signing time: Sat 23 Aug 2025 07:01:32 +0000
Manifest this update: Sat 23 Aug 2025 07:01:32 +0000
Manifest next update: Sun 24 Aug 2025 07:01:32 +0000
Files and hashes: 1: BjfRzl3D-oAOHR3PvaqEH93UOQU.crl (hash: FLOH137xhiEqE5+dmiyTL1CC7FnmDK3WRCv7bx04Kl0=)
2: cqs27uyShJLHJ19HI0wbuu9K6Mw.roa (hash: Io5SItgYrsPuNxUpvFI/wIElXAajrpA8wR3rTKWJTBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjfRzl3D-oAOHR3PvaqEH93UOQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:84:c4:fb:22:1a:86:07:06:58:db:52:ed:38:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0637d1ce5dc3fa800e1d1dcfbdaa841fddd43905
Validity
Not Before: Aug 23 07:01:32 2025 GMT
Not After : Aug 24 07:01:32 2025 GMT
Subject: CN=b786fc1e202d2f015ec2949e228083cd714a19b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1e:9e:b0:40:69:b3:0d:31:a3:66:1c:94:5f:
ce:4f:53:20:29:f5:28:6e:0c:84:29:26:0b:6b:c8:
12:9b:1d:6d:79:0c:2a:74:e8:e3:8f:84:d7:90:56:
98:6a:50:90:29:bf:dc:98:be:9e:37:6c:08:94:a1:
dc:8c:fc:5e:13:a9:6c:85:c7:eb:9c:70:e3:aa:a5:
4b:d2:36:cf:c6:4f:19:e9:58:03:ce:51:42:7e:d3:
df:10:f0:cc:16:a3:62:7c:c3:c9:3e:58:b4:7b:ce:
cc:05:93:2f:20:53:07:b6:32:03:80:8f:fb:c6:25:
27:55:36:e4:5f:59:13:0f:97:cf:c3:be:cb:7e:07:
4b:d1:17:67:70:10:f4:f2:d2:4b:21:e5:26:70:4d:
67:46:06:36:42:38:06:2f:70:e4:45:47:a6:cb:3e:
5d:51:fd:55:6e:dc:03:f7:14:0e:b4:53:db:98:b2:
42:8b:58:03:86:55:3f:2f:5a:bb:ee:fc:fa:85:92:
45:3a:73:8d:a6:6c:57:b8:dc:e9:44:c4:23:87:30:
56:6f:94:f5:3b:6a:eb:7d:67:d8:97:48:fd:fc:53:
53:ba:63:62:b0:08:fb:51:96:79:15:49:a7:b4:4f:
65:d9:fa:67:9f:3f:be:1c:f6:18:08:d5:44:66:df:
3c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:86:FC:1E:20:2D:2F:01:5E:C2:94:9E:22:80:83:CD:71:4A:19:B4
X509v3 Authority Key Identifier:
keyid:06:37:D1:CE:5D:C3:FA:80:0E:1D:1D:CF:BD:AA:84:1F:DD:D4:39:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjfRzl3D-oAOHR3PvaqEH93UOQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:0b:2a:80:7e:7d:80:6f:c2:aa:a2:e7:e1:68:63:93:79:06:
18:27:3e:b4:c3:4f:f2:f9:52:21:de:d5:34:15:a2:85:a0:aa:
86:52:43:94:a5:10:1b:27:c8:3f:b1:c3:b1:a1:b1:b9:5d:79:
7d:b4:d2:39:91:7f:83:39:4e:da:e0:8f:a8:ba:f9:65:a2:56:
ac:0a:70:3d:a7:55:08:2b:81:f9:77:71:15:f3:95:1b:72:f4:
1e:94:2e:13:50:53:f6:95:8e:cb:cf:99:89:39:6b:fe:f7:f1:
60:09:40:55:42:e3:67:af:f9:fd:78:72:57:2f:b3:e8:ef:3d:
19:ca:54:5a:7d:08:8f:21:f4:df:3a:8b:29:77:65:ae:5b:2d:
b5:b8:7e:02:70:f1:47:8b:c0:58:53:56:bc:7f:32:fa:59:07:
3f:c8:28:c4:52:e8:7d:97:25:6a:4a:e0:e2:08:64:03:8a:cd:
98:a8:9e:08:53:8e:b0:f1:41:82:3c:a5:5d:a4:51:74:e5:61:
42:93:70:93:b9:02:82:fe:2c:8e:b4:a2:0a:4f:bb:b3:52:3b:
94:1c:3a:46:68:2a:93:79:d6:7e:0c:2e:f6:38:4d:83:be:2e:
7d:8d:c9:36:cb:24:87:1c:d7:83:aa:f3:af:ab:7e:d7:56:90:
84:46:02:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:44 2025 by rpki-client