Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
File: BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft (raw, json)
Hash identifier: jTnyDqNuZCtMWmV1po8sLSgQrUHL/zd+aeJwbzzQg5M=
Subject key identifier: 9C:F0:12:66:0F:C4:EC:A6:91:07:77:C6:61:55:4E:86:F4:5D:23:43
Authority key identifier: 04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C
Certificate issuer: /CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c
Certificate serial: 019A00A2FB0B06512CB629CD171394986F1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
Manifest number: 13C3
Signing time: Mon 20 Oct 2025 08:01:12 +0000
Manifest this update: Mon 20 Oct 2025 08:01:12 +0000
Manifest next update: Tue 21 Oct 2025 08:01:12 +0000
Files and hashes: 1: BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl (hash: Y78mB2Gksfu6abIWejyRK9oiype8+sl0jH478QjgU2o=)
2: hLFJquKo-2HrHgS3tC85H4343DU.roa (hash: nh7NbrSlckvvLuSFfKgI45STQ6KlvJNVJOtaSTVOkeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a2:fb:0b:06:51:2c:b6:29:cd:17:13:94:98:6f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c
Validity
Not Before: Oct 20 08:01:12 2025 GMT
Not After : Oct 21 08:01:12 2025 GMT
Subject: CN=9cf012660fc4eca6910777c661554e86f45d2343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:22:08:2e:56:7e:d4:8d:e2:4f:7a:55:4d:b1:
c3:05:d7:9a:8a:d1:6c:78:db:b5:10:3f:8c:ab:37:
9a:64:ca:22:8e:b3:10:63:f6:44:18:32:1d:1a:b4:
da:c2:40:48:2a:0b:bc:17:ab:36:e5:4c:86:24:80:
a3:d9:52:f1:96:0d:e6:40:4a:27:dd:57:a6:f5:8d:
40:61:9b:4a:a6:7c:24:ff:03:a5:21:a1:c8:55:9f:
cb:87:8a:2b:21:87:e5:58:b3:b6:0c:b3:ac:cf:0c:
f3:4d:3d:89:8d:29:8e:51:b5:59:a6:d5:21:d5:1e:
4e:15:21:88:a3:92:4e:b7:cd:7e:2a:45:a9:c3:d8:
80:5f:4e:1c:fa:cb:d6:42:76:d5:ad:52:4e:d9:88:
0c:66:4d:ac:97:49:35:3e:c1:b0:3f:66:58:cc:18:
27:03:41:f8:be:79:f1:b9:6a:1b:e6:61:ce:a8:e9:
c8:31:48:9a:b3:86:7b:af:17:a4:24:75:f2:33:df:
88:1d:cd:f8:80:fb:6e:9b:c8:bb:f3:3b:63:04:5d:
c1:a6:d8:13:88:7e:64:3d:cf:17:3b:42:d8:2e:20:
2c:6f:16:e9:89:12:91:0e:8c:29:88:5f:a5:f5:18:
17:0d:67:71:64:a2:46:55:c7:c2:3c:b9:4f:53:a8:
d3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F0:12:66:0F:C4:EC:A6:91:07:77:C6:61:55:4E:86:F4:5D:23:43
X509v3 Authority Key Identifier:
keyid:04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:5f:7b:38:6b:43:d7:71:92:95:05:de:12:80:43:34:74:be:
cc:04:4f:28:78:57:ab:ad:b3:b7:b0:d7:dd:f8:62:d6:9a:33:
b2:a2:4d:ad:9f:4a:d6:74:5a:f3:eb:1a:ec:91:18:d4:c6:c9:
32:9c:aa:ff:b8:f1:b0:e9:e1:4d:06:d7:fa:38:4d:60:7b:d1:
dc:4a:50:68:22:41:f8:cb:67:8c:e2:b7:6f:72:94:a5:d8:f7:
3e:59:b1:b3:03:7c:81:4a:81:c3:cb:33:2c:48:29:a9:68:dc:
09:a7:85:5d:f4:4b:a0:08:c4:ef:82:bf:ca:12:e5:d1:f5:1f:
ef:6b:87:ec:35:45:53:29:a7:ec:03:ee:f6:58:c0:71:f5:7f:
fc:ee:c2:93:11:3f:2f:aa:de:53:12:01:09:d2:c4:fc:1f:1c:
b1:fd:fc:06:f0:9c:89:e5:b1:ec:7d:b6:4c:98:d6:3f:05:b9:
92:3a:a8:d5:26:0a:48:f0:42:98:e7:27:b5:2a:43:90:e2:20:
fd:44:06:b0:c1:28:c4:bb:b7:c4:69:8a:dc:86:b6:ee:77:c9:
d8:df:2e:0d:05:97:b5:f8:2f:4a:ed:3c:2b:4a:7e:4d:88:51:
b4:ec:db:fd:f4:c6:b6:43:9a:97:2d:e8:27:37:42:02:40:fb:
db:68:db:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:45:02 2025 by rpki-client