Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
File: BdCJpxSLJhoFnmZv66WfkqJowWw.mft (raw, json)
Hash identifier: fM4k3NJXRt9A4CzC520ilx7GZ030YtftLnhrjrpXvkQ=
Subject key identifier: AB:40:77:EA:AE:03:3D:09:1D:F3:C6:0D:49:5A:8A:1C:3F:C7:28:82
Authority key identifier: 05:D0:89:A7:14:8B:26:1A:05:9E:66:6F:EB:A5:9F:92:A2:68:C1:6C
Certificate issuer: /CN=05d089a7148b261a059e666feba59f92a268c16c
Certificate serial: 0198D5BC3016D66A5273456763F1B3A00937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
Manifest number: 0A98
Signing time: Sat 23 Aug 2025 07:02:16 +0000
Manifest this update: Sat 23 Aug 2025 07:02:16 +0000
Manifest next update: Sun 24 Aug 2025 07:02:16 +0000
Files and hashes: 1: BdCJpxSLJhoFnmZv66WfkqJowWw.crl (hash: lyihMl+59CnV7HOo12INgtelBxrLwrdPhJx9S7nKWVw=)
2: Q0dd8vdSkfkyu7Ca5EdjCX19qvM.roa (hash: Ja8TY9ppItEtGQ58YrEF8baZTzPApBnwUBrs1rAUdS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:30:16:d6:6a:52:73:45:67:63:f1:b3:a0:09:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05d089a7148b261a059e666feba59f92a268c16c
Validity
Not Before: Aug 23 07:02:16 2025 GMT
Not After : Aug 24 07:02:16 2025 GMT
Subject: CN=ab4077eaae033d091df3c60d495a8a1c3fc72882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f9:f2:11:9d:c8:3f:42:c7:74:26:75:48:3f:
8c:14:5f:3e:5b:1c:31:50:7a:ae:1e:77:3e:94:5f:
06:e4:90:8d:c5:6b:c4:a0:a4:6a:fb:7c:d1:f6:3c:
c2:43:17:6e:4b:58:dc:0d:76:11:a2:48:7c:79:a0:
02:cd:c7:a4:4a:b9:31:59:d0:c0:6d:69:c0:5c:72:
66:57:25:17:3d:85:27:d3:6e:be:d6:d0:69:65:45:
42:1e:10:2e:43:2f:2d:a0:28:d4:21:93:0d:9c:4f:
18:57:ea:e9:0b:08:d6:92:e5:c1:6e:66:55:2f:40:
e4:ad:c5:58:80:77:81:1c:86:9a:bb:a2:c6:ea:24:
db:a0:08:e4:81:54:be:15:b1:29:07:c2:65:80:fe:
c8:d2:a1:29:8d:39:14:dd:23:90:f8:e7:ad:22:cb:
d2:36:53:99:44:c8:82:26:13:5f:9d:57:70:d9:b4:
8e:2f:c3:52:46:3c:d1:5c:f8:29:3f:25:97:bc:19:
09:13:03:26:c9:f9:54:d8:b5:10:f3:82:56:3d:0b:
5f:27:20:d5:25:e3:bc:02:2c:3a:c6:e9:1b:02:aa:
24:eb:ba:99:2c:6a:92:13:a7:cd:03:02:d4:65:c2:
bb:17:2d:27:19:20:08:69:4e:1a:62:4e:c6:98:33:
bb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:40:77:EA:AE:03:3D:09:1D:F3:C6:0D:49:5A:8A:1C:3F:C7:28:82
X509v3 Authority Key Identifier:
keyid:05:D0:89:A7:14:8B:26:1A:05:9E:66:6F:EB:A5:9F:92:A2:68:C1:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:bd:81:09:20:2a:19:e0:aa:ca:f8:ca:fb:fc:88:eb:5f:63:
4f:9d:55:1c:07:ba:5f:c1:7a:8d:f9:7d:f5:4e:86:7d:9a:a9:
5b:46:32:cc:d1:a5:de:38:a3:e4:45:05:a4:04:24:48:df:c4:
e6:01:48:09:ef:49:1a:57:e3:c9:ba:c5:f8:53:4a:4b:1a:ff:
00:fb:1f:8a:7e:2c:bc:d3:b5:d2:58:58:90:16:1f:0d:23:52:
5a:4d:fd:39:40:18:31:fd:27:75:5d:c0:55:45:5d:17:ee:a9:
b3:c9:c5:dc:2a:ea:cf:dc:3f:95:da:49:76:3c:88:23:eb:a4:
29:00:fd:07:e5:f5:69:7a:41:d3:32:50:97:80:65:54:a8:9b:
b1:ee:9a:9b:30:88:a2:dc:24:20:05:85:c6:86:bb:76:d7:1f:
cd:bb:d1:b5:fe:5c:39:9d:f6:1d:31:af:4e:ff:30:b1:64:81:
16:3e:47:47:a8:f8:6a:43:29:5e:49:72:1a:9e:d2:80:76:ec:
c8:47:b7:07:83:ea:d6:77:8e:c4:0d:b9:67:c4:7c:b0:45:ed:
49:fc:de:84:55:28:81:d0:9d:04:33:7d:f6:fb:99:20:6d:6a:
4a:1a:be:35:63:f7:30:4c:60:03:b4:c7:13:5b:5e:53:c5:96:
39:13:62:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:11 2025 by rpki-client