Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
File: BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft (raw, json)
Hash identifier: jzcDVrBYFmF8KcE760ce/wxLM9DaPPKtaa4Uvsp3rqk=
Subject key identifier: 9C:E0:0E:96:A4:C5:1F:00:B4:3C:7D:E7:EB:4D:27:EB:68:EA:10:BB
Authority key identifier: 05:53:C4:33:F6:C2:25:01:9D:9C:B5:A4:33:00:12:F4:C7:7A:1F:3E
Certificate issuer: /CN=0553c433f6c225019d9cb5a4330012f4c77a1f3e
Certificate serial: 0199FBEBE0052B12C7E8AE22E151A889BA37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 10:02:43 +0000
Manifest this update: Sun 19 Oct 2025 10:02:43 +0000
Manifest next update: Mon 20 Oct 2025 10:02:43 +0000
Files and hashes: 1: BVPEM_bCJQGdnLWkMwAS9Md6Hz4.crl (hash: DjIru9rMBevZxB4nGsB4rsCw79alfmSIqc0nos3rPSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:e0:05:2b:12:c7:e8:ae:22:e1:51:a8:89:ba:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0553c433f6c225019d9cb5a4330012f4c77a1f3e
Validity
Not Before: Oct 19 10:02:43 2025 GMT
Not After : Oct 20 10:02:43 2025 GMT
Subject: CN=9ce00e96a4c51f00b43c7de7eb4d27eb68ea10bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5c:50:6f:56:bd:e6:df:87:a8:ba:31:75:dc:
e5:f2:6e:63:5b:ab:b2:3f:e5:3e:4f:ab:8d:54:14:
b0:50:eb:11:63:65:f5:12:26:40:d4:9c:6f:09:dc:
86:9a:f8:22:b8:94:51:10:79:66:ea:41:a7:b9:91:
51:bf:4d:c2:39:16:84:d2:02:1c:a9:02:5c:c7:b2:
89:bb:90:b6:64:64:6f:3a:e8:d5:45:db:9e:44:29:
d4:65:7f:00:a9:e2:75:95:f7:76:3c:fb:17:38:f8:
42:8c:38:59:90:fb:bb:9f:21:4c:b1:46:2b:fe:4d:
84:85:22:b8:47:fd:d2:e4:72:a0:eb:a0:1c:74:63:
69:68:ab:69:03:eb:32:17:03:cf:89:50:b7:46:39:
13:8d:49:fd:3a:4a:45:ad:b2:b2:43:54:f9:d0:ad:
b2:5d:a4:68:51:1e:8d:e0:f8:e2:4a:1b:c9:cd:8a:
d2:90:c7:54:0b:b9:bc:c9:dd:7e:ed:5a:78:43:af:
ce:e9:9f:f3:e6:ad:33:0b:7a:71:21:4f:31:2d:a3:
3b:76:6d:74:eb:96:a3:79:d1:ac:a9:4a:18:64:4a:
cb:40:74:2c:92:64:bc:ed:72:a6:23:66:ac:e2:8f:
f2:af:91:fe:ed:ee:b9:a8:2b:43:87:ce:cd:cd:75:
21:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E0:0E:96:A4:C5:1F:00:B4:3C:7D:E7:EB:4D:27:EB:68:EA:10:BB
X509v3 Authority Key Identifier:
keyid:05:53:C4:33:F6:C2:25:01:9D:9C:B5:A4:33:00:12:F4:C7:7A:1F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b9:90:a3:35:3a:34:27:d5:d2:eb:14:d1:d3:60:e0:c5:6a:
85:e0:bf:49:19:78:dc:5c:ed:8f:ca:0c:a3:d3:45:dd:ae:bd:
ef:94:12:fa:90:9d:8f:b8:23:7a:c4:0d:a5:e0:66:e9:5a:ff:
cd:1d:74:e8:e8:4f:bf:5e:e2:a6:f2:b8:cb:4e:51:23:3a:44:
b2:5c:f2:5b:52:67:2a:36:f4:82:f3:46:dd:2b:43:30:91:c3:
79:a1:e6:68:61:0a:32:f0:b2:89:7b:8b:21:ea:f3:9a:05:1d:
e2:eb:04:33:82:e4:7f:18:04:05:c6:c8:f7:d4:25:94:55:f1:
1b:ac:75:b7:bb:50:00:7d:e3:90:b9:ac:9a:54:98:63:90:a4:
87:6c:87:46:ef:0a:aa:ea:7f:20:c5:bd:af:e3:d6:a0:f9:9a:
f0:be:e5:82:44:3b:6d:13:19:45:51:a1:9b:12:68:ed:41:80:
50:1c:12:0d:c4:a9:d1:67:d2:e1:ad:a7:49:63:3f:0f:a9:bf:
22:62:a6:30:14:9b:5d:39:84:a6:a5:59:6b:83:9e:d7:c5:fb:
c2:44:c5:cc:93:15:4d:06:f8:7b:23:a4:ea:58:f9:13:ea:18:
e2:15:4a:86:66:ad:a4:4e:6e:f8:8f:02:5f:8e:eb:25:cc:ab:
6a:86:bd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:32 2025 by rpki-client