Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
File: 1-BjewyV4QBB3SCAJDo4KCD3d29w.mft (raw, json)
Hash identifier: //dNnk8zGkZ3mUg5TlFkpQrYyG6oBl5gw5z/by0Z+PY=
Subject key identifier: E7:90:49:2C:BA:88:DD:52:B4:1F:9A:70:A3:25:55:B3:68:17:C0:A0
Authority key identifier: F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC
Certificate issuer: /CN=f818dec325784010774820090e8e0a083ddddbdc
Certificate serial: 0199FF9034F7E54AD6401E7918F6724D8274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
Manifest number: 13E8
Signing time: Mon 20 Oct 2025 03:01:04 +0000
Manifest this update: Mon 20 Oct 2025 03:01:04 +0000
Manifest next update: Tue 21 Oct 2025 03:01:04 +0000
Files and hashes: 1: 1-BjewyV4QBB3SCAJDo4KCD3d29w.crl (hash: fHVyaM1ARiJ6fybyjviV5a9W6cnuqeYMZb2ctO2qCwM=)
2: 4F5-U-IyeBv7jgG-t4o9hlhRjTc.roa (hash: gpdr7Kl3pmYPlDObQ8u3VFe1L12/MWoBa72QoNTdi8I=)
3: CpPijEmYlerTV19r3A6mYbWd_7U.roa (hash: paOU+LXyw4VdCUY8Gvj627Nds5jNeA0tyswAnoZqaYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:90:34:f7:e5:4a:d6:40:1e:79:18:f6:72:4d:82:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f818dec325784010774820090e8e0a083ddddbdc
Validity
Not Before: Oct 20 03:01:04 2025 GMT
Not After : Oct 21 03:01:04 2025 GMT
Subject: CN=e790492cba88dd52b41f9a70a32555b36817c0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1b:c0:6d:6d:ba:b7:75:5b:90:8a:97:27:33:
d2:0f:f1:0b:5f:c3:1b:4e:7e:04:cf:d0:c5:ed:23:
27:28:cd:30:49:73:c0:38:e1:20:09:a2:d8:0e:22:
63:d2:4b:ec:bd:8e:ce:9f:b0:ae:23:27:5f:93:cc:
9d:b8:da:e1:8e:03:a8:95:28:0f:1a:03:73:f2:e2:
c8:3b:51:0e:ce:85:92:fe:b0:99:5d:79:d2:bd:7f:
5a:7d:82:56:a0:1b:eb:37:7f:2c:2e:e4:84:d2:3c:
63:24:a0:97:ac:4f:78:ab:d5:29:66:c9:58:64:f0:
fa:38:a2:36:1b:3a:56:a6:ae:8d:db:46:e7:d7:c2:
40:91:d8:31:79:0a:7e:ec:47:3a:1b:7e:26:8f:de:
49:cc:ac:a6:b3:5a:2c:69:76:88:57:e1:fd:f1:16:
09:4b:b5:51:18:7c:20:11:ff:cf:d5:98:fc:14:c5:
38:05:53:e4:0c:bf:46:03:56:fe:60:c7:ee:24:b1:
c5:6a:cb:c0:55:a4:f4:a6:fd:61:a9:83:47:ff:5e:
72:fd:20:bf:e6:d7:53:86:8c:98:11:2e:ed:c8:0a:
6d:2d:16:c3:09:d6:f2:4c:44:22:a7:6f:93:b2:6e:
6d:53:a7:88:b3:02:46:10:25:04:6c:91:72:1f:ef:
c7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:90:49:2C:BA:88:DD:52:B4:1F:9A:70:A3:25:55:B3:68:17:C0:A0
X509v3 Authority Key Identifier:
keyid:F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:bf:8f:f1:36:14:c6:33:51:8f:6b:d1:20:78:e8:c9:07:a2:
ee:37:58:43:98:25:f2:6f:b8:58:d9:c1:aa:3b:ba:fa:d0:3f:
c1:f9:27:06:d2:dd:77:09:e0:7b:fc:9a:d5:d7:a4:98:e7:0c:
0b:b8:66:6b:35:ce:10:54:66:f1:53:bd:e7:30:14:64:67:50:
88:e5:9e:5b:c9:ee:dc:7d:4f:53:07:d1:5f:84:9e:af:54:e5:
41:f3:fc:eb:11:71:ab:50:35:10:a1:a7:4b:32:c8:76:5f:4f:
1c:0b:32:df:01:95:9c:7c:62:e9:37:88:b2:18:32:9d:c1:06:
96:bd:bc:85:80:8a:53:76:86:49:5a:53:37:45:ba:51:8b:1a:
6f:08:22:a9:d4:f1:b7:83:f4:c5:a3:ee:d2:d7:dc:6b:56:da:
67:7d:fe:9a:45:70:12:30:71:4c:4d:ff:1f:05:24:4e:1c:ce:
14:de:ed:a6:fa:78:d6:5e:7d:e7:51:c6:43:d7:e5:2d:9f:16:
19:21:5d:dc:03:cc:c2:fe:72:d5:1f:c9:b2:9b:67:40:e4:4f:
1b:13:28:df:1d:7b:dc:08:dc:01:db:99:c3:74:1e:38:a7:4c:
34:08:54:70:0d:f2:ab:07:64:11:64:b8:3b:14:c3:9e:d5:d3:
6b:e8:db:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:37:57 2025 by rpki-client