
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
File: BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft (raw, json)
Hash identifier: /aotkGKMJ9XM44KHPqadF7zo4MCfAdwb1iYicV4130c=
Subject key identifier: 31:BB:EC:DD:A3:5A:92:A2:E5:8B:A4:74:42:F8:7C:20:C6:4C:DF:2E
Authority key identifier: 04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4
Certificate issuer: /CN=0438e64299e545d3637074cb946b400f7990ecf4
Certificate serial: 0197B63293DBDD7750984BEC99E93AEE87FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 11:00:57 +0000
Manifest this update: Sat 28 Jun 2025 11:00:57 +0000
Manifest next update: Sun 29 Jun 2025 11:00:57 +0000
Files and hashes: 1: BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl (hash: p+NFOD78O411OUI8vAS/mVskSlTS8BLkNVLcQZyspbw=)
2: SiRuz5DPXz9HshuqRJYB7VyQXyE.roa (hash: bgytOhweICmzdqwpnRZX5G1gQSNta8oc7hejatWlbv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:93:db:dd:77:50:98:4b:ec:99:e9:3a:ee:87:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0438e64299e545d3637074cb946b400f7990ecf4
Validity
Not Before: Jun 28 11:00:57 2025 GMT
Not After : Jun 29 11:00:57 2025 GMT
Subject: CN=31bbecdda35a92a2e58ba47442f87c20c64cdf2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ff:71:03:1f:e3:e6:21:70:06:2f:cc:bd:ed:
c1:a6:55:81:e6:02:9b:27:4a:ae:93:86:08:af:91:
e5:78:31:ef:89:56:d2:45:9a:80:c9:89:7a:97:f9:
44:93:64:c2:5c:6e:c5:69:6e:c0:b7:6a:6a:46:55:
30:e1:cd:d9:0d:28:76:ee:e8:1f:98:f8:bd:03:f9:
43:ef:88:98:72:0a:19:d1:54:40:fc:76:08:99:f8:
74:86:2e:e2:9e:c5:bf:a2:0e:8a:bd:10:15:2b:ed:
ab:66:60:1d:10:e2:b4:af:af:90:3a:07:79:f3:fe:
77:b8:c4:73:13:93:53:4b:8e:9f:c2:23:13:2d:6c:
29:1d:ae:bd:d8:e7:42:94:14:8a:6b:a9:89:b1:f0:
e9:70:b1:ef:23:d7:8e:18:fb:7b:89:39:07:d7:8e:
dd:2b:0f:7c:ba:4e:8f:10:4c:1f:0e:d1:86:34:19:
47:e6:06:db:eb:98:64:bc:8c:a3:3e:9f:e3:ef:c1:
fd:af:6c:14:ab:2e:47:a5:c3:a3:0d:ce:d9:91:80:
87:df:ca:3b:40:fa:35:21:ab:40:c6:f6:8a:34:75:
c1:d0:77:b8:df:07:49:d7:11:0b:02:04:ba:48:b4:
e4:93:83:85:6e:5a:af:30:25:b4:45:16:08:1b:19:
31:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BB:EC:DD:A3:5A:92:A2:E5:8B:A4:74:42:F8:7C:20:C6:4C:DF:2E
X509v3 Authority Key Identifier:
keyid:04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:51:d5:c1:3d:03:35:b9:41:f8:83:fb:fd:17:4b:76:75:13:
55:c2:9e:e5:02:61:1a:80:d5:a1:70:a8:26:e0:0d:82:d3:07:
19:5f:41:e0:03:21:62:5b:a9:ed:87:16:48:38:db:b9:32:c0:
64:ff:b2:08:a8:11:cf:72:06:14:92:1c:2f:33:3a:4f:55:2c:
fd:12:e2:a3:9b:80:58:1f:6f:36:4f:bf:0c:e0:d9:ef:6f:c0:
28:94:03:cb:20:79:c7:23:ca:df:78:30:b6:80:da:17:64:fd:
58:f9:cd:1a:1b:8a:3c:32:95:a7:c5:9a:5f:51:7a:dc:eb:76:
24:11:91:46:29:d0:9f:a3:06:56:15:b4:43:24:21:41:67:71:
e2:de:4a:a6:04:81:69:3b:ac:e6:e1:ab:50:e0:03:c6:da:9f:
ee:8e:e3:ed:9b:b9:8c:98:e9:ee:29:d4:cd:4e:bd:c1:12:73:
df:9f:68:37:49:76:08:29:94:0f:96:11:3f:24:d9:c1:4a:33:
a1:2e:70:40:66:e3:fa:b9:64:d0:58:6b:4b:40:2e:b1:96:c4:
0f:d5:db:d7:2a:cf:46:d6:3d:e9:c7:ad:63:8d:55:d6:e8:32:
09:76:9e:91:53:f8:d9:84:84:79:64:31:f0:71:75:67:f6:e0:
23:61:78:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:12:53 2025 by rpki-client