Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
File: BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft (raw, json)
Hash identifier: Kx3HSSS/Kk+ijJ390HTUiP9/YiFjGqiGIXw26tDNYDo=
Subject key identifier: 1B:9C:7D:F5:68:D9:88:73:3F:42:26:30:68:1D:A5:31:CB:5C:04:09
Authority key identifier: 04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4
Certificate issuer: /CN=0438e64299e545d3637074cb946b400f7990ecf4
Certificate serial: 0198D5F119EE747DCB6D8200E2E69E0037A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 08:00:04 +0000
Manifest this update: Sat 23 Aug 2025 08:00:04 +0000
Manifest next update: Sun 24 Aug 2025 08:00:04 +0000
Files and hashes: 1: BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl (hash: 3p7btmyP4sM27cx0aNVmWvg+5sC7ljCeS+OF9g70ro0=)
2: SiRuz5DPXz9HshuqRJYB7VyQXyE.roa (hash: bgytOhweICmzdqwpnRZX5G1gQSNta8oc7hejatWlbv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:19:ee:74:7d:cb:6d:82:00:e2:e6:9e:00:37:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0438e64299e545d3637074cb946b400f7990ecf4
Validity
Not Before: Aug 23 08:00:04 2025 GMT
Not After : Aug 24 08:00:04 2025 GMT
Subject: CN=1b9c7df568d988733f422630681da531cb5c0409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b8:60:9c:19:8b:73:02:e5:06:89:1b:da:f3:
b6:9e:fb:97:af:f7:97:ce:f1:3b:94:66:67:66:7f:
66:a8:6c:96:94:14:8d:91:01:ea:ed:cd:f5:85:34:
86:22:7f:17:81:24:df:29:66:38:8a:10:79:26:b4:
42:73:96:a2:5f:49:9c:67:e2:99:60:c4:e3:23:03:
6a:72:8f:97:0b:e0:47:72:f2:26:49:55:c3:a0:c3:
52:65:f3:d1:e9:a9:da:ec:25:db:79:78:5b:af:d6:
fa:2d:15:77:a6:95:a0:f6:db:39:1a:fb:94:43:4d:
3e:ce:f1:94:9e:3d:3a:43:43:cc:bb:c1:ac:18:67:
b7:9a:f3:5d:8d:1e:36:a2:c8:54:a0:c0:40:95:67:
f7:9b:02:74:27:9e:b6:e9:0e:66:a6:40:9d:88:18:
ef:f9:08:df:d6:fd:00:ab:0d:15:90:3b:7a:23:fb:
5c:3a:e0:b9:9d:68:5d:c2:1f:24:d3:d0:3f:0b:26:
84:81:14:3b:98:b7:a8:a2:f2:df:cd:d7:b4:d9:67:
e5:d5:d0:34:fa:c1:37:fc:12:01:a2:4a:8d:af:89:
06:15:e8:9c:24:1c:37:40:2b:30:f9:dc:d8:02:03:
a3:3f:50:c3:85:ba:be:b6:37:b6:a1:41:8b:5b:0f:
94:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9C:7D:F5:68:D9:88:73:3F:42:26:30:68:1D:A5:31:CB:5C:04:09
X509v3 Authority Key Identifier:
keyid:04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:90:62:95:92:92:5c:a6:0a:95:62:50:99:58:68:ca:86:95:
5d:37:5d:a1:7a:34:e9:68:41:b9:bf:e1:18:19:e4:11:c0:f0:
99:8f:b6:66:c3:07:19:ea:e8:95:76:49:93:aa:cc:19:28:bf:
dd:a3:40:aa:e4:ec:b7:cb:bf:73:c4:e3:5a:14:ff:1a:44:ba:
f3:f7:8d:0d:ad:6d:45:18:8e:66:a6:75:4b:a3:0c:aa:86:9d:
ce:9b:9f:0c:55:66:6f:b6:a2:a1:39:bb:86:fd:1d:a8:49:8f:
26:a5:5a:c7:d2:32:2b:f8:6d:6d:67:4e:50:55:cc:a4:aa:e4:
af:d1:4a:07:7d:bf:59:1a:1e:6a:70:3a:ed:35:d6:f3:ad:2f:
81:b0:21:6f:17:2b:80:b5:aa:a2:d0:dc:37:bb:14:71:0c:a7:
bc:6f:46:03:b7:a0:5e:d7:93:33:e0:7f:20:0c:bb:2e:2d:ef:
1e:89:33:c4:65:5e:74:4d:11:0f:34:31:34:55:66:9a:b4:5e:
eb:e7:c7:cd:7c:95:22:0f:e9:9b:40:81:57:78:fd:24:d1:ba:
67:b5:38:b1:88:10:d7:c9:97:cc:d5:b5:41:b9:41:77:b7:16:
fa:e2:de:23:7a:45:b3:28:2b:46:33:a8:0d:9d:cb:c8:9d:ec:
c2:8c:e1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:51:59 2025 by rpki-client