Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
File: BjJUIiHK72RIzFRSFOAABxvVa4Y.mft (raw, json)
Hash identifier: E3pMU2hpkkKOCJdsIfdG+TOnZd2FLgP8/IDiTwy0i64=
Subject key identifier: BE:87:D5:59:17:7B:75:40:EC:EA:CF:7E:14:0B:9F:CB:99:01:BF:00
Authority key identifier: 06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
Certificate issuer: /CN=0632542221caef6448cc545214e000071bd56b86
Certificate serial: 0198D5BBF95CEDD14F9113C8963BE63F6CD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
Manifest number: 1080
Signing time: Sat 23 Aug 2025 07:02:02 +0000
Manifest this update: Sat 23 Aug 2025 07:02:02 +0000
Manifest next update: Sun 24 Aug 2025 07:02:02 +0000
Files and hashes: 1: BjJUIiHK72RIzFRSFOAABxvVa4Y.crl (hash: Ihyk9vKVblrIaRmjzxVIs/Ur4JrSwWpG/Q98R11KgSA=)
2: GI2JqYrwfOB4H4-WFfI5AvlAgXw.roa (hash: wx2kzfl5/eKVV8cW/FCB0zPSR7qqCq5F0M1Y8hdHGxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:f9:5c:ed:d1:4f:91:13:c8:96:3b:e6:3f:6c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0632542221caef6448cc545214e000071bd56b86
Validity
Not Before: Aug 23 07:02:02 2025 GMT
Not After : Aug 24 07:02:02 2025 GMT
Subject: CN=be87d559177b7540eceacf7e140b9fcb9901bf00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7f:dc:10:36:ab:24:9a:52:1f:02:2e:bd:df:
fa:02:9f:d6:8c:54:c5:eb:f8:1f:c5:76:9f:52:65:
e8:e6:5d:30:ec:c1:35:3b:47:57:d2:20:b9:61:26:
05:ce:ca:51:09:27:94:63:59:dc:15:95:5b:78:cd:
d3:85:af:d6:3d:f7:fd:bf:b0:4e:b8:6d:54:00:31:
9d:c7:2c:3e:a9:6b:11:91:8b:f6:06:25:6b:85:2e:
73:ab:4e:3a:3e:cb:fe:f0:b1:6e:b0:7f:0f:bb:59:
4a:3e:94:7c:53:3b:1a:f2:91:e6:d3:3d:a0:e3:5d:
7c:2d:7f:dd:0c:b9:38:6d:93:47:9a:1c:58:55:12:
41:bd:0a:7f:ef:bc:78:56:c2:32:55:e5:5e:f8:70:
2c:30:25:0c:d1:d6:1f:89:00:db:86:65:23:25:e9:
d3:aa:d3:80:6d:4f:fe:fc:b7:ae:c1:96:eb:8f:59:
de:3f:8d:34:16:2e:b5:6f:11:af:6e:ca:92:a8:65:
47:b5:26:9e:9a:21:cb:a6:d3:ab:bf:c4:81:2a:1f:
49:01:bd:6c:81:a4:93:6b:c0:af:13:49:45:44:b2:
23:28:c8:cf:d1:53:7b:0d:bd:e7:8d:dd:83:d2:bf:
a3:9b:08:6f:61:24:0e:4a:0b:da:b0:0e:63:fc:2e:
28:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:87:D5:59:17:7B:75:40:EC:EA:CF:7E:14:0B:9F:CB:99:01:BF:00
X509v3 Authority Key Identifier:
keyid:06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:67:33:76:dd:59:90:aa:94:1c:00:4b:45:ef:56:d7:bc:d0:
de:f0:3c:b2:c6:3b:bc:d0:49:41:49:80:54:5f:b0:fc:4a:0a:
74:2e:c9:13:db:5f:aa:86:e8:75:93:7b:35:83:85:ea:7b:f5:
1b:9e:ed:9b:a4:b5:73:e3:9f:85:73:86:8e:63:6d:0f:81:09:
1f:8e:3d:a6:62:5f:ec:93:ba:b8:f6:d8:85:44:c3:9f:02:fc:
fa:f1:0d:f9:17:64:7b:a3:23:ff:f8:56:49:d7:5e:41:21:39:
52:bb:f2:14:8a:b3:df:c7:75:2a:40:3e:f5:18:2b:b9:bb:39:
71:b3:cc:78:f7:80:18:1a:c5:49:4c:72:c7:7e:c1:d2:aa:69:
43:ff:64:81:8a:a8:d8:4b:4e:79:f3:1c:24:be:d9:3d:92:e9:
77:dc:02:8a:38:3f:82:a3:0b:d9:6c:ef:96:57:50:81:53:53:
da:ed:52:48:d6:c7:b5:8b:51:cb:f3:fa:4b:e0:2a:71:e1:15:
67:c7:98:8f:bf:3a:ea:9f:7e:f3:3d:b3:f2:16:78:96:15:eb:
11:b4:c6:80:dd:b7:2f:6c:c8:14:c3:68:d0:2f:78:0b:1a:ff:
75:05:7e:9c:9d:ea:77:ae:ad:00:6f:43:4e:92:0e:2e:52:63:
f8:4b:87:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:06 2025 by rpki-client