Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
File: BjJUIiHK72RIzFRSFOAABxvVa4Y.mft (raw, json)
Hash identifier: UBth1EZksWeLGf7KGy2WvsvUhmxon9r2oevnlaSXQx0=
Subject key identifier: C3:B0:A6:12:E6:39:58:16:C3:1F:64:F4:16:64:6D:42:E9:8F:CB:34
Authority key identifier: 06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
Certificate issuer: /CN=0632542221caef6448cc545214e000071bd56b86
Certificate serial: 0199FD33E80103C737CC094D3BE6C9F3A392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
Manifest number: 1119
Signing time: Sun 19 Oct 2025 16:01:01 +0000
Manifest this update: Sun 19 Oct 2025 16:01:01 +0000
Manifest next update: Mon 20 Oct 2025 16:01:01 +0000
Files and hashes: 1: BjJUIiHK72RIzFRSFOAABxvVa4Y.crl (hash: 6BgYyVhEVhG0/OhR4KJpTi0Z7kbf69g2mOuCTSea+rA=)
2: GI2JqYrwfOB4H4-WFfI5AvlAgXw.roa (hash: wx2kzfl5/eKVV8cW/FCB0zPSR7qqCq5F0M1Y8hdHGxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 16:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:e8:01:03:c7:37:cc:09:4d:3b:e6:c9:f3:a3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0632542221caef6448cc545214e000071bd56b86
Validity
Not Before: Oct 19 16:01:01 2025 GMT
Not After : Oct 20 16:01:01 2025 GMT
Subject: CN=c3b0a612e6395816c31f64f416646d42e98fcb34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f8:53:25:86:a0:b8:be:f2:41:85:c2:39:59:
c6:58:59:9f:49:0d:f4:1b:3b:bb:6f:26:60:fc:7e:
c5:87:91:55:ec:fc:5e:03:81:ec:9b:96:20:9d:6a:
ea:fa:3f:b0:d8:0a:54:9a:ea:56:ab:bf:f5:31:a4:
c5:b4:c1:c2:20:41:a7:7e:29:a5:f3:54:f6:a3:47:
6d:7f:39:27:9c:58:9b:e0:30:5b:11:8b:fd:65:b1:
d4:bc:7b:b8:06:7a:4e:29:01:2a:35:87:c5:eb:a0:
5b:28:a4:52:bc:62:ee:2f:4d:f1:50:9a:93:82:f0:
86:f5:bc:34:91:ce:69:0e:93:a9:31:de:45:03:0a:
16:70:d6:d6:37:45:f1:9e:7c:9b:cc:8d:7b:ab:7f:
76:67:ee:fa:f7:32:60:92:69:be:6d:53:0b:2f:f0:
70:22:ba:59:ed:33:08:d6:4c:a1:98:5b:04:20:18:
c6:c8:63:6a:3c:dd:2c:c2:9c:4c:52:03:f1:45:dc:
18:0b:bc:20:a2:1f:c3:ff:b7:c0:ec:4a:6a:4d:c4:
ca:24:01:84:22:5d:18:63:e6:e6:dd:3f:8f:bc:62:
2d:a3:41:f1:4f:f6:72:c1:16:21:97:75:e2:6d:98:
4f:e0:48:98:01:be:83:89:13:65:41:51:a9:23:bb:
07:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B0:A6:12:E6:39:58:16:C3:1F:64:F4:16:64:6D:42:E9:8F:CB:34
X509v3 Authority Key Identifier:
keyid:06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:03:6b:c8:72:c8:88:8e:59:1b:bb:90:c8:ae:5f:55:0b:64:
39:f1:85:96:bb:38:0f:3a:fe:5e:66:b3:ac:89:80:71:88:be:
30:de:68:95:c8:95:fa:e8:98:60:a2:57:01:38:c1:4b:5d:45:
7b:6f:68:62:6e:d5:0d:c4:87:ca:b4:43:03:e2:f4:3b:ab:58:
e0:ba:41:46:20:3b:79:7e:88:bc:4a:48:2a:7c:74:7b:e7:82:
47:c7:92:f7:e8:a1:c8:c3:ba:c4:4b:f3:97:ad:b8:30:35:75:
2a:a2:88:4c:3e:90:11:77:41:3e:6b:61:69:51:c9:fd:bb:3f:
26:21:92:87:38:94:06:c7:89:5d:ce:89:96:c1:fa:52:06:a3:
f3:3f:bb:16:7b:1b:17:2c:74:7f:4e:f0:3d:88:ef:af:85:72:
57:bd:d4:dd:99:a9:fe:c0:c4:c0:ec:0d:c9:d5:3b:e8:24:ee:
30:16:28:09:71:bc:bc:2d:4c:e0:a7:f3:2c:45:14:1d:0c:47:
43:18:df:c3:67:6f:00:3b:81:03:b7:c9:43:2b:0e:c2:57:c4:
c5:ab:11:22:90:b4:bc:a6:09:49:42:dc:96:3b:46:38:17:85:
cf:eb:3e:7e:fa:71:d0:61:43:42:bf:50:27:52:ef:f4:2c:c0:
45:83:ea:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:07:17 2025 by rpki-client