Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
File: BjJUIiHK72RIzFRSFOAABxvVa4Y.mft (raw, json)
Hash identifier: gl0lLOB40xx1VueMbH+4sSHHPC+FlLfM2wGp0mICPLI=
Subject key identifier: 91:9C:92:5F:96:E7:16:F1:83:FA:F2:A0:79:05:AF:DE:03:20:1C:B6
Authority key identifier: 06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
Certificate issuer: /CN=0632542221caef6448cc545214e000071bd56b86
Certificate serial: 0197B7EA58D0A19D81C058B4DCBC2A53556B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
Manifest number: 0FEC
Signing time: Sat 28 Jun 2025 19:01:18 +0000
Manifest this update: Sat 28 Jun 2025 19:01:18 +0000
Manifest next update: Sun 29 Jun 2025 19:01:18 +0000
Files and hashes: 1: BjJUIiHK72RIzFRSFOAABxvVa4Y.crl (hash: 0GXJWz9IsAXmjLpGfEOwX5hRZVAqxoExSeONIHVrPCI=)
2: GI2JqYrwfOB4H4-WFfI5AvlAgXw.roa (hash: wx2kzfl5/eKVV8cW/FCB0zPSR7qqCq5F0M1Y8hdHGxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:58:d0:a1:9d:81:c0:58:b4:dc:bc:2a:53:55:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0632542221caef6448cc545214e000071bd56b86
Validity
Not Before: Jun 28 19:01:18 2025 GMT
Not After : Jun 29 19:01:18 2025 GMT
Subject: CN=919c925f96e716f183faf2a07905afde03201cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:36:ba:aa:4d:02:8b:c6:4f:ad:9d:d9:6d:5a:
ca:3c:17:b9:44:b8:f5:75:82:6c:c8:08:ac:49:0c:
a6:e8:5b:2e:a5:19:d0:98:48:99:40:72:5b:a0:52:
1f:02:94:34:ed:b0:a0:ea:1d:cc:87:08:58:24:7a:
58:d8:ba:ef:95:77:e0:0d:b8:a6:78:63:b9:40:f2:
ce:6f:6b:55:ab:56:7c:c4:38:53:d0:c7:ce:b9:78:
a8:a8:65:1c:f0:65:aa:d3:eb:ca:bb:cb:81:9a:bc:
04:ab:15:63:c3:a2:44:d0:f4:00:ea:16:60:f2:44:
5d:f8:5f:24:5a:4c:bd:d3:ff:90:b2:ff:2e:6e:c9:
de:60:e9:9c:66:f3:77:c6:dd:03:d3:d2:bd:af:4e:
35:b3:ca:95:b8:85:cc:9f:26:5c:40:f3:d0:0b:46:
38:3c:2c:15:54:54:9a:09:35:e7:17:f3:9f:ef:02:
d8:87:45:d0:07:54:cc:7b:a4:1d:e9:47:27:41:74:
7c:ef:c3:b5:91:ea:22:a7:98:96:e8:fc:1c:42:25:
05:4a:3f:03:68:88:d2:6f:a3:59:fb:fc:0b:8f:03:
1b:95:65:0d:d1:06:c3:81:35:73:36:d6:3e:1a:84:
c1:1a:fd:58:5a:9b:2a:f1:d9:77:9c:98:64:f1:4d:
96:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9C:92:5F:96:E7:16:F1:83:FA:F2:A0:79:05:AF:DE:03:20:1C:B6
X509v3 Authority Key Identifier:
keyid:06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:52:8c:a3:80:5f:3f:5e:8c:68:7f:f3:e6:37:a7:11:11:63:
b4:46:4d:90:80:99:ef:0c:a5:e6:32:60:43:c2:1c:e0:a0:e5:
fc:f8:ff:be:65:0a:17:b9:5d:4b:e8:3d:57:07:0a:63:b8:2c:
2c:59:6e:e6:11:15:08:e1:5c:b7:18:27:6c:6e:3c:22:f6:e7:
f8:e4:95:dc:da:75:80:d3:d0:2e:5f:87:46:63:4d:8f:09:2a:
0a:17:48:0e:9b:d5:18:ba:7b:5e:e4:8c:11:84:9d:79:11:99:
fa:13:6c:8a:ea:2f:b9:a3:a1:46:ea:1e:90:b8:99:bf:1c:de:
0f:df:f7:b1:a0:38:f9:ae:6a:29:6f:e4:bd:71:9e:05:53:cb:
9b:ce:c2:72:1d:f0:da:4e:5d:46:42:9b:a8:fc:57:e3:8e:98:
a1:ec:3b:90:cc:64:c1:11:5f:98:61:93:fb:86:cd:cd:04:77:
19:cf:ff:18:2d:2e:65:98:df:34:4b:b6:e1:aa:a7:7d:12:61:
5e:7f:25:9d:eb:57:bd:f7:94:41:18:8f:23:3b:7e:06:4e:de:
52:9b:94:65:5a:4b:99:11:85:eb:7c:12:e6:9c:9a:c7:4e:0e:
ed:0f:0e:9f:97:21:3b:89:20:67:cd:cd:16:90:08:0f:51:e3:
b0:c7:52:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:51:15 2025 by rpki-client