
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/BjcCShgkPkX40Eqtrr66kKVp6IM.mft
File: BjcCShgkPkX40Eqtrr66kKVp6IM.mft (raw, json)
Hash identifier: YOobSrp1I12z1UaG0MqJP4rgtqEnWN96jkFapM7FCNU=
Subject key identifier: 14:F5:27:D3:55:49:DB:21:99:93:06:42:2C:9F:54:F6:4D:6A:B2:19
Authority key identifier: 06:37:02:4A:18:24:3E:45:F8:D0:4A:AD:AE:BE:BA:90:A5:69:E8:83
Certificate issuer: /CN=0637024a18243e45f8d04aadaebeba90a569e883
Certificate serial: 0199FB4637E39301AFAF99C4DEC6B608BD5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjcCShgkPkX40Eqtrr66kKVp6IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/BjcCShgkPkX40Eqtrr66kKVp6IM.mft
Manifest number: 0157
Signing time: Sun 19 Oct 2025 07:01:47 +0000
Manifest this update: Sun 19 Oct 2025 07:01:47 +0000
Manifest next update: Mon 20 Oct 2025 07:01:47 +0000
Files and hashes: 1: 6FSKWG-EGTHbHR3wSnfZzAiHhXY.roa (hash: VmwTyVH3w9xwUHgrQoPTWP7hFDzEQmvR4R1wYGDo/XU=)
2: BjcCShgkPkX40Eqtrr66kKVp6IM.crl (hash: 3caa8q9TgWtH4p6P+dnYRmOpEN6n/+qQFfuFndMiSg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/BjcCShgkPkX40Eqtrr66kKVp6IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/BjcCShgkPkX40Eqtrr66kKVp6IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjcCShgkPkX40Eqtrr66kKVp6IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:37:e3:93:01:af:af:99:c4:de:c6:b6:08:bd:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0637024a18243e45f8d04aadaebeba90a569e883
Validity
Not Before: Oct 19 07:01:47 2025 GMT
Not After : Oct 20 07:01:47 2025 GMT
Subject: CN=14f527d35549db21999306422c9f54f64d6ab219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:54:cf:29:e7:06:dc:6c:ff:1a:95:01:36:b8:
ec:b1:26:6c:e4:41:f8:77:b8:e4:ac:b6:1a:f1:8d:
0a:87:52:d6:71:14:41:16:1a:bd:d3:ae:62:ab:98:
54:a8:4a:49:b9:57:84:23:57:40:11:e1:a7:93:74:
e9:e8:70:cd:8b:5d:fe:08:f7:bd:44:20:c9:ab:50:
35:74:97:9c:5d:a9:4f:ce:c5:79:7e:22:12:ef:74:
c1:b5:32:b8:9b:65:37:e2:9f:43:04:0b:0f:b3:fe:
5e:5e:3d:67:56:8d:d5:31:11:07:aa:41:89:a5:f6:
da:e0:13:42:ac:61:b2:79:b0:c5:2e:30:82:0e:fc:
84:b0:fa:96:3d:49:38:02:fe:35:d6:b3:0a:16:fb:
f2:c3:22:f5:60:a2:41:89:b4:42:be:06:4b:53:82:
27:11:f3:83:4f:36:28:8f:53:7f:04:33:ff:0e:9a:
57:d8:6a:79:7a:8f:3e:6e:0a:c6:b6:d7:9f:06:5a:
11:f6:f6:d4:7c:b6:b3:0a:1b:1d:cb:86:e4:eb:82:
83:64:c0:83:cc:ce:38:db:44:58:f7:18:be:46:08:
00:27:69:99:c3:e3:ca:49:52:33:ef:de:74:89:41:
fb:42:a7:1c:97:ef:d1:05:9d:28:95:6a:6b:fc:ee:
fa:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F5:27:D3:55:49:DB:21:99:93:06:42:2C:9F:54:F6:4D:6A:B2:19
X509v3 Authority Key Identifier:
keyid:06:37:02:4A:18:24:3E:45:F8:D0:4A:AD:AE:BE:BA:90:A5:69:E8:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjcCShgkPkX40Eqtrr66kKVp6IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/BjcCShgkPkX40Eqtrr66kKVp6IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/BjcCShgkPkX40Eqtrr66kKVp6IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:a6:be:69:37:66:c3:94:da:aa:94:c5:9c:71:17:ef:7e:18:
a2:41:59:95:a4:61:32:17:bb:c0:26:fe:9d:e6:b6:f5:e7:01:
77:6e:a2:76:07:25:47:f5:26:4e:0f:1e:fc:8c:39:4d:3b:df:
ad:6d:49:d0:1b:90:86:4f:a3:d2:26:33:55:76:47:a1:fd:d5:
2a:e9:71:68:5f:fe:83:11:09:7c:c6:95:55:39:41:2f:4c:30:
d4:b0:ba:06:7e:2e:2c:5d:e0:fe:19:25:5e:f3:e1:11:4c:c8:
fa:42:c6:20:5a:ce:58:bb:84:e0:0d:b4:22:65:ad:dc:48:1e:
16:f7:3d:bf:06:43:52:9e:bc:4d:76:3e:dd:9c:e6:b5:61:30:
2f:d9:49:64:52:32:2b:d6:f6:2e:22:be:79:06:6b:1c:fc:f6:
c9:8e:8c:d4:5e:80:b5:fd:02:ce:bc:f4:70:79:58:1f:da:11:
92:5a:18:45:ca:5e:c1:32:a4:16:44:f1:67:53:48:3c:46:11:
91:e0:3e:2f:67:8f:b9:9e:fb:b3:79:b2:a1:ee:99:48:8f:db:
02:72:ed:42:61:86:36:38:85:08:f0:ca:a2:fa:7e:ca:c6:47:
47:85:85:02:4c:d1:11:ed:0f:71:1a:c8:bf:c8:70:6a:a5:65:
01:e2:38:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:13 2025 by rpki-client