Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
File: BjDTqdwDknrlWoHYbKkb3J7nTHM.mft (raw, json)
Hash identifier: Y+cIw9SUBeosu/tsmX3XduuoSayteSW2MlOUWcMjoIE=
Subject key identifier: 5A:C0:03:1C:24:78:B7:14:92:E8:92:F2:0A:1B:2C:0A:22:53:96:B8
Authority key identifier: 06:30:D3:A9:DC:03:92:7A:E5:5A:81:D8:6C:A9:1B:DC:9E:E7:4C:73
Certificate issuer: /CN=0630d3a9dc03927ae55a81d86ca91bdc9ee74c73
Certificate serial: 0198D4A834164C0FD735490B9014C7517854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
Manifest number: 1323
Signing time: Sat 23 Aug 2025 02:00:49 +0000
Manifest this update: Sat 23 Aug 2025 02:00:49 +0000
Manifest next update: Sun 24 Aug 2025 02:00:49 +0000
Files and hashes: 1: BjDTqdwDknrlWoHYbKkb3J7nTHM.crl (hash: RxYWvHA0dcZwZmBpidjF5nVJgmVQMA9PiZ8HMcZ6FVM=)
2: J3YmuWHk-BjnoadebZpHdu7-LaY.roa (hash: e9ui3M/lG4q+b0jcfdPkcURL44aWIzlT3g4fpEz2u0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:34:16:4c:0f:d7:35:49:0b:90:14:c7:51:78:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0630d3a9dc03927ae55a81d86ca91bdc9ee74c73
Validity
Not Before: Aug 23 02:00:49 2025 GMT
Not After : Aug 24 02:00:49 2025 GMT
Subject: CN=5ac0031c2478b71492e892f20a1b2c0a225396b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:46:e7:e7:d1:1c:f5:e7:15:82:e2:4c:ec:ca:
44:8a:c0:57:97:da:67:63:83:bf:20:a5:25:1e:76:
95:b7:f8:f4:73:94:b9:8b:05:f3:54:64:5f:13:7e:
9b:8a:7b:15:f4:35:d5:6e:58:0c:c2:e1:93:d0:4b:
40:f3:d4:e2:9a:73:61:ad:be:d6:79:2a:6f:c0:7a:
50:92:fc:7d:e9:ca:ff:18:b5:75:66:06:02:5d:4f:
33:c5:f5:c5:ee:af:c0:e8:77:25:12:c3:a2:2c:af:
fb:b5:fa:1f:01:17:89:cd:25:79:9d:1e:13:c7:53:
76:26:de:92:b4:7d:f6:42:21:d0:43:60:ab:49:c4:
83:9a:28:a1:13:b8:36:0c:83:ca:61:70:66:43:f7:
ca:60:2c:d2:ec:62:49:b8:a9:76:4c:4c:6a:a4:4d:
f9:72:04:cd:48:3b:b7:3a:dc:b8:11:a8:09:8d:0c:
2c:78:77:e2:c7:63:f3:03:f5:b9:fa:06:b7:cf:3d:
aa:b8:0b:f8:c8:0a:c0:cd:a0:ec:c3:5f:dd:b0:da:
08:4b:3a:d7:94:60:e5:f4:8e:4d:9a:c2:62:40:61:
80:69:56:1c:af:d7:06:28:98:23:38:26:72:51:e8:
9c:c9:71:09:27:a2:48:1e:2c:c6:75:e2:04:9e:dd:
a1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C0:03:1C:24:78:B7:14:92:E8:92:F2:0A:1B:2C:0A:22:53:96:B8
X509v3 Authority Key Identifier:
keyid:06:30:D3:A9:DC:03:92:7A:E5:5A:81:D8:6C:A9:1B:DC:9E:E7:4C:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f9:5e:68:8a:c6:b2:16:a0:a9:cc:ca:bc:2f:1b:18:bf:87:
52:0a:d7:30:7a:ac:39:e8:d6:e8:02:ae:61:4e:67:e4:6d:58:
c2:de:5f:fd:dd:f7:11:32:6b:3f:e9:d8:2d:d3:08:09:b8:dd:
47:05:48:78:eb:73:09:09:ae:15:49:aa:af:98:23:8f:14:9e:
7c:7e:d2:5d:85:2c:2f:91:97:76:db:e5:8c:f2:f7:5f:98:e3:
88:8b:af:48:46:75:2f:7f:a9:97:50:66:7f:cf:61:a4:8b:f6:
38:d0:ed:da:41:51:91:dc:d2:8e:3a:0e:39:38:a6:0d:9e:2b:
f8:6b:63:16:7c:69:c5:da:d2:1d:4a:c4:a6:8f:33:d6:1a:eb:
ac:8f:78:91:46:a2:52:52:51:94:5c:01:f9:18:64:0a:b7:80:
3a:09:e2:60:64:ef:7e:a1:22:b3:0f:e3:ca:33:04:02:4c:40:
38:f9:a4:b2:6f:6e:83:5d:9c:b7:57:ed:78:a6:98:74:74:f4:
b9:45:56:55:88:3e:c3:60:ca:31:22:08:e9:5c:2a:d1:25:9e:
55:a2:e7:58:c5:f9:3b:0e:03:70:2a:10:e4:7c:dc:04:58:26:
71:98:e9:c4:49:96:38:78:ba:3f:64:15:13:fd:5e:f7:78:1d:
ba:30:ac:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:14:59 2025 by rpki-client