Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
File: BjDTqdwDknrlWoHYbKkb3J7nTHM.mft (raw, json)
Hash identifier: fsPiNll9P5PbXqOIP2+AVoiju2DyLMYJIoFhO+JFcFI=
Subject key identifier: C1:D2:15:D3:FF:5A:F6:91:72:B9:D5:3E:C4:7C:BC:4A:D9:CF:4B:B6
Authority key identifier: 06:30:D3:A9:DC:03:92:7A:E5:5A:81:D8:6C:A9:1B:DC:9E:E7:4C:73
Certificate issuer: /CN=0630d3a9dc03927ae55a81d86ca91bdc9ee74c73
Certificate serial: 0197B6D779CB24560DD0AC67D20CB5C480FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
Manifest number: 128F
Signing time: Sat 28 Jun 2025 14:01:04 +0000
Manifest this update: Sat 28 Jun 2025 14:01:04 +0000
Manifest next update: Sun 29 Jun 2025 14:01:04 +0000
Files and hashes: 1: BjDTqdwDknrlWoHYbKkb3J7nTHM.crl (hash: uci4T3qja/NVAWEfo3qfbzMo7fOG4OKaLA8Luca5h2Q=)
2: J3YmuWHk-BjnoadebZpHdu7-LaY.roa (hash: e9ui3M/lG4q+b0jcfdPkcURL44aWIzlT3g4fpEz2u0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:79:cb:24:56:0d:d0:ac:67:d2:0c:b5:c4:80:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0630d3a9dc03927ae55a81d86ca91bdc9ee74c73
Validity
Not Before: Jun 28 14:01:04 2025 GMT
Not After : Jun 29 14:01:04 2025 GMT
Subject: CN=c1d215d3ff5af69172b9d53ec47cbc4ad9cf4bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7a:f8:62:17:3e:c8:8f:92:6d:de:8e:56:60:
93:0c:19:88:3a:80:ef:f4:6e:e8:59:70:a5:26:9c:
18:87:00:7b:4f:21:9b:48:3b:02:63:2d:ab:be:3a:
42:33:d3:02:45:d7:a4:cf:dd:b2:05:aa:c4:5c:fa:
89:b9:30:66:8f:f1:e5:e8:a0:ee:1f:53:d2:a4:d5:
0b:b0:ef:0d:13:e8:2a:46:9d:ca:fa:cd:d3:fc:18:
e6:83:c1:66:74:df:47:2b:49:c9:42:6e:f1:78:bf:
45:62:c9:28:0e:ab:71:1b:78:77:f0:06:3b:ee:21:
6f:f5:7d:15:f3:74:de:c2:ea:54:f2:e1:b4:96:8e:
c6:40:83:96:16:4d:6b:4b:99:98:2d:a1:3e:e0:32:
47:21:84:51:68:8b:b4:93:b5:15:69:b6:2c:30:ba:
c1:80:36:eb:47:a5:bb:8b:57:a3:e7:a6:ef:c3:13:
c1:7b:ed:17:01:90:19:5f:a3:d5:f1:56:61:93:d4:
d9:54:4a:b7:e7:59:60:84:a6:d5:49:a3:f4:fb:18:
c2:52:00:d7:7e:12:1c:26:ff:43:74:9c:1e:1e:93:
9a:c5:5d:74:ad:9d:11:3f:06:39:7d:6f:b1:2b:99:
c7:1b:2d:0d:06:76:0a:2d:da:17:94:0b:49:65:f2:
da:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D2:15:D3:FF:5A:F6:91:72:B9:D5:3E:C4:7C:BC:4A:D9:CF:4B:B6
X509v3 Authority Key Identifier:
keyid:06:30:D3:A9:DC:03:92:7A:E5:5A:81:D8:6C:A9:1B:DC:9E:E7:4C:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:3c:73:ee:72:92:c9:c3:fd:b2:b0:c1:b8:44:91:98:73:11:
a6:b7:f1:de:fb:d8:2d:16:a7:db:9f:3d:93:f6:ba:42:b0:28:
40:d3:c2:79:88:6a:22:c9:24:ed:74:e6:04:d9:50:28:6d:a7:
e2:4f:4e:09:ca:0c:b6:60:a6:24:a5:bf:7f:20:70:9f:67:4e:
82:e2:97:01:92:75:58:09:cd:ce:29:cc:c8:59:d6:0a:eb:36:
91:46:3b:52:d0:85:2d:c5:54:d3:36:1d:79:a9:fd:28:96:1e:
6f:70:63:ca:9f:e4:a3:5a:84:db:5c:3d:45:31:95:3a:90:96:
db:0a:c7:df:19:9f:e5:e4:8d:bd:f6:05:d9:f3:a6:64:b5:7b:
26:45:6e:30:f7:41:30:19:fd:00:e4:1c:b0:2d:11:91:d9:da:
8d:57:c2:27:fa:c6:a5:b8:e0:3c:45:0f:b2:c2:84:c4:ca:5a:
fb:e2:cd:87:21:9f:85:5c:03:ef:84:36:18:ae:05:77:a3:bb:
c9:22:4a:1b:ab:91:17:20:3b:8c:12:68:72:d1:37:6e:fa:fe:
5d:d4:63:2d:cb:24:32:96:cc:26:98:6d:06:06:74:5c:6e:66:
ca:4a:52:7b:9a:f9:da:80:9d:2c:b0:a8:04:bb:87:c1:60:75:
b1:1e:68:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:31:03 2025 by rpki-client