Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
File: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft (raw, json)
Hash identifier: KXipUwppo9LPKKrdHwZML+iVJuFmyhV4XQqDPO3bxLU=
Subject key identifier: 98:4D:47:32:CF:07:09:2F:1C:1A:AD:F2:84:FA:22:CD:69:ED:27:F0
Authority key identifier: 04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
Certificate issuer: /CN=049d4f66598668079353721c21935a00319f6759
Certificate serial: 019A011140731F703599F1984A5C51DDB6B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
Manifest number: 162A
Signing time: Mon 20 Oct 2025 10:01:39 +0000
Manifest this update: Mon 20 Oct 2025 10:01:39 +0000
Manifest next update: Tue 21 Oct 2025 10:01:39 +0000
Files and hashes: 1: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl (hash: 9J9iWFPqRunTLgizJ/57zdXz7YUdmWPGOfzKYFy6D0Q=)
2: SBmVAlodI7xnOy2vKS8iSbQ2L-c.roa (hash: Qjp3sgcgeheRs3EPb5cqh07Ww165sSq1F+/13L3R5T4=)
3: g0VLR4dmZuTUcMAH8lFP9-35SEQ.roa (hash: VJzmNAtUkQtzYlHT74BgFDK6+FNteK79SAvoZ6OtMvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:11:40:73:1f:70:35:99:f1:98:4a:5c:51:dd:b6:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049d4f66598668079353721c21935a00319f6759
Validity
Not Before: Oct 20 10:01:39 2025 GMT
Not After : Oct 21 10:01:39 2025 GMT
Subject: CN=984d4732cf07092f1c1aadf284fa22cd69ed27f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:17:6f:af:cc:8c:f9:6c:2f:fe:71:9b:f9:94:
fe:d5:c1:d4:0d:15:32:8c:3d:1c:a0:69:d5:67:4b:
2e:44:c8:62:83:9f:51:38:00:bb:8e:a5:f8:ea:ca:
d9:31:58:80:11:1b:e9:2b:90:af:a9:37:fe:8f:95:
d8:84:c4:58:1d:da:06:b6:d9:95:2f:dc:c1:a7:64:
76:b1:6a:e3:0d:33:f2:57:50:a7:84:8f:0e:d4:90:
c7:71:20:31:20:22:20:cf:52:36:8c:d9:67:4e:8d:
e1:32:79:89:ce:da:cf:91:ca:d1:32:bc:f3:1f:eb:
c6:23:4b:85:a3:f1:b9:15:e5:40:b0:96:5b:9f:5c:
0c:16:63:0b:19:96:c6:fa:be:ff:d3:0d:98:33:51:
e1:5c:46:f0:f9:de:42:1b:fd:21:1d:31:8d:bd:f0:
5b:a3:c9:2c:2f:a7:d5:a1:32:ec:6d:f5:8f:7b:7e:
2f:7b:f8:11:2b:7d:59:81:79:df:2a:f8:89:fd:86:
32:2b:e4:aa:89:7b:a6:d3:02:39:cb:f2:de:d8:56:
bd:dc:e9:3e:42:22:fa:7b:fb:35:66:2e:79:d0:bb:
bb:93:ef:34:fb:d3:8a:84:43:cd:21:74:58:09:5e:
ab:d1:18:02:47:c3:fd:6b:bf:5e:b3:86:81:ac:89:
4e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4D:47:32:CF:07:09:2F:1C:1A:AD:F2:84:FA:22:CD:69:ED:27:F0
X509v3 Authority Key Identifier:
keyid:04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:4b:39:44:6a:3f:b7:7f:16:c6:a2:28:4c:12:70:59:a3:b6:
dc:bf:80:27:ff:57:46:56:66:f5:9b:aa:fa:2c:d7:7e:9f:3f:
d2:65:ea:de:1c:f6:7d:a3:0f:67:2b:b9:d1:c1:2d:b5:f2:c5:
93:98:2e:b3:92:da:21:e5:31:23:8e:bd:68:77:a6:c5:9b:70:
d4:3c:ed:ed:6c:17:5d:bd:5d:26:33:c8:dc:60:c6:15:35:93:
2b:56:04:7c:3d:66:0b:67:87:bd:44:25:54:28:dd:26:3c:a0:
76:4c:aa:dc:d4:7a:f5:2a:b8:a4:d8:7a:91:df:51:b8:54:ae:
2a:a8:eb:38:20:1e:f6:cd:f6:b8:00:4a:24:41:00:da:e2:0a:
85:71:66:fd:98:90:23:83:eb:17:de:e2:00:96:2c:2c:e2:d4:
2b:90:4c:bc:a9:22:3a:a0:38:72:c1:f1:90:92:fe:f9:30:cf:
a9:b9:2f:85:7b:4c:ed:03:49:c3:0d:c3:3d:15:eb:fe:e4:ec:
0d:2e:4d:5b:b5:02:93:8f:4a:51:85:0d:f4:59:c5:12:c7:e0:
4e:3c:ff:50:0c:41:08:4e:18:76:52:44:a9:6f:b2:12:f6:dc:
90:b5:d1:50:de:25:c4:08:49:3f:0e:cc:25:86:1b:02:c3:42:
74:12:78:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:25:46 2025 by rpki-client