Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
File: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft (raw, json)
Hash identifier: Fo+VW+bqcn1Lt+mYsLKtW66G2qf4Vka6l42nSDiV7xE=
Subject key identifier: 58:26:7F:A5:DD:41:C2:BD:22:E1:EB:49:C2:88:86:BE:C1:31:A0:F1
Authority key identifier: 04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
Certificate issuer: /CN=049d4f66598668079353721c21935a00319f6759
Certificate serial: 0199FF22E9EC2A586464F467F5A1016C3426
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
Manifest number: 1629
Signing time: Mon 20 Oct 2025 01:01:42 +0000
Manifest this update: Mon 20 Oct 2025 01:01:42 +0000
Manifest next update: Tue 21 Oct 2025 01:01:42 +0000
Files and hashes: 1: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl (hash: CkgLlaqxXdAbvjFeYZG9n1GDfA1ZBfFFAVQInkE71l0=)
2: SBmVAlodI7xnOy2vKS8iSbQ2L-c.roa (hash: Qjp3sgcgeheRs3EPb5cqh07Ww165sSq1F+/13L3R5T4=)
3: g0VLR4dmZuTUcMAH8lFP9-35SEQ.roa (hash: VJzmNAtUkQtzYlHT74BgFDK6+FNteK79SAvoZ6OtMvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:e9:ec:2a:58:64:64:f4:67:f5:a1:01:6c:34:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049d4f66598668079353721c21935a00319f6759
Validity
Not Before: Oct 20 01:01:42 2025 GMT
Not After : Oct 21 01:01:42 2025 GMT
Subject: CN=58267fa5dd41c2bd22e1eb49c28886bec131a0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f2:8a:b1:04:8d:b5:c3:5f:ac:4a:41:fe:a5:
ef:61:76:86:34:88:c6:f6:48:ce:0f:78:e7:56:55:
aa:c2:8a:15:4e:f6:8c:72:5e:13:82:12:45:05:e1:
a8:8f:9f:27:0b:d1:a3:ef:28:86:53:ac:71:4f:f9:
97:1b:70:ee:47:05:ae:1f:de:d3:2e:48:70:9e:31:
82:a5:6d:6c:7f:d4:0c:7b:aa:ec:8c:18:d3:bd:09:
af:e7:dd:a3:4d:44:f8:68:c9:c4:9c:6a:e4:78:cc:
13:27:ce:a1:55:21:12:d2:b9:6a:fb:8e:51:84:81:
77:7a:99:fa:66:80:e9:76:79:6c:ea:09:a6:7d:3c:
1f:eb:5c:c3:d7:55:41:d7:88:69:f4:40:d4:e1:5e:
52:d9:9e:a1:65:aa:5b:bc:0f:6a:22:86:e2:69:be:
3f:2f:45:6e:92:a6:55:a1:66:c2:98:ac:23:78:ed:
94:86:15:76:58:90:e1:b9:4a:32:b5:a9:8d:01:9c:
b2:9a:d3:6b:61:b6:10:d8:44:d9:34:cb:2f:cf:d1:
0f:63:41:75:7e:36:49:43:d3:a3:b3:21:a4:17:6c:
13:16:10:ce:b9:ec:c1:ba:f9:d9:11:6d:bf:00:d3:
75:2d:56:b5:57:70:48:11:c1:48:53:40:99:af:d7:
0d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:26:7F:A5:DD:41:C2:BD:22:E1:EB:49:C2:88:86:BE:C1:31:A0:F1
X509v3 Authority Key Identifier:
keyid:04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:cd:58:25:8a:f4:0b:eb:aa:d4:2b:80:32:e8:87:59:6f:d2:
b2:b1:84:55:22:a0:12:7b:c9:8a:2d:94:66:f8:c8:32:4b:96:
f7:09:1d:f2:5f:a7:d2:80:03:f6:4c:db:67:37:45:09:0a:ff:
8c:2a:ab:f5:be:1d:8c:68:77:c6:e9:fe:ef:89:4a:af:98:65:
33:cd:a3:9a:e1:51:d4:dd:b4:d2:9d:56:c3:cb:78:b5:f6:74:
94:d7:ca:94:82:d7:2d:da:37:08:ba:00:bb:98:75:fc:c1:e2:
4a:cf:5f:2a:9e:97:0c:02:2b:c2:01:99:42:4e:9b:46:45:59:
4a:15:15:50:69:1d:20:37:81:d7:5b:3b:63:a8:82:2a:2d:05:
40:38:6b:72:50:98:bc:11:5f:d3:89:ea:9c:05:8a:fc:3f:c1:
fd:fa:23:7d:0a:e5:e9:03:36:7a:37:eb:06:44:0e:62:7d:9b:
c5:99:08:71:dd:e9:4c:4c:fc:e7:9e:b2:aa:3f:07:b9:63:10:
2b:9c:2e:06:76:60:7f:07:22:56:79:a9:25:23:e6:0d:c1:7c:
48:95:20:34:e2:10:1c:ff:e1:b9:01:b1:e8:f7:e6:73:d7:d3:
6e:70:55:b0:5f:9f:17:92:c6:ea:67:64:33:a2:34:83:e7:74:
4d:ea:03:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:39:44 2025 by rpki-client