Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
File: BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft (raw, json)
Hash identifier: 7apZJ2sdrRoUXesYJ/ssxfNg9sHbNm9Y7hidZIRcBPQ=
Subject key identifier: F2:1C:D6:47:1E:5B:2D:EA:BE:55:F2:91:97:EB:D0:CD:79:23:AB:19
Authority key identifier: 05:77:BB:93:24:FC:75:0A:53:E0:55:84:8E:F0:69:03:41:6C:3E:08
Certificate issuer: /CN=0577bb9324fc750a53e055848ef06903416c3e08
Certificate serial: 0198D473DC681EF2E9FD84EEA72115A619A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
Manifest number: 1644
Signing time: Sat 23 Aug 2025 01:03:39 +0000
Manifest this update: Sat 23 Aug 2025 01:03:39 +0000
Manifest next update: Sun 24 Aug 2025 01:03:39 +0000
Files and hashes: 1: BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl (hash: 7kZKUI5IN6oNAK3uiQPSIiFHzV76cP0CtejpQhsJa58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:dc:68:1e:f2:e9:fd:84:ee:a7:21:15:a6:19:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0577bb9324fc750a53e055848ef06903416c3e08
Validity
Not Before: Aug 23 01:03:39 2025 GMT
Not After : Aug 24 01:03:39 2025 GMT
Subject: CN=f21cd6471e5b2deabe55f29197ebd0cd7923ab19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f2:33:a8:bb:95:ec:73:d1:8b:b0:f8:f6:3a:
2b:e1:d9:4d:28:8a:2d:72:a4:82:09:24:aa:8b:de:
96:a1:5b:77:d2:e7:df:dd:ed:0c:e0:f7:78:1e:4b:
1c:63:22:74:b3:65:a4:b7:5b:69:a7:29:26:20:93:
00:16:40:ab:af:49:c1:b1:e2:ab:5b:bb:e1:42:26:
eb:53:e7:1a:22:9f:f3:aa:7e:b0:4f:3b:37:79:19:
1c:bc:4f:19:8c:95:8c:b8:80:97:31:17:39:d6:25:
f4:15:1a:48:ab:87:ff:ba:97:f6:2b:4e:28:6e:7a:
93:d8:3d:34:5e:f7:5c:40:7e:4a:be:6f:f9:44:8d:
86:fa:be:19:25:09:60:b4:63:7d:ba:72:de:e6:01:
b6:5a:d0:01:39:90:44:8a:53:29:4e:89:74:6d:bc:
48:ec:bc:67:17:6a:ad:99:ef:34:e1:81:8e:09:f3:
bf:d1:f6:a8:ea:2e:78:6a:b3:08:36:a5:e7:2d:dd:
ca:69:5a:0d:5f:91:4a:8a:b2:97:ac:5f:d3:93:f6:
5e:33:b6:5f:74:53:c6:27:94:38:33:7c:b7:bc:35:
8c:f5:cd:00:1e:62:12:fa:a1:b8:70:0d:75:e6:98:
13:e9:37:61:7d:02:ed:5d:48:d0:67:95:d4:d5:34:
00:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1C:D6:47:1E:5B:2D:EA:BE:55:F2:91:97:EB:D0:CD:79:23:AB:19
X509v3 Authority Key Identifier:
keyid:05:77:BB:93:24:FC:75:0A:53:E0:55:84:8E:F0:69:03:41:6C:3E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:5c:14:e2:23:da:0c:0c:18:d9:19:39:a3:59:b8:80:81:46:
f2:bb:da:a7:21:bc:2d:97:b6:37:9d:1f:18:63:41:f0:3b:2b:
d0:eb:12:32:c6:33:d6:a8:61:37:3c:23:8e:9d:40:60:b5:48:
95:08:b1:5f:5d:d7:24:66:a8:29:95:98:f0:01:5f:f2:9a:64:
af:34:8f:8a:b9:69:0e:16:92:00:6c:df:1c:33:fb:2e:cd:0d:
97:45:5b:b9:98:f8:1f:7c:a2:2a:37:7a:5a:a9:61:71:e9:8e:
68:c9:94:e0:ed:75:e2:a7:44:e1:13:7f:51:ba:ce:b6:97:6f:
17:0d:19:24:ab:fa:5d:c0:cb:7c:70:a3:b9:6f:b5:3c:a6:a8:
57:02:17:23:90:c8:2a:56:3e:3c:59:f4:6a:3d:07:a2:c1:98:
8f:ad:60:56:30:9a:0a:84:4b:01:e5:69:18:33:69:f3:3b:ef:
21:bf:c1:d5:18:74:86:21:69:8d:f8:cc:be:96:4d:1f:9c:90:
62:db:13:8c:b9:62:08:d5:be:85:7d:8d:ca:cf:3c:29:b9:a2:
10:b7:c6:9d:85:ba:87:ab:f8:5d:59:3e:09:41:45:c6:25:f0:
c9:3f:81:15:88:6a:9c:60:42:00:34:33:5e:ed:85:60:36:e8:
34:9f:93:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:10 2025 by rpki-client