Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
File: BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft (raw, json)
Hash identifier: cAZCCjJShZ3b8nKiZ9WEbrO8WaEt28okz2MQSn7VnLg=
Subject key identifier: 61:F7:31:A5:97:EA:20:B0:5B:CC:65:BC:D1:A4:AE:27:D8:34:26:2D
Authority key identifier: 04:90:43:47:A2:36:1A:CE:D7:C3:70:F7:44:6D:E7:08:27:7E:E6:D1
Certificate issuer: /CN=04904347a2361aced7c370f7446de708277ee6d1
Certificate serial: 019A52633C188CC621AF62D5718D72DB4654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
Manifest number: 060E
Signing time: Wed 05 Nov 2025 05:00:26 +0000
Manifest this update: Wed 05 Nov 2025 05:00:26 +0000
Manifest next update: Thu 06 Nov 2025 05:00:26 +0000
Files and hashes: 1: BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl (hash: MXc8ECVkjLNLuFcjityPBp0G0mb0Co7TlMjHwg6Ql9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:3c:18:8c:c6:21:af:62:d5:71:8d:72:db:46:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04904347a2361aced7c370f7446de708277ee6d1
Validity
Not Before: Nov 5 05:00:26 2025 GMT
Not After : Nov 6 05:00:26 2025 GMT
Subject: CN=61f731a597ea20b05bcc65bcd1a4ae27d834262d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9b:ab:4f:90:4c:26:8b:c6:24:bc:35:6f:5b:
87:64:32:91:81:ca:b0:df:75:64:1a:c4:fb:01:04:
f4:9a:29:f5:3c:e6:ff:f8:14:79:18:d2:80:d6:6b:
b9:72:4d:bb:07:b8:be:77:90:ff:e2:a7:6b:53:8a:
cd:14:11:d0:e6:c2:ab:71:8b:4e:1d:3a:d3:35:5c:
65:b9:65:2a:c5:de:fe:61:59:83:50:51:67:4d:08:
30:de:e5:07:c7:e7:d3:c9:84:c4:8f:17:1e:0c:d2:
f8:26:7d:6d:8b:0b:ec:72:35:81:33:58:99:64:f6:
fb:ea:88:50:01:21:97:a6:e6:cc:99:16:8b:27:3a:
1e:25:44:8a:7b:ec:7e:46:30:c1:b4:05:be:78:4f:
ea:5e:74:05:52:4e:9f:e5:f1:a3:5f:1e:63:16:43:
f5:79:f0:f4:0e:0d:a0:df:00:c1:f5:b3:2c:53:44:
82:8c:fe:7f:a9:a7:c1:60:8e:24:c3:c7:ce:06:5f:
8e:b4:a2:52:9e:14:ef:66:b2:46:e4:17:f5:3f:d9:
71:f9:35:1c:57:4a:f7:4d:a4:a7:25:6a:fc:52:d7:
49:73:45:bf:31:ed:a8:7e:e1:bd:16:fd:9b:1e:ae:
bd:2e:c9:98:57:48:ca:7b:70:61:a3:85:bc:6a:ae:
2b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F7:31:A5:97:EA:20:B0:5B:CC:65:BC:D1:A4:AE:27:D8:34:26:2D
X509v3 Authority Key Identifier:
keyid:04:90:43:47:A2:36:1A:CE:D7:C3:70:F7:44:6D:E7:08:27:7E:E6:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b1:2d:c2:c0:17:32:f7:ef:6e:ed:e9:f2:2e:d3:83:8d:88:
79:32:12:b6:01:cb:14:31:73:46:51:5c:6c:d0:a1:cf:cc:b7:
92:27:c4:41:0c:47:2a:74:8b:5f:72:8e:3d:6c:72:27:2a:f7:
fd:d7:fe:9f:a1:e2:07:91:a0:c6:91:82:61:6d:1b:f0:50:36:
74:ee:46:38:23:ec:fd:1d:b1:41:72:67:7f:0d:46:1f:a4:b7:
fb:68:a6:92:d4:7a:2a:56:6a:f5:14:ce:fc:85:89:66:b6:d6:
a1:d0:42:59:cf:6c:ea:50:f5:58:d6:d7:94:95:e8:d4:14:26:
c7:0c:66:af:f7:30:ec:72:f0:5f:a1:05:a4:87:20:ed:db:9a:
a6:2a:18:05:50:36:64:80:e7:6e:97:61:c3:b2:8c:e7:54:cf:
92:24:4f:b4:92:5f:da:59:51:04:64:ea:7c:c6:ae:04:d2:65:
6f:7c:64:57:2e:eb:79:90:ab:d8:5a:c7:78:71:1b:85:62:1d:
a6:89:64:77:c1:b2:ba:c3:29:e9:6b:58:f6:fe:3a:d7:53:af:
75:c3:a0:b3:10:d2:d5:bb:41:2c:17:95:01:bc:45:ab:eb:8f:
2e:b2:b2:79:c8:73:12:3f:9b:71:a7:dd:37:d0:5b:e7:5c:b1:
a7:4c:92:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:59:03 2025 by rpki-client