
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
File: BjyTAb89LhVgz69-3EGnw-yKFqY.mft (raw, json)
Hash identifier: X85xO1jHypw2SGXhVBMHSXLlaF7TU29sZUbuH2KGo04=
Subject key identifier: 72:D4:45:B0:64:BC:6C:24:87:06:B6:D8:88:0C:09:9B:CB:8D:AD:8A
Authority key identifier: 06:3C:93:01:BF:3D:2E:15:60:CF:AF:7E:DC:41:A7:C3:EC:8A:16:A6
Certificate issuer: /CN=063c9301bf3d2e1560cfaf7edc41a7c3ec8a16a6
Certificate serial: 01988A69DC7503DED2BDAE4EEA1A3CDEC3CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
Manifest number: 1620
Signing time: Fri 08 Aug 2025 16:00:50 +0000
Manifest this update: Fri 08 Aug 2025 16:00:50 +0000
Manifest next update: Sat 09 Aug 2025 16:00:50 +0000
Files and hashes: 1: BjyTAb89LhVgz69-3EGnw-yKFqY.crl (hash: JzIZxe8DYUnAF6NoZGxlPVygttOpd3G2zwGU5Fsyn2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 16:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:69:dc:75:03:de:d2:bd:ae:4e:ea:1a:3c:de:c3:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=063c9301bf3d2e1560cfaf7edc41a7c3ec8a16a6
Validity
Not Before: Aug 8 16:00:50 2025 GMT
Not After : Aug 9 16:00:50 2025 GMT
Subject: CN=72d445b064bc6c248706b6d8880c099bcb8dad8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a5:27:11:50:d4:a5:8e:e1:0e:e2:20:ae:d2:
9c:5e:b3:a3:b5:87:11:0c:69:55:cb:99:d6:59:09:
60:2d:ed:ec:f6:e3:97:d6:54:ac:87:11:57:a5:b8:
6c:93:b0:27:25:f7:fd:03:00:d4:3c:92:48:51:3b:
da:7e:1c:e6:da:15:ca:6e:9b:09:93:13:34:fc:8d:
28:9b:b4:db:08:c3:13:77:c6:db:11:73:b7:92:98:
ed:bf:16:11:26:6b:a8:32:8e:b5:36:22:c3:30:a7:
46:fb:9a:47:b4:21:7e:30:b4:b3:3e:b4:3e:fd:1a:
93:bd:19:18:b6:37:dd:de:b8:1d:26:5c:77:a5:5f:
9d:bf:ef:b6:90:66:43:a5:ea:34:50:f1:85:56:f5:
da:30:33:d3:c8:bb:26:d8:6f:28:18:07:45:5f:00:
1c:e4:47:cc:6e:89:53:5a:66:57:64:6b:61:67:67:
db:14:1c:ad:a5:00:dc:c8:1c:89:74:98:2f:7e:6f:
eb:97:0a:88:61:2f:6c:7f:8a:92:b2:34:f3:38:94:
07:9e:6c:fe:29:08:09:f9:b3:44:3c:7c:5c:5c:81:
63:4c:c3:68:5e:81:1a:bd:2e:10:c0:27:df:91:7f:
43:49:29:54:de:75:f1:05:d2:63:fd:84:8f:5d:d4:
b7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D4:45:B0:64:BC:6C:24:87:06:B6:D8:88:0C:09:9B:CB:8D:AD:8A
X509v3 Authority Key Identifier:
keyid:06:3C:93:01:BF:3D:2E:15:60:CF:AF:7E:DC:41:A7:C3:EC:8A:16:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:92:44:9e:ba:c2:6f:01:cd:b2:ae:e7:7a:be:bd:32:b4:ba:
db:9f:dd:7b:d2:7e:19:bd:d2:07:cb:2b:2a:dd:ea:9e:cf:8f:
55:3f:e3:84:ec:19:09:c1:94:2e:64:1c:a0:56:38:df:8b:e8:
30:44:76:17:70:b4:fe:2a:e4:5b:c7:4e:a1:0c:f3:0c:ee:78:
c3:f9:ac:a0:28:88:08:86:53:ec:f4:59:57:c3:91:aa:6d:4c:
60:a9:70:04:6a:5b:31:6e:02:b5:0e:c6:20:a7:60:90:f8:0a:
e4:f0:3c:e3:88:ee:62:b6:1a:f4:4c:0c:54:21:c5:88:d0:21:
93:cb:f1:84:42:1a:c3:89:aa:56:94:47:fe:c4:d6:b0:2d:9d:
4e:b8:dd:9a:c2:13:66:94:b2:20:bf:ce:60:1c:f0:ed:4c:1b:
4a:5e:17:1b:75:cb:00:3f:8b:ef:bf:0c:a0:da:8a:f0:69:dc:
f7:93:94:12:2e:6c:2f:dc:2c:91:ed:57:cf:96:50:c1:de:6e:
80:6d:58:e3:e9:e6:d8:d9:12:9d:ab:ab:cf:02:9c:a1:65:40:
d2:bd:5e:25:a6:54:ec:09:7b:e7:e4:a0:03:d5:de:61:a5:43:
3b:fb:09:da:a8:99:6f:60:42:78:41:ea:e9:95:bb:97:72:d8:
53:27:c7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:24:09 2025 by rpki-client