Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
File: BjfRzl3D-oAOHR3PvaqEH93UOQU.mft (raw, json)
Hash identifier: aHi0YMHZ/RjAG0ACYn9phEhhApvmtAsb7xrW23fb2ac=
Subject key identifier: E9:E5:55:C7:A9:2D:98:7F:19:75:24:D8:D5:57:FB:CA:2F:8E:DE:C4
Authority key identifier: 06:37:D1:CE:5D:C3:FA:80:0E:1D:1D:CF:BD:AA:84:1F:DD:D4:39:05
Certificate issuer: /CN=0637d1ce5dc3fa800e1d1dcfbdaa841fddd43905
Certificate serial: 019897EEEDC883740C7B0750DD7863049EEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjfRzl3D-oAOHR3PvaqEH93UOQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
Manifest number: 1473
Signing time: Mon 11 Aug 2025 07:01:14 +0000
Manifest this update: Mon 11 Aug 2025 07:01:14 +0000
Manifest next update: Tue 12 Aug 2025 07:01:14 +0000
Files and hashes: 1: BjfRzl3D-oAOHR3PvaqEH93UOQU.crl (hash: PWe2ztZ3qiq0oykUKQNK7WGVupugOfKqI2WkV83sU0E=)
2: cqs27uyShJLHJ19HI0wbuu9K6Mw.roa (hash: Io5SItgYrsPuNxUpvFI/wIElXAajrpA8wR3rTKWJTBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjfRzl3D-oAOHR3PvaqEH93UOQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:ee:ed:c8:83:74:0c:7b:07:50:dd:78:63:04:9e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0637d1ce5dc3fa800e1d1dcfbdaa841fddd43905
Validity
Not Before: Aug 11 07:01:14 2025 GMT
Not After : Aug 12 07:01:14 2025 GMT
Subject: CN=e9e555c7a92d987f197524d8d557fbca2f8edec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9d:82:27:70:75:ec:1a:cc:dc:47:15:7e:6c:
ee:23:df:e0:34:11:7d:bf:da:93:b8:78:96:4c:26:
89:02:c8:f3:1b:25:30:1e:f4:d1:2f:b7:db:8f:81:
21:49:12:44:9a:8a:07:d6:a3:f4:da:28:2c:b4:a1:
93:7f:09:a8:cc:21:03:2e:6d:f7:93:e4:23:11:26:
f2:2d:d6:c8:41:b3:db:50:b2:62:dc:f8:e7:31:ae:
10:75:cc:7e:b0:d3:b9:37:82:1d:9e:e2:95:2d:b3:
ac:01:dd:f1:b3:6e:f3:6a:82:8c:e4:81:0f:e7:dd:
d8:29:05:ac:07:c6:6a:3d:6c:47:c4:13:64:d6:ca:
35:e8:19:d2:10:b5:22:80:c5:68:4c:17:e6:2c:ee:
ef:b2:68:fe:de:38:a2:73:3f:07:3e:3e:56:fc:66:
ac:15:61:57:44:29:05:f0:bd:1f:1c:ef:1d:cb:92:
47:ae:ca:0f:b7:0f:07:e0:91:96:b2:f7:ab:e4:fb:
f5:bd:f5:8e:8d:93:12:97:88:33:68:ab:3f:80:c9:
d6:4d:06:aa:32:c0:6d:1f:40:ae:ef:8d:2a:99:9f:
16:1b:5c:8a:2c:56:b7:ee:ee:7c:f5:fb:64:de:ba:
23:5e:63:92:7f:ed:cc:36:31:94:25:d7:5e:2a:a9:
3b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E5:55:C7:A9:2D:98:7F:19:75:24:D8:D5:57:FB:CA:2F:8E:DE:C4
X509v3 Authority Key Identifier:
keyid:06:37:D1:CE:5D:C3:FA:80:0E:1D:1D:CF:BD:AA:84:1F:DD:D4:39:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjfRzl3D-oAOHR3PvaqEH93UOQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b9:2e:65:36:8a:3d:4b:1f:6a:5d:f9:ed:1a:3e:15:b4:ab:
36:03:72:be:b9:0d:0e:4b:30:0c:7e:bd:1d:2e:e8:a0:a5:b4:
2b:36:b5:99:d3:85:66:84:f2:b1:b8:5f:fb:8b:5f:0c:25:8e:
0c:9e:72:c6:c6:b8:a9:82:d7:b3:b1:58:74:0e:db:12:03:f2:
67:2c:dc:a9:a2:88:01:a3:3b:0b:38:42:30:7b:4d:3d:7b:b1:
2d:fb:01:06:52:eb:97:6c:fc:27:9f:27:79:3d:67:05:a0:43:
eb:2c:a6:26:da:d0:cc:ef:57:79:e1:d5:29:49:6f:7e:dc:0c:
80:78:61:51:77:64:03:1b:d1:53:82:1d:d7:ff:15:37:2e:64:
10:72:34:25:56:02:db:0c:f0:c2:83:29:87:73:a4:31:ee:24:
4c:5b:06:42:4a:d4:06:54:fe:51:de:86:e6:07:6a:42:39:60:
d1:61:ce:7f:c6:cf:4e:fc:c0:73:48:5a:04:99:a7:8d:05:66:
cf:6d:1b:96:50:aa:e7:27:98:18:3e:87:6b:78:da:91:35:22:
a5:ef:42:f9:28:3c:9f:52:10:bd:f7:c7:a2:2b:14:db:4c:4d:
9e:0a:cb:d9:a5:98:b9:ae:04:8d:9c:53:14:a3:e5:92:c5:44:
be:71:86:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:08:46 2025 by rpki-client