Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
File: BjfRzl3D-oAOHR3PvaqEH93UOQU.mft (raw, json)
Hash identifier: iM4lnUSvfAsqiwG1HW86SnUKJCElQ9UvgUe9q0KXt4Q=
Subject key identifier: 71:53:55:86:A3:91:BE:F5:A3:D8:7F:36:64:27:32:47:06:DD:E3:13
Authority key identifier: 06:37:D1:CE:5D:C3:FA:80:0E:1D:1D:CF:BD:AA:84:1F:DD:D4:39:05
Certificate issuer: /CN=0637d1ce5dc3fa800e1d1dcfbdaa841fddd43905
Certificate serial: 019A522CBA7AA6E3C811845BA65C09A9FBF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjfRzl3D-oAOHR3PvaqEH93UOQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
Manifest number: 1558
Signing time: Wed 05 Nov 2025 04:00:54 +0000
Manifest this update: Wed 05 Nov 2025 04:00:54 +0000
Manifest next update: Thu 06 Nov 2025 04:00:54 +0000
Files and hashes: 1: BjfRzl3D-oAOHR3PvaqEH93UOQU.crl (hash: n8ayA0miRyUhNfmX4c9EjqKLX9AWpvAc/rWe1AdKK+M=)
2: cqs27uyShJLHJ19HI0wbuu9K6Mw.roa (hash: Io5SItgYrsPuNxUpvFI/wIElXAajrpA8wR3rTKWJTBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjfRzl3D-oAOHR3PvaqEH93UOQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:ba:7a:a6:e3:c8:11:84:5b:a6:5c:09:a9:fb:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0637d1ce5dc3fa800e1d1dcfbdaa841fddd43905
Validity
Not Before: Nov 5 04:00:54 2025 GMT
Not After : Nov 6 04:00:54 2025 GMT
Subject: CN=71535586a391bef5a3d87f366427324706dde313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:88:4d:b9:11:58:2f:3e:38:73:fd:42:0c:1e:
98:ce:ea:70:e1:b5:af:7d:e8:5e:27:d2:a2:f6:47:
fb:46:5c:9e:5a:d3:46:52:33:2e:27:e2:3a:7d:73:
62:9a:99:02:06:c2:3e:44:6e:8b:3a:10:25:a7:9d:
7f:22:67:ad:99:ca:ad:07:7f:6c:8a:dc:ce:8a:ab:
70:52:96:06:b9:eb:19:88:b1:03:8d:9c:95:eb:10:
17:d1:42:e8:5a:08:13:12:4b:a8:d2:2d:bd:b5:03:
98:32:86:99:2f:5f:ea:86:86:3d:e3:6f:2a:29:83:
f2:2b:30:83:25:cb:6f:81:cf:69:e6:02:3f:15:ce:
0d:dc:b0:a9:0b:4a:bd:52:67:68:b9:dc:28:9a:65:
7f:f4:6d:f6:56:b9:19:71:1f:51:7c:43:5a:df:9c:
8f:bd:6f:9c:6c:fb:b4:ee:f2:a7:ad:ac:88:cf:91:
6b:c6:32:41:ef:06:40:a9:9e:f1:02:2b:0f:f0:59:
64:47:60:24:2c:73:ca:f6:41:96:e0:d7:59:1e:3e:
28:8e:7d:65:d4:38:17:9a:c9:e7:80:22:53:bd:51:
1e:c3:7e:3e:63:8b:29:c8:65:09:1b:43:ee:f2:e8:
b5:dd:94:27:60:3a:64:a9:4a:d5:1d:ce:c6:2b:5b:
e4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:53:55:86:A3:91:BE:F5:A3:D8:7F:36:64:27:32:47:06:DD:E3:13
X509v3 Authority Key Identifier:
keyid:06:37:D1:CE:5D:C3:FA:80:0E:1D:1D:CF:BD:AA:84:1F:DD:D4:39:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjfRzl3D-oAOHR3PvaqEH93UOQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:90:3d:d9:b0:e2:25:4d:08:97:2b:cb:98:74:aa:1e:cf:9e:
60:58:48:f4:61:0e:29:0d:a3:7d:22:69:82:bd:b7:05:8e:87:
77:39:af:ae:ce:52:4e:5e:dc:30:1b:b5:df:7d:c4:87:5f:f8:
a4:a8:c3:1f:6c:01:4d:01:e9:47:4b:1f:a2:35:0a:2f:f5:64:
5e:13:5f:c0:76:b9:94:de:fd:95:d4:c2:af:e6:73:52:6e:c8:
f8:93:ba:4e:0f:63:7c:af:95:b2:a6:eb:b8:e8:2f:a3:63:1d:
a5:b9:55:86:e3:bb:da:e8:2e:6d:f2:2c:10:b4:5a:7b:d6:34:
45:5b:ec:e7:53:13:1e:d7:c3:6d:d2:2b:af:6f:f7:3d:24:86:
5b:6f:cc:4f:3a:4d:9e:e7:9a:48:32:af:22:bc:31:0a:bb:9c:
d6:21:b2:b2:6d:58:bf:96:8f:cf:02:b8:ee:6b:b3:fa:ab:af:
9e:dc:0d:e1:5a:87:21:69:4b:8e:0a:41:7b:5e:29:3d:67:82:
ff:db:a1:2f:f3:57:e9:54:03:21:82:23:ea:2c:c6:2d:57:35:
f3:d6:00:59:5d:02:53:0c:6e:4d:fa:6a:63:79:0e:7b:f0:27:
78:0f:c3:49:82:cc:f8:0e:11:37:08:23:be:aa:81:53:19:bd:
89:ae:f4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:55:35 2025 by rpki-client