Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.mft
File: Bjc-uCHJZromeoONlS_EpBjLoQc.mft (raw, json)
Hash identifier: Qzcua7vbdIRPEcy1nKS6LkJh/s7y/fkeYY3Rr0X8Ajs=
Subject key identifier: 4E:FB:4B:DC:24:3E:1B:F9:B6:C4:0F:73:A9:2B:68:3F:50:6A:5D:01
Authority key identifier: 06:37:3E:B8:21:C9:66:BA:26:7A:83:8D:95:2F:C4:A4:18:CB:A1:07
Certificate issuer: /CN=06373eb821c966ba267a838d952fc4a418cba107
Certificate serial: 019A4DE227C754D0A73F735A04ECBCB0BE66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bjc-uCHJZromeoONlS_EpBjLoQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 08:00:58 +0000
Manifest this update: Tue 04 Nov 2025 08:00:58 +0000
Manifest next update: Wed 05 Nov 2025 08:00:58 +0000
Files and hashes: 1: Bjc-uCHJZromeoONlS_EpBjLoQc.crl (hash: X4QJGw2eIMP8i4DY1GRQYMniGONFWw3lmht5qOtVzjI=)
2: hzUgKoXbBv3CJRIA7Xas-eVKMjQ.roa (hash: RO7C6LUDj1R9ksySlerfgqbCZKiIyzwGTWcyFyoo2K4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bjc-uCHJZromeoONlS_EpBjLoQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:27:c7:54:d0:a7:3f:73:5a:04:ec:bc:b0:be:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06373eb821c966ba267a838d952fc4a418cba107
Validity
Not Before: Nov 4 08:00:58 2025 GMT
Not After : Nov 5 08:00:58 2025 GMT
Subject: CN=4efb4bdc243e1bf9b6c40f73a92b683f506a5d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:95:eb:92:77:db:56:47:de:75:b8:6a:8e:13:
41:d4:d3:3a:27:e2:9d:0d:1a:1c:15:c3:32:c8:6f:
1c:fa:a4:96:c4:07:d4:4b:2d:88:41:b6:9c:1c:89:
6f:86:f3:56:16:d6:a9:56:46:58:78:9a:8a:90:ea:
df:40:dd:31:92:66:27:38:e8:b5:62:bf:ef:2a:1d:
58:67:61:8d:03:8c:83:76:e5:18:83:a2:30:c7:06:
25:27:09:4d:65:11:cf:a0:69:df:a8:be:a5:e2:ae:
8d:5e:4b:af:aa:64:3d:91:82:74:b0:b8:66:4a:84:
ef:4f:9d:b9:d0:ef:ff:42:84:03:35:fc:18:84:e7:
bf:46:a2:e5:10:f4:d6:d8:13:ad:cc:ae:41:c3:33:
7f:ef:ed:7c:2b:94:f5:86:4b:fd:d4:0e:95:a4:85:
96:eb:4f:61:65:1d:d0:d8:82:b3:57:e0:0a:30:88:
82:05:5e:09:46:ab:27:26:0d:46:eb:81:99:60:0a:
ea:68:b1:44:6e:35:80:d7:b0:fc:e0:4a:25:ed:90:
40:ad:29:2d:d8:0b:3b:5e:9d:e1:43:1c:9d:ce:19:
97:b5:59:e6:11:f8:03:d9:b8:99:a3:fc:30:79:06:
94:75:bb:5c:b3:b2:40:c4:1a:16:6b:c6:87:f9:83:
97:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FB:4B:DC:24:3E:1B:F9:B6:C4:0F:73:A9:2B:68:3F:50:6A:5D:01
X509v3 Authority Key Identifier:
keyid:06:37:3E:B8:21:C9:66:BA:26:7A:83:8D:95:2F:C4:A4:18:CB:A1:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bjc-uCHJZromeoONlS_EpBjLoQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:44:05:e5:8a:ea:25:51:84:ac:52:9f:82:ab:de:32:82:af:
a7:10:90:ff:fc:54:be:1c:c1:9e:30:16:90:ba:5c:a1:e6:5d:
51:dc:91:ff:8f:9b:92:ae:5f:ae:6e:c6:d6:5d:32:0d:8a:68:
f7:ab:20:e2:19:55:9f:28:dc:75:83:6a:1c:33:29:5d:2d:bf:
e0:91:bf:5d:54:b9:2f:c0:0a:db:f1:94:55:7a:17:23:59:d0:
f9:42:45:13:af:c7:27:3a:38:a3:47:35:35:e7:7e:ad:0f:76:
2b:43:b4:24:61:fd:40:c7:e1:1e:7f:30:aa:64:1b:66:21:c9:
f1:90:38:6d:71:b8:85:34:df:29:fa:1b:fe:c7:00:97:68:1c:
86:92:35:f9:24:75:ee:24:aa:4e:53:8b:50:5d:01:2e:50:05:
40:76:de:e9:af:a2:3f:7b:99:4e:0d:17:25:81:6e:08:84:2c:
26:65:ce:c0:f2:48:23:8c:2f:21:a8:9e:ca:9e:bf:6f:8e:ac:
3d:8d:02:92:65:47:22:c1:6f:2a:2f:44:e1:22:9e:62:25:e3:
c8:90:02:75:f1:fc:ba:55:d3:1b:55:dd:9c:84:7f:ee:ed:35:
21:fd:cb:fd:79:65:2f:0d:56:52:b3:94:f7:25:49:58:a4:13:
fe:6c:64:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:36:16 2025 by rpki-client