
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/832d67-4506-47f2-a944-cabe1d84f709/1/BSLIJ03EQgYXFxrL8pML6bi1bWA.mft
File: BSLIJ03EQgYXFxrL8pML6bi1bWA.mft (raw, json)
Hash identifier: 5LLAQpkApoisThL8zZnwHdmpBaBdsfjsQ7edEkjaK3U=
Subject key identifier: 2E:03:3C:BB:95:6B:17:B4:C4:6B:F7:80:A2:40:DD:0C:C6:82:4F:F1
Authority key identifier: 05:22:C8:27:4D:C4:42:06:17:17:1A:CB:F2:93:0B:E9:B8:B5:6D:60
Certificate issuer: /CN=0522c8274dc4420617171acbf2930be9b8b56d60
Certificate serial: 01987373E12D0AEBA9280F58B109019FFB53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSLIJ03EQgYXFxrL8pML6bi1bWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/832d67-4506-47f2-a944-cabe1d84f709/1/BSLIJ03EQgYXFxrL8pML6bi1bWA.mft
Manifest number: 0380
Signing time: Mon 04 Aug 2025 05:00:30 +0000
Manifest this update: Mon 04 Aug 2025 05:00:30 +0000
Manifest next update: Tue 05 Aug 2025 05:00:30 +0000
Files and hashes: 1: BSLIJ03EQgYXFxrL8pML6bi1bWA.crl (hash: d1PnVEVnFffwJsszQae1ieo6mNX+jRerOhkzxKl+Ug0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/832d67-4506-47f2-a944-cabe1d84f709/1/BSLIJ03EQgYXFxrL8pML6bi1bWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/832d67-4506-47f2-a944-cabe1d84f709/1/BSLIJ03EQgYXFxrL8pML6bi1bWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSLIJ03EQgYXFxrL8pML6bi1bWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:73:e1:2d:0a:eb:a9:28:0f:58:b1:09:01:9f:fb:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0522c8274dc4420617171acbf2930be9b8b56d60
Validity
Not Before: Aug 4 05:00:30 2025 GMT
Not After : Aug 5 05:00:30 2025 GMT
Subject: CN=2e033cbb956b17b4c46bf780a240dd0cc6824ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cd:b8:87:46:e1:59:6b:69:db:4d:1d:a1:04:
f7:b7:54:73:5f:f4:ae:cb:33:49:f6:28:be:12:aa:
30:69:76:a0:70:70:c8:59:91:ac:2f:fb:f3:59:35:
af:83:45:bd:9d:08:50:b9:0b:12:41:44:b0:c9:01:
ea:2b:5a:fd:2c:fd:2f:da:5e:42:b8:73:bc:a8:25:
cd:4c:03:57:c2:82:f1:60:b2:68:94:b6:68:3d:38:
6b:d8:9e:fa:3c:aa:c5:bb:eb:ba:cf:fe:2c:13:89:
d3:c7:1d:fc:d1:cf:98:46:94:0a:29:10:6d:97:1f:
27:e2:17:84:5c:f9:53:91:23:30:ae:d0:a8:36:cd:
df:50:2d:01:de:52:71:44:31:aa:50:63:58:1d:07:
b5:75:17:0d:68:9d:85:75:7a:99:49:d4:a3:6c:e4:
f1:b3:04:5e:2a:b5:62:43:47:a0:74:75:7a:54:09:
62:e5:ac:ef:30:2a:5d:a9:a1:6b:93:10:4a:27:88:
aa:d0:f2:c6:49:03:d2:0d:44:14:10:16:37:39:59:
80:c1:ca:28:2d:1e:59:e4:25:83:ce:bb:ff:9d:5a:
f6:6f:a3:44:28:3a:1f:1e:cc:40:75:f3:b2:f4:0a:
07:01:07:cd:a9:9c:d6:4b:77:82:5b:85:68:92:97:
ef:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:03:3C:BB:95:6B:17:B4:C4:6B:F7:80:A2:40:DD:0C:C6:82:4F:F1
X509v3 Authority Key Identifier:
keyid:05:22:C8:27:4D:C4:42:06:17:17:1A:CB:F2:93:0B:E9:B8:B5:6D:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSLIJ03EQgYXFxrL8pML6bi1bWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/832d67-4506-47f2-a944-cabe1d84f709/1/BSLIJ03EQgYXFxrL8pML6bi1bWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/832d67-4506-47f2-a944-cabe1d84f709/1/BSLIJ03EQgYXFxrL8pML6bi1bWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:34:76:27:f3:9d:59:37:08:6e:20:02:f8:4d:63:47:a6:3e:
2c:b0:35:22:5b:06:85:cd:70:d7:28:39:b5:41:6a:d7:ec:4c:
4f:9b:d9:62:d2:c2:97:9f:1c:f6:3c:a7:6d:07:66:1e:a0:3c:
03:86:84:5f:28:bf:0b:62:c6:9e:ad:f2:c6:ed:53:2a:68:8b:
9f:c3:79:df:cd:d3:8d:c4:33:87:ac:d6:46:01:52:83:f6:1d:
1e:22:3e:f4:ec:ff:1e:e0:be:a4:06:2b:96:78:df:67:9a:00:
73:9f:42:f7:78:fb:c9:78:e4:2b:4d:f1:7f:d6:db:a6:b2:44:
7f:ff:2d:c8:ef:f6:ec:69:61:72:92:0b:c3:4e:9f:ed:b9:72:
30:af:5b:99:eb:de:09:50:d7:3e:42:c5:dd:f0:b2:57:c6:ba:
db:f5:9d:c2:77:03:ce:ec:4e:e3:20:f2:f8:5c:10:76:d1:96:
70:5d:e9:32:4e:10:8e:e1:31:26:2f:f7:63:24:5e:26:97:c3:
1a:3d:5c:4e:bc:e2:6a:49:8c:e4:3d:30:a4:58:cb:a8:e0:90:
7c:24:8d:ad:df:3e:f0:f9:27:ae:ee:8f:7c:4d:5a:33:5d:67:
f0:24:4c:42:0c:92:9d:66:aa:7f:d0:15:a6:fd:73:62:ed:76:
91:28:ff:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:36:54 2025 by rpki-client