Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.mft
File: BjnEhGuIwtcOMc5MD8y0z03qVDY.mft (raw, json)
Hash identifier: Bp/Iu3cfXPKEcA/gRbK6Vg88rI3NI8AO1p9nSHpZuLU=
Subject key identifier: 1E:EF:72:A6:92:04:5E:BC:92:AB:3E:75:19:8D:F6:B9:09:96:0E:17
Authority key identifier: 06:39:C4:84:6B:88:C2:D7:0E:31:CE:4C:0F:CC:B4:CF:4D:EA:54:36
Certificate issuer: /CN=0639c4846b88c2d70e31ce4c0fccb4cf4dea5436
Certificate serial: 01988FC6E37A6AAEDCB19BEF29945A01BD18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjnEhGuIwtcOMc5MD8y0z03qVDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.mft
Manifest number: 1623
Signing time: Sat 09 Aug 2025 17:00:32 +0000
Manifest this update: Sat 09 Aug 2025 17:00:32 +0000
Manifest next update: Sun 10 Aug 2025 17:00:32 +0000
Files and hashes: 1: BjnEhGuIwtcOMc5MD8y0z03qVDY.crl (hash: 2QzD7V3Agu1WiOm4x41ahnXCQERzKWOjl8z1Difmgtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjnEhGuIwtcOMc5MD8y0z03qVDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:c6:e3:7a:6a:ae:dc:b1:9b:ef:29:94:5a:01:bd:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0639c4846b88c2d70e31ce4c0fccb4cf4dea5436
Validity
Not Before: Aug 9 17:00:32 2025 GMT
Not After : Aug 10 17:00:32 2025 GMT
Subject: CN=1eef72a692045ebc92ab3e75198df6b909960e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f3:6d:89:f9:65:63:76:6e:c9:f6:0e:57:fb:
18:65:ae:22:79:c5:3a:2c:e9:09:ce:e4:ef:6b:00:
00:15:1a:05:09:12:d4:a8:f3:f5:e9:aa:ba:11:16:
fb:a4:68:49:34:cb:44:e8:2e:b6:dd:9d:f9:54:d5:
d1:36:dd:28:53:ce:7f:09:fa:13:05:91:b6:19:67:
8f:38:cd:9d:e5:d4:17:5d:fe:6e:2a:bf:c3:0f:29:
8b:61:ec:ec:97:8a:25:0e:77:d6:b3:0d:bc:cf:47:
cb:44:01:43:f7:39:ef:f9:76:f9:1e:b7:d7:b9:a0:
a7:49:8c:65:f8:e0:90:8c:3e:dc:9b:c5:56:0b:53:
68:f6:03:4b:b0:2a:1c:f6:4c:a0:99:2a:ba:1e:20:
9b:5e:d9:6d:4b:be:6c:b9:6a:92:fe:1d:06:96:e6:
40:17:7f:0e:1e:a4:dc:e6:4c:5e:ee:ca:05:f0:c8:
bd:c1:b2:7c:2f:8c:5d:81:63:92:06:e0:43:04:a1:
0c:25:bd:05:f8:2d:d5:e3:a2:dc:e3:3b:84:33:d8:
67:eb:dc:a3:9c:1c:d0:31:9b:a2:d5:34:97:d8:b9:
11:6a:a6:58:df:d3:29:13:88:04:60:bf:ef:9b:76:
25:1d:cc:62:9f:02:98:ae:2f:da:dc:1a:cc:6a:fc:
03:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EF:72:A6:92:04:5E:BC:92:AB:3E:75:19:8D:F6:B9:09:96:0E:17
X509v3 Authority Key Identifier:
keyid:06:39:C4:84:6B:88:C2:D7:0E:31:CE:4C:0F:CC:B4:CF:4D:EA:54:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjnEhGuIwtcOMc5MD8y0z03qVDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:c1:77:f7:da:ce:c1:77:99:c8:9a:c9:9f:51:4c:40:91:18:
76:90:4f:56:75:6e:15:c5:9e:52:a8:94:52:80:ba:42:94:7a:
73:db:65:92:8f:43:5f:e8:9f:02:f1:52:5d:bb:19:33:ac:20:
6e:ff:27:d9:5f:e3:9a:11:66:fb:85:c8:da:b2:35:67:41:5a:
aa:52:fb:85:be:4d:44:e6:dc:96:b4:fc:44:7f:76:fd:e4:67:
83:e7:88:36:ac:3c:7d:bf:0e:b6:a3:29:b8:bd:dc:a0:23:68:
6e:4c:22:31:16:fd:e2:38:59:bf:3c:7f:46:57:38:32:e9:8c:
be:5f:a4:7b:dd:06:34:22:cf:35:55:aa:69:75:2e:94:76:00:
43:c4:1a:f7:0c:e4:2a:f8:70:49:54:a4:cc:bd:12:85:c9:6d:
48:47:8b:8e:22:39:64:3f:21:98:48:49:4c:80:cc:df:88:b3:
63:a5:62:43:35:d1:7c:0a:29:7e:86:af:d5:b3:1c:cc:41:12:
8c:43:ca:6c:2c:40:74:ad:26:0a:ef:00:26:13:bf:a4:46:45:
93:88:3b:6e:99:2d:b2:00:e8:46:c6:f9:d4:60:b8:9f:69:cd:
29:38:fd:79:2b:c2:7e:f3:66:17:71:b3:49:24:ae:e3:b2:8c:
f4:25:58:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:50:05 2025 by rpki-client