Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.mft
File: BcojF2aaRo1QmoqhkGvvp1v5wgE.mft (raw, json)
Hash identifier: pGOhY68zzc8dRM0BNsSB493SAYvUzliYk/hjk79SCXI=
Subject key identifier: 93:73:E7:AD:34:DF:85:9E:92:39:6F:52:C3:73:7C:4A:84:48:D8:3C
Authority key identifier: 05:CA:23:17:66:9A:46:8D:50:9A:8A:A1:90:6B:EF:A7:5B:F9:C2:01
Certificate issuer: /CN=05ca2317669a468d509a8aa1906befa75bf9c201
Certificate serial: 01988167121F2842172CFBF3A3B446A13458
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcojF2aaRo1QmoqhkGvvp1v5wgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.mft
Manifest number: 0D56
Signing time: Wed 06 Aug 2025 22:01:12 +0000
Manifest this update: Wed 06 Aug 2025 22:01:12 +0000
Manifest next update: Thu 07 Aug 2025 22:01:12 +0000
Files and hashes: 1: BcojF2aaRo1QmoqhkGvvp1v5wgE.crl (hash: T5TqiQA5XuNYpoaabSlGk+P1G2ht/zN8Of3/C3MoX5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BcojF2aaRo1QmoqhkGvvp1v5wgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:12:1f:28:42:17:2c:fb:f3:a3:b4:46:a1:34:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ca2317669a468d509a8aa1906befa75bf9c201
Validity
Not Before: Aug 6 22:01:12 2025 GMT
Not After : Aug 7 22:01:12 2025 GMT
Subject: CN=9373e7ad34df859e92396f52c3737c4a8448d83c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:03:8a:9b:4b:66:b2:9e:f9:38:7a:f2:7d:11:
11:2c:ed:48:40:0f:8a:a5:95:7a:b8:cc:a9:ea:cc:
5b:e4:93:3b:69:3c:cf:3c:92:7b:29:1e:1b:28:b4:
e5:27:e6:49:f0:9a:c9:d6:53:73:9f:e0:10:be:cf:
a9:d4:b1:ce:3f:a0:48:60:f3:5d:90:92:11:72:3d:
06:83:37:88:ed:d7:c2:7e:7b:3a:d9:3d:44:80:83:
1a:ec:d1:44:33:dc:d8:97:fb:97:d3:4d:1f:b7:55:
b7:76:89:3f:ce:a0:3b:30:c6:61:20:8b:8f:1e:1d:
a9:5d:6e:5d:b7:83:9d:7a:64:f3:29:fc:ee:ab:a1:
58:00:20:e5:ee:05:75:e4:57:74:97:c4:c3:e4:59:
ac:15:9c:30:a3:94:4e:7b:12:1e:b1:29:54:0c:1d:
fa:8c:8d:ea:e5:cd:79:e4:38:46:f6:f8:b3:c8:b7:
92:f4:c8:ff:75:c4:47:1d:9d:1c:e6:17:ae:d2:e1:
49:69:7c:76:4c:23:d1:61:51:a6:b3:8b:2f:2f:b1:
4d:28:d1:fd:f0:a0:b1:bf:ce:6d:58:08:3c:07:a4:
0d:c4:32:08:4d:2a:16:0c:56:d8:71:d2:eb:5d:69:
be:82:c2:c7:20:c8:30:e4:78:04:c7:55:df:6e:98:
ee:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:73:E7:AD:34:DF:85:9E:92:39:6F:52:C3:73:7C:4A:84:48:D8:3C
X509v3 Authority Key Identifier:
keyid:05:CA:23:17:66:9A:46:8D:50:9A:8A:A1:90:6B:EF:A7:5B:F9:C2:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcojF2aaRo1QmoqhkGvvp1v5wgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:98:59:65:74:d4:43:85:b2:20:53:ed:08:39:46:c1:12:c3:
a5:36:ad:99:5e:c3:b2:b9:68:a9:cd:1a:24:bf:ce:9c:62:0a:
59:12:b5:b6:70:be:d2:5c:38:29:ae:3a:9d:e6:93:8a:92:3f:
30:3f:28:37:87:30:b5:35:0e:04:49:65:c6:4f:c0:17:53:3e:
a5:42:0e:da:e4:e5:86:0b:b9:02:86:98:95:ca:49:98:cc:90:
bf:28:28:8b:f0:f2:47:53:0e:b1:a1:91:9c:a8:19:7e:4e:ff:
fd:5b:0a:b9:37:05:4b:0e:25:46:9d:af:92:3b:ef:c6:45:00:
a8:08:94:fa:09:e9:95:06:59:d7:45:c9:89:26:87:18:6f:1e:
64:d5:ef:b2:48:97:73:b4:f7:2a:e1:d2:c5:10:ff:5d:da:d6:
6e:59:9c:1d:42:f7:8f:6a:5c:6a:d8:e3:33:c2:15:2e:f2:40:
5b:1f:98:4c:6a:72:1c:2d:45:c6:8a:df:0f:d0:4e:66:bb:0c:
31:31:1a:fe:f2:f5:bc:db:8e:f6:60:d8:2c:f9:8f:f0:da:57:
fa:ab:99:1c:ea:ff:04:25:8a:b1:84:3f:70:f6:34:a2:6a:51:
4e:c9:ba:4f:42:e3:a9:55:82:d4:ef:19:9b:14:f2:81:e3:73:
7b:e7:9d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:25:40 2025 by rpki-client