Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
File: BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft (raw, json)
Hash identifier: tfMDcOxZox1KUnUosoFceR5mWs7flTgPN9loGYdHrbU=
Subject key identifier: 6E:C8:30:7D:6D:C5:A7:AA:58:7C:0B:54:10:AD:A1:7F:05:5F:E5:F6
Authority key identifier: 04:34:7F:A5:11:09:DD:EC:D6:CD:59:4C:67:BB:02:B2:D5:E7:21:0E
Certificate issuer: /CN=04347fa51109ddecd6cd594c67bb02b2d5e7210e
Certificate serial: 019A4EF5041B770C1A8B5BFD5BC3146D2C09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
Manifest number: 0BFE
Signing time: Tue 04 Nov 2025 13:01:11 +0000
Manifest this update: Tue 04 Nov 2025 13:01:11 +0000
Manifest next update: Wed 05 Nov 2025 13:01:11 +0000
Files and hashes: 1: BDR_pREJ3ezWzVlMZ7sCstXnIQ4.crl (hash: 8UvkZsOHHkNRqLaNoE3YINm/7C/Bgydc1s9+W/F81As=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:04:1b:77:0c:1a:8b:5b:fd:5b:c3:14:6d:2c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04347fa51109ddecd6cd594c67bb02b2d5e7210e
Validity
Not Before: Nov 4 13:01:11 2025 GMT
Not After : Nov 5 13:01:11 2025 GMT
Subject: CN=6ec8307d6dc5a7aa587c0b5410ada17f055fe5f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f9:ad:fa:70:4c:54:9d:2f:40:a8:20:66:49:
8f:2f:fa:5e:e0:95:3d:7e:04:c8:98:24:06:53:a1:
8b:51:22:2f:54:cb:c5:d9:73:14:21:67:f7:80:0a:
42:d7:6b:9e:9c:85:aa:31:ab:1c:20:67:29:c8:50:
10:72:54:18:2f:c4:6c:55:63:f3:1e:75:75:39:8c:
df:d7:90:bc:5b:81:ea:10:54:78:69:f3:00:6a:af:
a5:7b:8c:47:c7:91:97:b7:9d:ab:06:ff:ee:4d:57:
c0:4b:9e:fb:48:72:b5:33:45:54:8f:fe:51:9f:2c:
a2:58:2e:1f:2d:c2:c7:0c:de:6f:e2:d5:bc:fc:74:
68:0f:cf:59:7e:dc:97:b6:11:b6:19:bc:d2:7c:c0:
e2:f3:66:68:12:cb:64:a4:a4:df:4a:06:c8:1a:05:
82:cc:5a:ea:fe:4a:0c:24:e7:22:26:13:e6:00:b3:
5a:ad:c3:37:4a:5a:5e:38:c0:f2:9e:3f:aa:02:2e:
46:a9:da:8a:73:99:9e:f5:11:a8:91:51:9c:c9:c2:
19:a4:69:f4:1f:2c:ef:74:ce:46:4e:7e:6f:9f:90:
27:fc:c6:52:76:cc:c4:5b:82:3f:ac:60:7d:90:fe:
7f:44:86:4b:00:f8:14:3c:f5:15:00:ba:6c:71:5a:
5c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C8:30:7D:6D:C5:A7:AA:58:7C:0B:54:10:AD:A1:7F:05:5F:E5:F6
X509v3 Authority Key Identifier:
keyid:04:34:7F:A5:11:09:DD:EC:D6:CD:59:4C:67:BB:02:B2:D5:E7:21:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b5:c1:fc:e9:72:d4:02:55:00:fc:72:99:c8:ab:5c:11:0c:
75:86:23:fe:5e:03:35:05:9b:b4:b5:3b:0a:ea:b4:b6:ab:4c:
b6:c8:3b:c7:16:92:20:ad:3d:e6:78:af:b4:0f:87:a4:f4:28:
cc:3d:d8:cd:46:42:b6:4a:c4:f7:fe:ac:f6:17:3f:a0:6a:94:
3c:b1:86:79:9f:92:0b:3c:fc:63:67:fd:03:c6:50:32:95:77:
48:8a:71:7e:62:29:42:4f:64:84:1a:64:0b:88:a2:a0:5c:30:
ea:f9:23:8a:33:0c:d6:1f:9c:b7:42:c9:f7:a5:b7:ec:8f:ae:
f7:0f:3c:1f:2a:7e:f1:39:dd:de:45:97:e1:26:1f:87:37:b3:
e2:3a:0d:07:ca:2a:15:c0:23:6c:96:21:75:07:a2:a7:f6:22:
e7:9d:ab:70:32:e0:cc:11:5d:b3:d6:f2:61:30:a7:d5:4e:b7:
05:f6:af:25:d4:8a:4f:99:8a:ff:a6:9b:92:ae:96:4f:45:66:
72:22:02:cf:d0:3d:d9:0e:72:6f:bd:6f:98:ea:aa:9d:a3:6b:
1e:6a:af:6f:93:69:ad:6e:c5:41:77:f3:21:b9:1f:64:91:70:
f9:f5:92:da:d0:7e:c1:5c:bb:36:9e:1f:b3:d7:cd:83:23:af:
6f:38:7a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:46 2025 by rpki-client