Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
File: BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft (raw, json)
Hash identifier: QDsmS36EZUp1QGyRLY7i23oaUGSmJIFAdhERZKPs2FE=
Subject key identifier: A8:2C:6C:73:0F:C9:F8:B8:B4:F9:21:2C:11:4D:79:7F:52:E8:07:7D
Authority key identifier: 04:34:7F:A5:11:09:DD:EC:D6:CD:59:4C:67:BB:02:B2:D5:E7:21:0E
Certificate issuer: /CN=04347fa51109ddecd6cd594c67bb02b2d5e7210e
Certificate serial: 01988CFD15C70902A317C7AD2A1D6F7DCAE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
Manifest number: 0B15
Signing time: Sat 09 Aug 2025 04:00:52 +0000
Manifest this update: Sat 09 Aug 2025 04:00:52 +0000
Manifest next update: Sun 10 Aug 2025 04:00:52 +0000
Files and hashes: 1: BDR_pREJ3ezWzVlMZ7sCstXnIQ4.crl (hash: 5TJjKBvAJ4DP+xopnJ7q3hGK8yEyM0MfBMaHTv4bXO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fd:15:c7:09:02:a3:17:c7:ad:2a:1d:6f:7d:ca:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04347fa51109ddecd6cd594c67bb02b2d5e7210e
Validity
Not Before: Aug 9 04:00:52 2025 GMT
Not After : Aug 10 04:00:52 2025 GMT
Subject: CN=a82c6c730fc9f8b8b4f9212c114d797f52e8077d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0f:1d:2e:ff:19:cc:c4:e8:ce:58:4e:af:7c:
cc:5e:02:e0:19:3e:b3:76:6c:83:60:18:86:71:ee:
6f:af:26:9a:d8:4d:03:87:78:4f:5f:19:1e:19:85:
90:3f:c2:ae:e5:27:62:61:cc:f4:30:3f:cc:78:51:
29:71:71:2f:08:ad:cd:73:42:8a:dc:cd:3f:0e:ef:
48:41:08:6b:3b:65:07:98:60:59:a1:b9:78:70:84:
52:fa:bb:35:fc:ef:77:e1:f7:40:d2:10:ea:b9:1b:
b2:23:fc:d2:96:37:dc:3c:aa:b8:47:2c:6c:94:1d:
f6:7b:1d:50:dc:73:31:06:4d:cd:f2:1d:f9:21:55:
82:fa:20:92:dd:a5:d8:99:a4:8c:71:e1:cf:f4:46:
64:95:19:de:14:b8:5a:1e:aa:a2:e3:0d:5d:25:c1:
c6:cf:4c:55:d8:a9:ec:0e:ef:23:e2:34:89:cb:b6:
71:47:c2:d6:c2:56:48:61:10:74:6b:03:1c:e5:4c:
c1:d9:46:31:bc:3f:68:93:4f:af:b9:3e:db:6b:c0:
99:c5:a6:8f:6e:2d:36:c9:44:9b:14:10:d8:df:c7:
12:31:bb:1f:1a:33:ba:99:ab:a1:0c:01:88:23:36:
ba:52:5d:eb:5a:54:7f:eb:62:8b:29:82:03:40:a4:
21:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2C:6C:73:0F:C9:F8:B8:B4:F9:21:2C:11:4D:79:7F:52:E8:07:7D
X509v3 Authority Key Identifier:
keyid:04:34:7F:A5:11:09:DD:EC:D6:CD:59:4C:67:BB:02:B2:D5:E7:21:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:f7:b2:a3:45:fc:30:a9:d2:51:1c:ce:1e:24:6c:fc:23:77:
fd:90:14:70:b1:1b:b0:46:e9:d4:9b:77:7a:37:fe:d1:10:b8:
bc:b3:23:74:de:ac:1b:63:5a:51:25:6e:51:b7:c0:3f:b4:20:
03:0c:53:6a:10:14:5d:ba:0b:d7:00:ab:ba:6a:7d:31:42:eb:
8d:e6:c3:77:22:12:8c:a1:63:df:4a:f9:95:a5:98:aa:e7:2d:
f3:2a:31:bd:ad:d6:72:cf:4f:ff:84:e2:8b:3b:70:9c:2f:22:
a0:8b:39:bf:99:90:c9:38:bd:9b:25:84:bb:e9:93:00:34:ed:
16:d3:ad:ee:8e:70:7a:83:02:0c:23:a7:29:1a:9e:8b:4d:73:
70:73:cb:c3:d9:89:44:2c:24:b0:fe:e4:5d:1c:71:ff:7c:f6:
5b:bf:38:9d:43:b0:a3:f4:f4:50:ab:cb:f6:6e:4c:e0:5f:5a:
be:4f:50:88:87:7a:22:17:e4:d7:02:fe:ea:d2:78:b4:48:12:
e5:f6:1c:70:aa:4a:df:15:e6:bf:d5:4d:9e:f7:9a:79:37:9b:
44:f4:90:f8:e7:be:52:c9:1d:43:7b:1c:c8:bc:ab:88:4a:cb:
47:5c:6c:40:07:ef:31:c6:e0:e4:86:e4:cd:91:e4:2f:0b:cb:
73:26:01:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:18:21 2025 by rpki-client