Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
File: BjJUIiHK72RIzFRSFOAABxvVa4Y.mft (raw, json)
Hash identifier: wrZdd4BuElxWi/6AgAnYpwXQkGJObuGS/YqxE3IsqHY=
Subject key identifier: 29:66:6F:49:67:E5:9E:45:CC:DC:98:74:17:76:FD:E5:E6:D3:E2:F9
Authority key identifier: 06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
Certificate issuer: /CN=0632542221caef6448cc545214e000071bd56b86
Certificate serial: 01989223C959F926FCE734D1610AFE04A0F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
Manifest number: 105D
Signing time: Sun 10 Aug 2025 04:01:15 +0000
Manifest this update: Sun 10 Aug 2025 04:01:15 +0000
Manifest next update: Mon 11 Aug 2025 04:01:15 +0000
Files and hashes: 1: BjJUIiHK72RIzFRSFOAABxvVa4Y.crl (hash: /mEtwFiyD2Hz0ceL/COsXgeztpUKnFdW7xPSr+7ml6M=)
2: GI2JqYrwfOB4H4-WFfI5AvlAgXw.roa (hash: wx2kzfl5/eKVV8cW/FCB0zPSR7qqCq5F0M1Y8hdHGxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:23:c9:59:f9:26:fc:e7:34:d1:61:0a:fe:04:a0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0632542221caef6448cc545214e000071bd56b86
Validity
Not Before: Aug 10 04:01:15 2025 GMT
Not After : Aug 11 04:01:15 2025 GMT
Subject: CN=29666f4967e59e45ccdc98741776fde5e6d3e2f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4b:2b:b2:aa:4d:b6:b8:16:84:ce:d5:87:fb:
2a:e8:77:33:ef:64:82:c2:1d:39:19:9c:04:a2:02:
c5:58:f0:ad:0e:fe:b4:f1:b6:66:e6:6d:17:76:e3:
09:0d:16:88:0c:31:e9:51:a2:29:a5:9d:02:58:d0:
2e:94:b8:2c:2a:df:7b:7d:d6:62:02:01:00:30:2a:
fc:20:ee:2f:48:68:93:e1:bc:09:4f:2b:c3:b8:ad:
ea:9a:6f:2a:70:31:a7:93:da:65:96:6e:bf:40:2c:
8b:fb:54:39:36:f9:cb:d3:9b:93:2d:c7:ac:b7:fa:
09:b2:e9:86:9c:6e:79:cc:a5:95:1b:f6:2f:33:05:
b2:9c:bd:14:90:ff:a0:0e:34:79:56:67:e3:7f:ff:
da:48:53:44:a5:8a:40:e9:2a:39:3e:38:32:64:8b:
0c:07:05:71:be:c6:22:f5:dd:3e:97:f8:6e:8f:6b:
df:a5:a5:d9:bc:72:bd:6d:58:67:7e:49:62:27:6f:
be:e0:74:23:8d:ca:d9:dc:3d:49:3b:34:a7:76:11:
d6:73:17:d5:36:d4:e8:45:3f:aa:78:7e:02:09:c0:
b3:09:ad:9b:37:77:34:2f:1f:cb:bc:d5:71:23:7e:
47:53:89:da:bc:92:a2:05:40:db:de:5d:58:55:e9:
7f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:66:6F:49:67:E5:9E:45:CC:DC:98:74:17:76:FD:E5:E6:D3:E2:F9
X509v3 Authority Key Identifier:
keyid:06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:a6:23:e1:fa:cc:c3:db:82:8f:e1:8f:4d:eb:c8:4f:d2:80:
11:63:ae:3b:67:00:f4:27:05:49:3c:2e:76:6d:36:61:60:2b:
43:89:8d:a6:4b:72:0d:3d:d8:57:46:e0:21:1e:68:c7:1d:f9:
f1:f7:d0:25:fd:bb:66:e3:3c:5c:11:03:c0:b8:a5:c2:92:1d:
27:05:b2:4b:7f:4c:49:ad:a4:a0:71:bf:49:f7:3e:f7:6c:56:
ad:d6:51:0e:dd:bc:12:52:5c:1e:ae:c2:8a:eb:a4:bd:ef:0b:
e2:55:95:7e:95:a1:5d:57:a7:07:e5:38:6e:c0:da:c9:24:11:
2e:55:8b:4a:d3:da:9e:8a:54:89:36:02:d8:fe:27:42:79:71:
f5:af:bb:0a:c4:db:a1:ff:e6:6b:b3:82:93:fe:cc:7b:22:29:
ba:56:a7:0a:d6:5b:ff:0a:5f:50:f2:f0:5d:ae:e4:3f:60:ce:
9a:f9:e2:14:24:3a:04:8e:41:0d:15:be:e1:89:a1:e3:c9:17:
ec:94:a8:94:3f:70:a6:fb:59:9c:d5:3e:5a:b4:aa:58:c3:cc:
75:c6:19:9c:6d:2e:83:3a:1d:ad:9b:fd:c8:25:44:ea:90:0e:
a9:79:35:e2:66:8c:47:7c:2c:de:b5:e8:ae:cb:86:7d:b8:05:
60:36:ba:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:43:49 2025 by rpki-client