Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
File: BjDTqdwDknrlWoHYbKkb3J7nTHM.mft (raw, json)
Hash identifier: TdrxtZiV66WTFTr33RyMac/fdhO3RZMH3vNXwBzzJTs=
Subject key identifier: BF:95:13:71:B2:14:79:25:89:D6:BE:ED:96:E3:C4:76:0C:00:71:20
Authority key identifier: 06:30:D3:A9:DC:03:92:7A:E5:5A:81:D8:6C:A9:1B:DC:9E:E7:4C:73
Certificate issuer: /CN=0630d3a9dc03927ae55a81d86ca91bdc9ee74c73
Certificate serial: 019A4D3CC57FCC530C2F1139184442DA9391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
Manifest number: 13E6
Signing time: Tue 04 Nov 2025 05:00:19 +0000
Manifest this update: Tue 04 Nov 2025 05:00:19 +0000
Manifest next update: Wed 05 Nov 2025 05:00:19 +0000
Files and hashes: 1: BjDTqdwDknrlWoHYbKkb3J7nTHM.crl (hash: 19xVr0WNqsocsMa0wnsjZOsqCLNDxxiPlrPUA1minag=)
2: J3YmuWHk-BjnoadebZpHdu7-LaY.roa (hash: e9ui3M/lG4q+b0jcfdPkcURL44aWIzlT3g4fpEz2u0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:c5:7f:cc:53:0c:2f:11:39:18:44:42:da:93:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0630d3a9dc03927ae55a81d86ca91bdc9ee74c73
Validity
Not Before: Nov 4 05:00:19 2025 GMT
Not After : Nov 5 05:00:19 2025 GMT
Subject: CN=bf951371b214792589d6beed96e3c4760c007120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6e:9e:df:b5:9e:1f:c0:e8:da:7c:e7:08:7e:
76:4d:ab:1d:18:9a:c5:ce:dc:58:8d:90:09:a2:8d:
d6:b1:4f:1e:e1:04:ec:49:73:bd:16:d8:aa:a0:cc:
35:dc:8c:da:66:5b:66:e3:65:db:5c:73:46:cc:27:
0a:72:12:ff:ba:5f:ab:5b:bd:d1:1c:e3:74:8e:e0:
1d:d5:e4:53:7e:82:2a:bb:e1:ee:da:8a:eb:d4:f5:
77:22:56:50:ca:e2:e2:ef:72:21:4b:cb:af:25:84:
c4:54:78:e5:31:c0:f9:a6:e8:1e:75:3e:b0:41:8d:
21:a3:c1:6f:a7:3a:51:88:f9:96:3a:80:1f:56:fd:
2e:8d:1c:75:cd:f4:2c:40:a7:1d:23:cf:8c:cc:bc:
8a:f9:ab:77:70:af:e3:bf:97:58:5b:b2:ae:e3:59:
5c:3b:1b:e9:82:60:a7:88:30:69:12:60:e7:36:da:
d7:fa:2d:79:6f:66:d4:04:d0:bb:78:70:f7:49:57:
aa:2c:17:8e:09:78:40:53:2f:af:d0:99:ee:ee:3e:
20:49:bd:44:43:7a:49:54:97:5c:8a:45:2a:58:f2:
bd:96:8c:5d:0d:61:f9:52:93:8f:bd:44:8e:2a:c5:
df:a0:0f:d2:f0:ef:95:d3:55:b5:37:c8:b4:07:80:
9c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:95:13:71:B2:14:79:25:89:D6:BE:ED:96:E3:C4:76:0C:00:71:20
X509v3 Authority Key Identifier:
keyid:06:30:D3:A9:DC:03:92:7A:E5:5A:81:D8:6C:A9:1B:DC:9E:E7:4C:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:61:f4:b2:82:9a:7b:80:9c:ae:70:97:97:88:f9:e3:3f:45:
ba:cf:ad:84:47:de:10:f9:2b:5e:02:a3:f1:6e:d1:38:b0:36:
f3:8d:e4:39:28:2d:80:44:6e:54:cb:7d:c7:57:c1:45:9b:72:
50:69:25:c2:3a:b7:32:f1:e8:d1:e0:30:79:73:d1:b7:63:91:
24:64:85:ef:e2:d5:30:4e:b1:4d:8e:36:95:89:12:5d:c0:23:
22:a4:cf:05:d5:b7:f9:2c:12:3a:f8:d9:69:6b:b1:9e:e8:7b:
a4:52:89:8c:da:b2:04:94:b5:67:26:fc:7a:e7:c7:63:30:84:
ad:a6:67:fd:00:37:c1:84:da:ac:a3:43:00:07:35:8b:73:9b:
32:66:5a:9f:51:13:9a:e5:e3:9d:b7:de:e1:87:2e:8b:e5:f4:
91:e0:75:d3:c9:01:91:8a:ef:e4:3b:6e:da:4f:5c:46:5f:aa:
f4:73:26:64:96:3f:d5:e3:77:c3:0f:4f:5c:ab:87:9a:f6:27:
37:5b:2f:60:4e:c4:47:31:99:6a:87:c4:7c:ba:72:fd:93:09:
d9:8f:37:35:94:6c:04:a0:6c:b4:49:04:d6:0b:1f:85:70:a2:
82:e5:d8:2a:55:ea:c1:6b:73:15:ef:b2:3e:fc:76:96:ba:05:
ef:70:72:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:12 2025 by rpki-client