Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
File: BjDTqdwDknrlWoHYbKkb3J7nTHM.mft (raw, json)
Hash identifier: iqse9ncQkdsN/PMcxF/ED3/m6dueUL8gYpxFH0Srx1s=
Subject key identifier: 91:65:4C:DF:79:A2:BD:90:19:C3:EA:6C:43:BC:68:55:39:85:17:11
Authority key identifier: 06:30:D3:A9:DC:03:92:7A:E5:5A:81:D8:6C:A9:1B:DC:9E:E7:4C:73
Certificate issuer: /CN=0630d3a9dc03927ae55a81d86ca91bdc9ee74c73
Certificate serial: 01988D33E76571D3772BEB7B3A811B5E165D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
Manifest number: 12FE
Signing time: Sat 09 Aug 2025 05:00:45 +0000
Manifest this update: Sat 09 Aug 2025 05:00:45 +0000
Manifest next update: Sun 10 Aug 2025 05:00:45 +0000
Files and hashes: 1: BjDTqdwDknrlWoHYbKkb3J7nTHM.crl (hash: zD2s6qLcXW+XGMix7vpHveAS3q9KKye/v35rypjw3a4=)
2: J3YmuWHk-BjnoadebZpHdu7-LaY.roa (hash: e9ui3M/lG4q+b0jcfdPkcURL44aWIzlT3g4fpEz2u0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:33:e7:65:71:d3:77:2b:eb:7b:3a:81:1b:5e:16:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0630d3a9dc03927ae55a81d86ca91bdc9ee74c73
Validity
Not Before: Aug 9 05:00:45 2025 GMT
Not After : Aug 10 05:00:45 2025 GMT
Subject: CN=91654cdf79a2bd9019c3ea6c43bc685539851711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9f:a8:a1:66:fc:37:76:7a:70:15:ca:8f:52:
1f:e3:4c:6a:48:32:1e:3d:31:a0:b1:da:96:32:d5:
67:12:b6:a0:5a:ba:71:28:16:5f:75:ff:de:8e:e1:
d8:25:70:7b:a1:9b:11:19:6c:c2:e5:cc:d9:f5:93:
56:02:cc:68:71:e1:61:29:b1:3a:b0:9d:36:f6:2b:
2b:53:4c:7d:a5:e3:1d:04:6d:92:a4:2d:19:35:34:
bd:c2:a5:03:17:cb:c7:ff:ad:d5:a8:96:ff:de:8b:
bc:0f:b4:68:d7:39:18:2b:87:7f:6e:a3:10:5f:f0:
d3:73:d6:f2:e8:2b:06:1e:85:82:0e:97:5d:93:c6:
56:d7:ba:24:98:00:f3:27:04:a1:42:0d:e2:93:b3:
7f:a8:47:77:d7:ce:2a:61:80:57:d4:7a:fb:96:6c:
a4:b8:b9:f9:33:26:68:fa:7d:33:e8:8c:16:92:f1:
ea:2c:b3:ab:15:71:23:fd:a6:c0:6d:0d:4e:ef:18:
3c:33:8f:1e:48:e6:a6:3e:4a:e1:d8:bb:b7:76:32:
5a:31:b1:01:5a:33:eb:a9:2e:13:8f:fe:1f:9d:db:
3c:c0:fc:0a:75:24:4e:f0:ec:eb:dd:51:2c:31:a6:
07:de:fe:9f:21:53:58:00:a7:75:82:76:94:3e:58:
69:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:65:4C:DF:79:A2:BD:90:19:C3:EA:6C:43:BC:68:55:39:85:17:11
X509v3 Authority Key Identifier:
keyid:06:30:D3:A9:DC:03:92:7A:E5:5A:81:D8:6C:A9:1B:DC:9E:E7:4C:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:41:9a:ee:1a:cc:c9:4e:6d:1f:37:86:79:28:2c:1a:6e:de:
2a:e8:1c:f4:30:bf:b5:26:4c:0f:3e:8d:09:4c:a6:48:b4:b7:
7b:a7:ac:08:59:26:92:72:aa:79:00:3f:a5:39:cb:cd:e1:fe:
7e:1a:36:91:17:ba:ad:28:40:65:e9:8d:4f:7d:24:3f:24:9c:
da:b9:c7:a1:99:ed:59:3a:f4:cc:84:c9:70:04:c5:4e:0a:92:
c5:86:59:1b:e9:6a:13:fc:1e:dd:72:81:a3:2e:5a:30:ea:9d:
18:57:43:9f:4f:85:4e:5e:5b:fc:d3:10:b6:a4:e7:da:7e:77:
27:16:e7:70:60:41:99:b4:cb:4f:bc:89:43:2e:1b:3a:bf:91:
db:9c:63:81:96:dd:30:52:14:91:71:3d:33:ff:da:70:da:89:
f8:15:6c:56:92:c9:86:00:25:e1:8c:b2:7b:ce:2f:d4:11:2d:
21:4e:8c:55:3a:94:a5:7e:d0:00:c3:14:fd:ef:31:36:db:d1:
ab:60:96:33:65:45:32:9b:ff:48:1b:1e:80:f5:02:37:aa:f4:
43:5a:2f:0a:c6:dd:91:68:d4:ce:a4:86:32:49:79:9e:0a:fe:
85:7b:ff:f6:d0:d4:d9:aa:d7:2f:1b:79:14:fc:20:8a:18:bd:
c9:ba:12:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:32:16 2025 by rpki-client