Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
File: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft (raw, json)
Hash identifier: s9jYZC1irUynIgRVK8QwsU2EqBCVg1to8rHmh9w1hjo=
Subject key identifier: 4D:04:BA:16:18:7A:2D:4F:75:D8:91:F7:88:C0:50:F0:E1:D8:DB:D3
Authority key identifier: 04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
Certificate issuer: /CN=049d4f66598668079353721c21935a00319f6759
Certificate serial: 0198868D9D1863555EB45F37E093D838D53C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
Manifest number: 1566
Signing time: Thu 07 Aug 2025 22:01:24 +0000
Manifest this update: Thu 07 Aug 2025 22:01:24 +0000
Manifest next update: Fri 08 Aug 2025 22:01:24 +0000
Files and hashes: 1: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl (hash: Peo7BCchaC14z8QLEKeo8BpmymsLmKDKd91y59sOS3s=)
2: SBmVAlodI7xnOy2vKS8iSbQ2L-c.roa (hash: Qjp3sgcgeheRs3EPb5cqh07Ww165sSq1F+/13L3R5T4=)
3: g0VLR4dmZuTUcMAH8lFP9-35SEQ.roa (hash: VJzmNAtUkQtzYlHT74BgFDK6+FNteK79SAvoZ6OtMvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:8d:9d:18:63:55:5e:b4:5f:37:e0:93:d8:38:d5:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049d4f66598668079353721c21935a00319f6759
Validity
Not Before: Aug 7 22:01:24 2025 GMT
Not After : Aug 8 22:01:24 2025 GMT
Subject: CN=4d04ba16187a2d4f75d891f788c050f0e1d8dbd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:31:e2:4e:23:4c:bc:43:62:ba:3c:f1:36:33:
18:5f:ac:c8:0d:04:99:46:4c:4f:25:a7:3a:63:05:
d3:fc:2d:ef:6b:d5:dc:b2:bd:62:a8:a7:b2:ed:a6:
8a:85:eb:63:71:83:81:a0:94:bb:6a:c0:4f:e2:90:
6a:d5:48:28:47:9a:fc:49:d7:85:e0:2b:6b:85:4d:
79:3b:4b:1b:46:05:e9:2b:0d:08:4c:f2:89:e9:cb:
1f:27:bb:b2:93:6a:6b:5e:68:bd:dc:26:74:9a:45:
fe:74:e2:e7:b4:bd:05:48:ca:f6:62:ec:99:59:96:
2d:57:d3:67:aa:c0:ec:4d:52:29:e8:ad:30:d8:77:
e7:66:f3:c0:70:6e:d5:dc:d7:3c:f2:4e:09:38:9b:
ba:85:16:15:84:77:88:80:c0:10:0a:9c:ef:eb:5f:
87:6c:35:de:fd:6e:9e:d0:3a:eb:2c:6a:71:1e:3b:
c0:bd:70:7b:c9:72:f7:f8:00:e2:56:2d:d0:05:5a:
15:91:07:25:7b:12:5c:7b:af:4d:11:bf:5e:be:0a:
30:69:47:05:de:59:a7:0d:89:81:aa:dc:dd:ea:ab:
35:8d:ef:fb:38:7a:ca:58:15:9d:bd:04:72:c2:23:
1c:1b:f3:91:b0:5d:d8:c3:35:a1:ab:94:a0:dc:dc:
64:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:04:BA:16:18:7A:2D:4F:75:D8:91:F7:88:C0:50:F0:E1:D8:DB:D3
X509v3 Authority Key Identifier:
keyid:04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:f2:5c:a8:ef:6e:75:b5:cd:cf:bb:d9:71:93:db:ab:2f:ed:
a4:dc:d9:0e:da:34:33:e9:a6:d3:ac:55:de:1c:4e:90:46:a8:
e1:9d:3f:1b:a9:62:48:69:90:cf:43:33:f5:4e:d4:ac:e8:73:
7d:59:9e:3d:c6:11:b9:de:4e:fe:ad:2d:f5:94:15:81:a4:17:
49:5c:1e:28:66:04:ab:a0:7c:88:bb:83:fc:2a:f5:7e:e6:3a:
b4:07:cb:ea:e7:98:d8:91:6d:07:52:f7:ec:02:b8:2c:24:92:
2e:09:17:fe:62:f1:d5:a2:22:e8:70:09:06:57:1f:54:ca:14:
a2:0c:19:3c:9d:c5:78:d6:61:25:ad:47:9b:2f:8b:d4:49:7d:
12:e4:21:2d:58:e3:f4:10:22:97:ab:d8:22:3a:a5:33:89:0d:
b3:ad:64:14:5d:c6:b6:75:24:fa:ad:4c:3a:8b:5c:71:0a:9c:
27:68:d5:a3:ef:27:0a:a9:a5:dc:dd:ee:95:f5:29:38:dc:a9:
8e:82:a0:f3:b8:5c:a0:ef:2c:48:60:4a:94:e5:08:19:5e:6f:
d8:91:49:13:c6:ab:5b:ea:0b:90:81:7a:7c:e2:da:4d:2a:de:
1e:b4:7d:0e:82:11:d7:f7:c1:cd:23:d9:b6:7d:28:a5:c3:6c:
8c:cd:a2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:06:33 2025 by rpki-client