Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
File: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft (raw, json)
Hash identifier: C00rLish2Kqy8WGcVbXYSsy2+7U6HWefrhVfwOP0FJc=
Subject key identifier: 4F:73:6F:13:84:B3:9C:D3:F1:F2:1C:49:F5:A7:BB:93:C1:85:D6:EC
Authority key identifier: 04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
Certificate issuer: /CN=049d4f66598668079353721c21935a00319f6759
Certificate serial: 019A4E4FC4464F0D76D3CA54BDF5A309A75E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
Manifest number: 1652
Signing time: Tue 04 Nov 2025 10:00:41 +0000
Manifest this update: Tue 04 Nov 2025 10:00:41 +0000
Manifest next update: Wed 05 Nov 2025 10:00:41 +0000
Files and hashes: 1: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl (hash: dQRA5AlomNZKmdE2VA6qbSul/gTPhxsXEWviPtx9p6w=)
2: SBmVAlodI7xnOy2vKS8iSbQ2L-c.roa (hash: Qjp3sgcgeheRs3EPb5cqh07Ww165sSq1F+/13L3R5T4=)
3: g0VLR4dmZuTUcMAH8lFP9-35SEQ.roa (hash: VJzmNAtUkQtzYlHT74BgFDK6+FNteK79SAvoZ6OtMvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:c4:46:4f:0d:76:d3:ca:54:bd:f5:a3:09:a7:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049d4f66598668079353721c21935a00319f6759
Validity
Not Before: Nov 4 10:00:41 2025 GMT
Not After : Nov 5 10:00:41 2025 GMT
Subject: CN=4f736f1384b39cd3f1f21c49f5a7bb93c185d6ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:31:0a:a9:cd:51:55:e4:34:4f:14:d9:40:57:
b5:98:e1:43:71:73:65:2f:93:89:ae:1c:63:9d:3f:
c6:09:8e:54:83:21:0c:c9:64:5d:81:95:7b:bb:89:
c5:de:8f:91:da:0c:af:7d:a5:d3:be:91:c9:d0:b6:
17:6b:fe:d2:fe:5d:7a:4f:3d:78:60:e9:1b:01:47:
7d:09:c6:0e:19:c2:12:7f:b1:fd:87:95:48:39:42:
21:0e:d0:92:5e:2f:45:c7:6f:68:cb:a9:62:ac:c9:
de:5f:c0:bf:61:f4:db:5a:17:7a:89:45:b7:ff:e6:
c6:65:5d:cb:2c:85:db:ef:35:47:02:c6:d0:77:06:
6a:fe:e3:a3:fb:96:bf:d6:82:b2:36:4e:3a:1e:6f:
28:29:ce:87:f8:ae:1b:ab:7b:6a:f1:73:b6:60:25:
96:7a:d4:ca:d6:b8:8d:a4:4e:f7:a0:bf:45:39:20:
e8:de:06:0d:83:67:a2:0e:19:12:dc:b8:cd:9a:9f:
f3:4e:3f:1b:80:89:dd:4c:6a:19:ab:75:a2:59:69:
58:aa:ec:27:ae:39:b5:ce:f6:67:19:4d:89:12:34:
04:b8:f9:7a:1d:89:ae:72:cb:36:05:be:ef:4f:ce:
c7:f4:0a:80:a6:f7:56:32:f1:6f:46:8c:f8:d1:41:
5c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:73:6F:13:84:B3:9C:D3:F1:F2:1C:49:F5:A7:BB:93:C1:85:D6:EC
X509v3 Authority Key Identifier:
keyid:04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:96:59:26:80:d0:c1:6c:bd:6b:5a:63:e6:4a:69:6b:ee:59:
67:4b:52:a9:32:28:2a:18:7e:27:a6:71:cf:85:fd:7b:36:39:
ac:04:4f:84:99:a4:23:96:92:b1:16:6f:1b:a0:0f:b1:4f:10:
30:ce:6f:31:6a:33:e1:69:01:fd:91:64:90:ea:58:54:8a:a7:
78:61:0d:e4:d5:22:e1:c4:9c:a5:5c:f2:b3:59:46:be:cc:4a:
33:bc:b0:ab:ad:68:e9:c1:ad:6e:5b:32:18:3b:15:e5:d5:3c:
87:46:7b:fb:84:24:f4:87:8c:68:20:d2:35:fd:64:a5:52:23:
49:a0:71:75:92:db:ef:d7:16:e3:58:3a:f5:6f:83:62:9d:89:
cf:47:e5:9e:1b:90:a1:55:30:6c:46:9c:cf:d3:1d:c3:4f:62:
b1:03:7c:95:2a:35:7c:4a:c4:6f:cb:6d:70:be:bf:70:6d:a7:
06:f8:68:b1:a4:22:b0:5c:0a:8d:76:15:a3:5f:ac:ee:09:99:
0d:76:63:97:8f:a9:3b:0b:b2:87:b9:08:62:25:13:5b:2d:69:
e8:3e:4e:fa:c4:49:c1:69:af:e8:c6:4b:41:cb:fa:f6:52:4f:
67:8a:24:fc:ca:09:8f:67:6f:c3:ca:46:7c:62:72:43:55:1e:
a9:01:3c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:40 2025 by rpki-client