Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
File: BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft (raw, json)
Hash identifier: 0DAYwcKQmbLY5i2D9zt2mD5WOqlbgvSQNCVgUV0tMkk=
Subject key identifier: 78:35:05:47:0A:10:E5:EC:A6:3F:37:2E:C6:44:DD:72:0F:F9:60:D4
Authority key identifier: 05:77:BB:93:24:FC:75:0A:53:E0:55:84:8E:F0:69:03:41:6C:3E:08
Certificate issuer: /CN=0577bb9324fc750a53e055848ef06903416c3e08
Certificate serial: 019883570A6FD85D80301F77FD1EE097FAAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
Manifest number: 161A
Signing time: Thu 07 Aug 2025 07:02:55 +0000
Manifest this update: Thu 07 Aug 2025 07:02:55 +0000
Manifest next update: Fri 08 Aug 2025 07:02:55 +0000
Files and hashes: 1: BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl (hash: i8BfGoao3s8qZ9i2ylmUIFnkZXJ4shZaDxLTmnssfAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:57:0a:6f:d8:5d:80:30:1f:77:fd:1e:e0:97:fa:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0577bb9324fc750a53e055848ef06903416c3e08
Validity
Not Before: Aug 7 07:02:55 2025 GMT
Not After : Aug 8 07:02:55 2025 GMT
Subject: CN=783505470a10e5eca63f372ec644dd720ff960d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a9:f1:a3:3c:58:1d:29:14:72:4f:53:95:1f:
e3:c7:f1:c6:d1:4d:f1:61:ed:9a:b8:79:7e:ef:67:
29:2f:df:cd:b9:4c:b8:0e:75:9e:91:32:e0:cd:a5:
0e:b5:18:80:5b:13:3c:ef:12:31:27:8c:76:e1:92:
e3:7c:89:3d:9f:1f:74:b7:8c:42:c1:c2:80:18:0f:
ff:46:96:d3:f3:2b:d9:c2:08:2e:10:92:0d:29:a9:
7f:be:6f:c2:db:80:ed:c9:d4:e0:8f:31:f1:e2:bc:
e9:42:ce:3b:1f:89:04:7f:f7:a3:76:46:2d:fb:26:
08:e8:ae:b2:8b:67:d7:cf:74:19:3d:7e:d5:d3:5e:
e2:db:38:dd:84:be:82:6a:a1:10:61:45:bf:6e:ed:
04:1a:95:c9:8a:2b:00:ad:06:7d:d7:29:f6:6d:84:
f4:df:11:f9:fd:76:74:cc:19:92:21:c9:b4:98:d5:
a4:d9:0f:1f:c5:8a:b9:e3:cd:80:cb:b7:84:22:05:
90:bd:1c:30:a4:6d:7a:c1:73:69:8c:53:e8:33:4c:
fc:50:f3:96:63:86:5d:6c:0a:8f:30:ce:48:ba:67:
fd:f5:2b:be:a4:f4:9c:85:6f:5f:39:f8:c2:09:7b:
a9:c0:cf:6e:44:dc:fa:7e:35:2d:42:5c:8b:d0:7e:
9c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:35:05:47:0A:10:E5:EC:A6:3F:37:2E:C6:44:DD:72:0F:F9:60:D4
X509v3 Authority Key Identifier:
keyid:05:77:BB:93:24:FC:75:0A:53:E0:55:84:8E:F0:69:03:41:6C:3E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:30:a1:f3:77:8e:44:c7:82:d1:66:f8:aa:17:6d:da:c6:56:
aa:58:3d:e6:aa:e1:67:89:78:74:a7:be:82:65:a6:40:c0:c3:
39:25:23:d6:70:36:b8:e9:c0:e8:9a:e6:4a:bc:99:85:47:ad:
3d:84:55:0e:24:dc:47:64:b5:73:18:9c:e8:2f:45:54:35:0c:
31:78:27:62:94:97:2f:e0:f2:49:26:5c:1f:eb:26:d8:89:8c:
e2:4d:fd:12:c5:c3:48:22:4e:3a:6c:4b:a0:8a:d5:a4:14:77:
b0:d7:b1:cb:63:0d:40:8b:8a:9c:13:e9:86:03:93:c1:4c:52:
4b:63:f0:f4:9e:18:d0:0a:64:de:1b:dc:90:4b:cf:9f:2e:10:
08:c4:63:28:f0:a9:4c:5d:8c:d2:47:68:e4:b6:7d:f5:01:08:
20:1b:0c:bb:0e:be:80:b8:e3:69:df:34:48:6a:43:ca:53:4a:
f6:9c:35:4d:3a:86:30:b9:a7:ff:6a:af:50:d4:0f:d1:0c:01:
72:e9:33:dd:d7:e5:ed:17:d0:76:d7:1f:6f:3b:a1:f4:f1:83:
12:10:67:65:9c:77:f1:0d:8c:57:21:8a:52:e0:b9:e7:6b:bc:
60:5b:53:5a:ec:af:48:e7:02:14:ae:43:ee:7a:4d:36:ef:66:
29:45:77:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:11:29 2025 by rpki-client