Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
File: BDjuFv-LwYTI-qF62vWZ4_rwynE.mft (raw, json)
Hash identifier: ZFzfwZS5E7s/lC7LWq5dUr/Qb16Ytj1dBdMCNvIm6PI=
Subject key identifier: C7:2E:E3:ED:D2:DB:FE:A7:BC:5E:1F:20:22:3F:C3:E3:CD:CC:4C:8E
Authority key identifier: 04:38:EE:16:FF:8B:C1:84:C8:FA:A1:7A:DA:F5:99:E3:FA:F0:CA:71
Certificate issuer: /CN=0438ee16ff8bc184c8faa17adaf599e3faf0ca71
Certificate serial: 0198A0F208D5D72F2951A53604929E035D02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
Manifest number: 0BF1
Signing time: Wed 13 Aug 2025 01:01:13 +0000
Manifest this update: Wed 13 Aug 2025 01:01:13 +0000
Manifest next update: Thu 14 Aug 2025 01:01:13 +0000
Files and hashes: 1: BDjuFv-LwYTI-qF62vWZ4_rwynE.crl (hash: 1tFtZ0PG7b0eo9P09qAhAc2plQOJ86ESmZFeJj8yj4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:f2:08:d5:d7:2f:29:51:a5:36:04:92:9e:03:5d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0438ee16ff8bc184c8faa17adaf599e3faf0ca71
Validity
Not Before: Aug 13 01:01:13 2025 GMT
Not After : Aug 14 01:01:13 2025 GMT
Subject: CN=c72ee3edd2dbfea7bc5e1f20223fc3e3cdcc4c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1f:aa:8e:f6:c2:da:0b:64:65:a9:e5:30:45:
9e:19:51:d6:a5:e8:4d:b2:4c:2e:3f:a9:d7:cc:51:
ef:d7:b6:ac:b7:98:1b:95:72:1f:81:23:37:03:f4:
50:32:eb:f4:f9:03:05:28:1e:8f:bb:80:86:d6:c4:
19:ab:0d:7a:85:96:d2:96:7f:04:8d:e1:55:3a:19:
2e:7b:6e:d6:00:7b:75:39:34:85:3f:26:3d:1c:31:
fa:68:1a:d6:50:7c:50:4b:f2:06:15:f0:ec:db:c0:
15:ab:5b:68:62:49:7b:dc:bf:56:3e:b0:e3:c2:2b:
1d:64:ee:d0:12:d0:dc:62:7e:ed:b0:0a:46:7a:83:
5e:46:01:19:a2:36:51:c7:e1:c2:40:c3:bd:61:db:
3d:27:6d:a1:d1:d1:63:da:70:e8:5b:c6:7d:72:8d:
eb:09:41:90:d1:c0:b1:9a:58:ce:9d:1b:4d:eb:d8:
12:92:01:b1:ea:3f:6d:b7:2d:6c:fe:14:9b:5d:78:
a6:36:ff:03:be:b5:c2:77:f4:a4:77:34:3f:fd:63:
1e:15:60:b3:5c:14:f9:d8:87:a1:4e:35:cd:88:59:
aa:39:f1:31:0d:a8:15:77:67:d0:66:f6:29:5b:a3:
63:48:44:48:8a:c6:fe:36:e6:17:5e:ff:5e:14:66:
4f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2E:E3:ED:D2:DB:FE:A7:BC:5E:1F:20:22:3F:C3:E3:CD:CC:4C:8E
X509v3 Authority Key Identifier:
keyid:04:38:EE:16:FF:8B:C1:84:C8:FA:A1:7A:DA:F5:99:E3:FA:F0:CA:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:a8:c0:89:cf:48:50:b7:b9:06:2f:5e:ba:a9:fc:94:5b:26:
97:2d:2c:d3:95:8a:ae:fd:15:23:33:49:85:42:c4:1c:e5:88:
34:48:e1:69:e2:b1:62:d9:c2:d3:03:f0:59:63:71:ac:ba:21:
78:34:18:4c:08:f1:b0:e0:a9:b3:35:73:6d:1e:45:59:55:f2:
1f:93:7f:2e:cc:78:e9:f0:08:71:20:a8:16:ea:d1:66:61:b5:
74:21:a4:d2:1f:a0:c9:81:51:41:17:16:1f:f2:59:7d:41:e1:
9d:d5:bd:24:e3:ea:4c:7c:d9:7f:89:53:61:7b:57:9b:da:96:
fe:9f:9b:3b:40:c5:83:8b:92:3e:6f:b8:4b:6f:12:57:f1:e1:
b9:e8:b4:11:08:69:9b:4b:e1:3b:a9:ec:96:a6:b1:6c:0f:e9:
c7:b7:3c:8a:a5:f7:d4:bd:28:9f:e8:38:e6:89:82:96:b3:1e:
9d:6e:bf:0e:2b:7d:0e:0b:a3:01:ba:d4:af:0f:06:46:53:2c:
4b:9e:04:6d:2a:42:9d:5e:2d:17:0b:85:83:7f:68:fd:b6:0c:
72:f4:94:7a:e8:ba:66:60:c4:79:0e:23:b6:5d:28:72:8f:f9:
73:6a:bd:9f:12:7e:dd:29:55:4b:0c:67:8e:58:d6:6f:1c:a8:
1f:b6:02:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZig8gjV1y8pUaU2BJKeA10CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MzhlZTE2ZmY4YmMxODRjOGZhYTE3YWRhZjU5OWUzZmFm
MGNhNzEwHhcNMjUwODEzMDEwMTEzWhcNMjUwODE0MDEwMTEzWjAzMTEwLwYDVQQD
EyhjNzJlZTNlZGQyZGJmZWE3YmM1ZTFmMjAyMjNmYzNlM2NkY2M0YzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAih+qjvbC2gtkZanlMEWeGVHWpehN
skwuP6nXzFHv17ast5gblXIfgSM3A/RQMuv0+QMFKB6Pu4CG1sQZqw16hZbSln8E
jeFVOhkue27WAHt1OTSFPyY9HDH6aBrWUHxQS/IGFfDs28AVq1toYkl73L9WPrDj
wisdZO7QEtDcYn7tsApGeoNeRgEZojZRx+HCQMO9Yds9J22h0dFj2nDoW8Z9co3r
CUGQ0cCxmljOnRtN69gSkgGx6j9tty1s/hSbXXimNv8DvrXCd/SkdzQ//WMeFWCz
XBT52IehTjXNiFmqOfExDagVd2fQZvYpW6NjSERIisb+NuYXXv9eFGZPsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcu4+3S2/6nvF4fICI/w+PNzEyOMB8GA1UdIwQY
MBaAFAQ47hb/i8GEyPqhetr1meP68MpxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkRqdUZ2LUx3WVRJLXFGNjJ2V1o0X3J3eW5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy80OTBhMjYtZTFmNS00ZmQ1LWJiZmMt
ZmU0NGJiODhiYzIwLzEvQkRqdUZ2LUx3WVRJLXFGNjJ2V1o0X3J3eW5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy80OTBhMjYtZTFmNS00ZmQ1LWJiZmMtZmU0NGJiODhiYzIw
LzEvQkRqdUZ2LUx3WVRJLXFGNjJ2V1o0X3J3eW5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYKjAic9I
ULe5Bi9euqn8lFsmly0s05WKrv0VIzNJhULEHOWINEjhaeKxYtnC0wPwWWNxrLoh
eDQYTAjxsOCpszVzbR5FWVXyH5N/Lsx46fAIcSCoFurRZmG1dCGk0h+gyYFRQRcW
H/JZfUHhndW9JOPqTHzZf4lTYXtXm9qW/p+bO0DFg4uSPm+4S28SV/Hhuei0EQhp
m0vhO6nslqaxbA/px7c8iqX31L0on+g45omClrMenW6/Dit9DgujAbrUrw8GRlMs
S54EbSpCnV4tFwuFg39o/bYMcvSUeui6ZmDEeQ4jtl0oco/5c2q9nxJ+3SlVSwxn
jljWbxyoH7YCBQ==
-----END CERTIFICATE-----
Generated at Wed Aug 13 08:46:24 2025 by rpki-client