Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
File: BjfRzl3D-oAOHR3PvaqEH93UOQU.mft (raw, json)
Hash identifier: R6mJPOlYxzuvKs1AaESahRNrGeSxebefbQc/LpeGnhc=
Subject key identifier: 79:CA:B9:24:91:6F:9D:68:8F:25:7D:A9:04:8B:03:28:D3:18:B4:B6
Authority key identifier: 06:37:D1:CE:5D:C3:FA:80:0E:1D:1D:CF:BD:AA:84:1F:DD:D4:39:05
Certificate issuer: /CN=0637d1ce5dc3fa800e1d1dcfbdaa841fddd43905
Certificate serial: 019A25C15057CC25C4B0A221D28625F33022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjfRzl3D-oAOHR3PvaqEH93UOQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
Manifest number: 1541
Signing time: Mon 27 Oct 2025 13:00:17 +0000
Manifest this update: Mon 27 Oct 2025 13:00:17 +0000
Manifest next update: Tue 28 Oct 2025 13:00:17 +0000
Files and hashes: 1: BjfRzl3D-oAOHR3PvaqEH93UOQU.crl (hash: YfJgANX1MMS42r00Kl2JenayqrN7p0tA7mLOV5ATM3U=)
2: cqs27uyShJLHJ19HI0wbuu9K6Mw.roa (hash: Io5SItgYrsPuNxUpvFI/wIElXAajrpA8wR3rTKWJTBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjfRzl3D-oAOHR3PvaqEH93UOQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:c1:50:57:cc:25:c4:b0:a2:21:d2:86:25:f3:30:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0637d1ce5dc3fa800e1d1dcfbdaa841fddd43905
Validity
Not Before: Oct 27 13:00:17 2025 GMT
Not After : Oct 28 13:00:17 2025 GMT
Subject: CN=79cab924916f9d688f257da9048b0328d318b4b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5c:76:06:f6:d8:f5:e8:ef:91:a6:c0:22:90:
16:84:32:14:fa:8e:49:da:99:f8:6a:12:82:91:e4:
95:3d:c9:d4:b3:f8:92:2f:4f:e5:31:9f:cb:6b:ab:
b3:c0:2e:3d:45:f9:b9:ce:a5:66:56:27:79:a5:02:
ae:ab:e4:91:4b:6a:d5:6d:a9:22:b6:31:7e:1a:9d:
ff:a7:36:09:0e:95:e1:bb:fc:85:f3:6c:49:be:79:
f4:c5:db:f6:e4:3f:08:03:ed:08:72:90:70:e2:be:
47:4f:ad:37:f1:6e:95:f9:c8:d5:a0:02:7b:9b:b5:
07:af:8c:78:47:8b:f0:1a:eb:04:12:9a:ba:06:ec:
12:a4:81:5a:3c:b7:a3:d0:3e:3b:f2:9e:1b:f4:90:
14:12:54:8f:b0:0c:5e:d0:90:ee:54:d2:f4:13:4e:
aa:c5:c0:a4:aa:65:6d:bf:cd:88:1e:89:0a:5e:14:
ef:74:28:bd:04:27:65:e7:da:bf:77:70:6a:0a:2e:
9c:3f:8e:ea:52:34:3b:1e:57:fe:58:fe:f5:35:63:
39:f3:54:23:d1:a4:2a:88:c2:56:80:73:3f:61:68:
72:79:e8:de:bb:c4:60:00:1a:25:12:56:20:74:4b:
49:5e:89:d3:8a:5a:74:4e:c3:c3:3f:10:56:71:0f:
c9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CA:B9:24:91:6F:9D:68:8F:25:7D:A9:04:8B:03:28:D3:18:B4:B6
X509v3 Authority Key Identifier:
keyid:06:37:D1:CE:5D:C3:FA:80:0E:1D:1D:CF:BD:AA:84:1F:DD:D4:39:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjfRzl3D-oAOHR3PvaqEH93UOQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:0a:45:b0:fc:57:f6:e4:b9:61:18:5c:62:91:90:80:b2:e3:
ec:e6:aa:ac:57:cc:60:32:7d:29:d6:ba:af:b8:44:98:4a:61:
fd:bd:2a:6f:b4:9c:54:a3:ae:c8:c0:bb:6d:b9:ce:b4:4b:fe:
14:07:d1:65:2f:3f:d8:c9:07:33:68:5c:49:70:fc:dc:d0:d3:
18:02:33:62:08:08:c1:4e:05:56:6f:95:ed:49:ef:63:39:96:
72:8a:28:94:f6:20:1d:77:96:74:27:05:ca:f4:eb:f7:00:3c:
b6:da:22:7d:35:17:66:0c:ea:80:26:c7:59:d2:14:06:c0:aa:
0b:19:65:60:c0:b9:b9:4a:4a:67:53:57:8d:2e:f5:f3:85:51:
7c:ec:3c:f0:b6:a1:28:a6:9e:3d:13:fd:9d:1c:e3:64:6d:0f:
ea:25:2e:b8:7a:c5:ba:c9:e0:e6:37:ea:d6:c7:61:49:0c:64:
4e:21:6b:52:5e:61:a3:5e:52:5f:d5:bd:0d:d0:15:b4:84:9b:
03:3a:d4:99:aa:f1:cb:bd:39:b7:b3:a5:86:2c:f1:d4:c2:04:
1d:a2:97:fc:48:75:54:51:31:39:34:29:2f:a8:63:bd:dc:3b:
a4:98:19:da:9b:5c:d7:20:93:f4:5e:ac:5e:4c:86:66:27:30:
65:59:1c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:48:14 2025 by rpki-client