Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft
File: BpSFf1Ib4h4SZzna13O05qGKxps.mft (raw, json)
Hash identifier: aoMNTEYh86XLAFTDCx8tnr7POD0AaDuYYG2kaXfHxd8=
Subject key identifier: AB:50:00:4F:0A:2C:A6:AA:A9:93:A6:21:D8:EE:A1:18:AD:2F:40:74
Authority key identifier: 06:94:85:7F:52:1B:E2:1E:12:67:39:DA:D7:73:B4:E6:A1:8A:C6:9B
Certificate issuer: /CN=0694857f521be21e126739dad773b4e6a18ac69b
Certificate serial: 0198496591222A19079E2489995A4D5C3046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpSFf1Ib4h4SZzna13O05qGKxps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft
Manifest number: 0941
Signing time: Sun 27 Jul 2025 01:00:49 +0000
Manifest this update: Sun 27 Jul 2025 01:00:49 +0000
Manifest next update: Mon 28 Jul 2025 01:00:49 +0000
Files and hashes: 1: BpSFf1Ib4h4SZzna13O05qGKxps.crl (hash: 5QAZYO/JBViESyWATV8D1UhXYE+HGric5n3ogO3AF9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpSFf1Ib4h4SZzna13O05qGKxps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:91:22:2a:19:07:9e:24:89:99:5a:4d:5c:30:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0694857f521be21e126739dad773b4e6a18ac69b
Validity
Not Before: Jul 27 01:00:49 2025 GMT
Not After : Jul 28 01:00:49 2025 GMT
Subject: CN=ab50004f0a2ca6aaa993a621d8eea118ad2f4074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3e:b7:e7:c4:66:17:ad:6c:16:a2:6e:3e:b9:
44:33:c5:3d:75:bf:79:f1:f9:5b:74:09:e7:78:2e:
be:eb:46:b4:a0:3e:fe:ec:ff:b3:5c:ad:9e:3c:2e:
91:85:c1:87:38:9f:83:39:4e:bc:36:fc:18:6e:5f:
6d:6a:93:3d:85:0d:5a:d0:aa:ee:df:a8:4a:04:77:
7e:1d:25:0f:6d:42:72:df:47:c1:46:10:81:b2:b4:
b2:df:c3:1f:67:2c:a5:dc:2b:78:de:98:cd:bf:10:
93:b2:f5:74:ba:7f:57:c7:ed:b8:a3:73:15:56:f2:
d0:94:c0:6a:42:16:ae:54:a4:cd:de:92:50:82:6d:
35:af:68:3a:cd:4b:da:55:21:11:5e:cd:31:79:b7:
c7:d2:85:7a:fe:36:27:1d:7e:42:6d:07:6f:e6:7c:
97:81:22:05:40:a8:85:f1:93:5c:36:78:b8:6d:f3:
5c:29:17:98:70:c3:6d:62:a9:44:44:ed:34:30:15:
fd:00:3f:06:8f:a3:4b:a5:dd:a9:c9:1c:44:29:e7:
45:ae:97:45:cb:e0:62:6b:e1:ba:d2:c2:08:61:bc:
18:87:af:ee:17:ed:4e:13:fe:f8:4f:2c:c2:d8:99:
cf:ba:e8:7d:2f:30:b0:2b:a0:4e:f3:bc:be:28:71:
8e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:50:00:4F:0A:2C:A6:AA:A9:93:A6:21:D8:EE:A1:18:AD:2F:40:74
X509v3 Authority Key Identifier:
keyid:06:94:85:7F:52:1B:E2:1E:12:67:39:DA:D7:73:B4:E6:A1:8A:C6:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpSFf1Ib4h4SZzna13O05qGKxps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:9a:e8:f4:44:cf:65:5d:46:f9:ba:c8:d9:e0:aa:15:9e:d9:
69:15:2d:8e:0e:0e:92:96:d4:21:af:97:70:63:f4:23:1d:71:
aa:f4:7e:98:49:27:2c:65:01:aa:16:36:ea:15:87:80:59:b1:
0e:2a:ff:f2:5f:29:0c:20:cc:53:92:67:9d:78:de:80:de:81:
04:a8:dd:73:57:2a:99:ae:63:0d:03:a1:56:a8:57:96:ec:c1:
aa:47:f4:e1:3c:b3:1e:6e:74:ae:1c:4e:d5:f4:7b:d4:7c:ff:
17:f2:c1:0e:72:f2:de:a7:9d:85:c2:fe:32:5f:fd:d2:58:74:
ce:2a:96:78:f5:00:ab:1c:64:cb:c0:41:ac:44:f9:34:2d:21:
6c:a7:6c:be:f9:3e:4b:76:b8:7b:ea:9f:3a:eb:41:f1:c7:b1:
d7:31:f8:ff:a2:e2:8b:f1:c6:38:2a:70:3b:1e:77:fd:8c:31:
5b:0a:d7:f6:41:e0:4b:01:bd:1e:58:3a:1a:2f:e7:d4:fa:e1:
f7:e6:bc:33:62:9f:9c:66:af:a3:99:41:a3:b6:64:6c:53:31:
ea:8f:fa:cc:10:c8:1c:3e:ae:58:ad:72:e8:2b:77:52:84:ae:
5c:a8:cd:12:42:b3:63:a1:23:55:05:e0:a8:c7:1e:77:8f:70:
fd:00:e6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:20:27 2025 by rpki-client