Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
File: BjJUIiHK72RIzFRSFOAABxvVa4Y.mft (raw, json)
Hash identifier: ZOkiuf4G8C6vszaYvRaKiy0CjVJk31qiIANg6ViEezo=
Subject key identifier: C0:6D:32:E7:4F:0F:69:A8:48:F8:A8:40:6F:B2:38:BC:48:1B:F6:2E
Authority key identifier: 06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
Certificate issuer: /CN=0632542221caef6448cc545214e000071bd56b86
Certificate serial: 019846D24E4CE5EDC2878BE318E4936B4073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
Manifest number: 1036
Signing time: Sat 26 Jul 2025 13:00:44 +0000
Manifest this update: Sat 26 Jul 2025 13:00:44 +0000
Manifest next update: Sun 27 Jul 2025 13:00:44 +0000
Files and hashes: 1: BjJUIiHK72RIzFRSFOAABxvVa4Y.crl (hash: f9fluCQCZF83XsZ4O2hyw7tHGlHQHbK+mXXxp8vTWI8=)
2: GI2JqYrwfOB4H4-WFfI5AvlAgXw.roa (hash: wx2kzfl5/eKVV8cW/FCB0zPSR7qqCq5F0M1Y8hdHGxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:4e:4c:e5:ed:c2:87:8b:e3:18:e4:93:6b:40:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0632542221caef6448cc545214e000071bd56b86
Validity
Not Before: Jul 26 13:00:44 2025 GMT
Not After : Jul 27 13:00:44 2025 GMT
Subject: CN=c06d32e74f0f69a848f8a8406fb238bc481bf62e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7b:5c:57:18:5a:6f:86:f3:2a:24:e1:b8:ba:
f3:a7:d6:48:80:38:23:68:a5:2e:5d:6b:ca:fd:45:
6e:bb:9d:25:84:f1:de:2d:75:6b:41:8a:22:5c:28:
65:21:34:4e:1f:e0:da:bd:c4:40:38:1d:ca:7d:31:
5c:3c:64:7d:27:0b:53:41:98:96:75:0a:d1:fe:30:
2e:64:6f:3a:8a:a6:b7:1d:56:cb:0d:a9:55:9d:b3:
de:39:85:07:eb:71:a3:39:02:11:2c:59:56:ff:bf:
75:9b:79:85:59:5e:31:7d:b8:82:c9:d6:a4:cf:9e:
fd:be:81:29:2d:6e:49:88:ea:55:f6:c8:05:57:57:
ca:0c:e3:16:53:4f:70:b3:19:d6:5e:31:9e:c0:de:
9c:49:c0:a1:ee:67:d4:ae:c4:ba:6a:58:63:55:61:
a7:5b:88:cb:e7:07:92:5d:66:08:f8:1c:6a:ac:3a:
a1:cd:2f:95:51:ad:9e:c9:65:c1:2b:c7:f5:0e:17:
c6:bd:c2:a9:23:13:5e:e8:09:6d:0e:38:f7:17:45:
7e:a0:39:f9:59:da:a5:e1:63:df:5c:5c:69:ef:fb:
0a:13:25:65:9a:8d:2f:ba:bd:97:4b:7b:53:1f:31:
70:c6:b6:53:55:10:4e:d2:37:be:60:b8:b1:19:ea:
46:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6D:32:E7:4F:0F:69:A8:48:F8:A8:40:6F:B2:38:BC:48:1B:F6:2E
X509v3 Authority Key Identifier:
keyid:06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:8e:79:75:48:ac:33:0d:39:9c:61:28:b8:cf:99:3f:6d:75:
07:af:8f:bb:96:66:03:1d:84:c9:bd:62:bc:b9:8a:ba:bf:58:
f1:21:23:00:65:b5:d7:7c:e8:45:99:9e:b5:1a:1b:46:f2:6f:
45:e2:15:4c:db:2b:50:4c:c4:9b:10:7a:34:63:d0:14:92:12:
f4:fc:a7:6c:16:f6:ba:57:14:42:a2:d8:2e:c1:1c:ed:a2:b1:
a1:55:bd:f0:56:55:d6:cc:db:52:02:eb:15:06:25:3c:b9:e3:
3b:de:a5:3f:25:e3:6c:1e:47:cc:51:05:9d:8e:ea:3b:80:cd:
d9:6d:d2:91:49:ad:63:b4:e9:a4:9e:0e:c4:69:22:e2:f0:0d:
84:72:ae:d6:f6:92:36:8f:6f:82:14:53:8d:42:1e:f1:3b:4e:
50:5f:77:e4:2c:6c:99:80:e3:1a:f1:72:0d:ac:65:cf:5a:d8:
70:c1:29:88:02:65:67:8b:93:a9:94:8e:bc:68:f7:23:be:13:
fc:80:89:ee:20:06:30:49:bf:d0:02:f1:cd:f6:18:28:a2:ff:
ac:aa:5c:b1:82:46:85:07:c1:2a:44:34:ca:fb:b9:70:1b:66:
82:41:91:e7:95:79:73:23:cb:f4:23:cf:70:6f:2d:d5:b2:53:
9f:08:f2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:53:20 2025 by rpki-client