Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
File: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft (raw, json)
Hash identifier: enmHUFzrpokJzeqsm2/czk9fkAz08S/12JDLXo9O5wM=
Subject key identifier: 33:0F:29:A5:42:32:C1:15:A6:16:08:1F:57:6B:37:A7:28:10:2F:69
Authority key identifier: 04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
Certificate issuer: /CN=049d4f66598668079353721c21935a00319f6759
Certificate serial: 019844E376BE0DDFE142A34FEC77E66FFBA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
Manifest number: 1544
Signing time: Sat 26 Jul 2025 04:00:14 +0000
Manifest this update: Sat 26 Jul 2025 04:00:14 +0000
Manifest next update: Sun 27 Jul 2025 04:00:14 +0000
Files and hashes: 1: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl (hash: ZLSOpqbMLCsuvvJc6ZUzbVx43inXWD1YbLyHo1QmBPw=)
2: SBmVAlodI7xnOy2vKS8iSbQ2L-c.roa (hash: Qjp3sgcgeheRs3EPb5cqh07Ww165sSq1F+/13L3R5T4=)
3: g0VLR4dmZuTUcMAH8lFP9-35SEQ.roa (hash: VJzmNAtUkQtzYlHT74BgFDK6+FNteK79SAvoZ6OtMvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:e3:76:be:0d:df:e1:42:a3:4f:ec:77:e6:6f:fb:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049d4f66598668079353721c21935a00319f6759
Validity
Not Before: Jul 26 04:00:14 2025 GMT
Not After : Jul 27 04:00:14 2025 GMT
Subject: CN=330f29a54232c115a616081f576b37a728102f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:79:b2:82:ee:87:7a:08:a8:82:48:94:6f:54:
09:31:9c:29:c1:ed:68:5d:ce:01:ba:06:71:bd:8a:
8d:38:66:64:fd:51:7b:73:56:21:46:11:9c:39:1e:
fb:9f:c0:48:94:87:5d:29:8e:4f:1b:63:e1:3c:7d:
7e:02:e2:f7:2e:c9:64:4a:7d:a0:89:d3:a8:97:e9:
bc:69:fd:72:f2:42:5f:59:53:25:f1:ff:70:5b:6e:
cb:cd:6f:7b:72:a4:bc:46:d3:80:9d:ac:73:9b:ea:
e9:2b:2e:5f:43:e9:89:c6:33:2c:21:92:5c:d8:ac:
65:55:de:79:aa:86:10:0d:a6:55:fb:62:2d:cc:a3:
7c:41:67:e7:53:98:f7:eb:35:39:17:c9:71:52:cf:
0e:8f:1d:97:ad:93:09:76:a8:9e:59:86:9f:f5:ef:
9f:a9:92:e6:fc:fb:92:4a:f6:d1:b8:fd:4e:02:1d:
01:44:dd:c0:86:d9:20:3f:dc:65:46:fd:3d:13:8d:
8e:39:c3:8b:bf:da:40:55:50:11:14:f2:4a:b5:4f:
33:dd:2e:30:6d:d0:4b:9b:be:ab:be:0c:31:98:e3:
5b:cb:ac:6c:5d:82:30:b6:3a:58:30:5d:a8:25:8b:
db:14:c2:c5:d0:df:04:97:93:00:5f:40:4e:4c:09:
44:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:0F:29:A5:42:32:C1:15:A6:16:08:1F:57:6B:37:A7:28:10:2F:69
X509v3 Authority Key Identifier:
keyid:04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:3e:00:f2:be:01:61:5e:26:03:7a:a1:da:43:7d:36:0f:60:
74:33:26:bf:ca:6a:02:ca:f7:3f:5f:a4:78:f3:dc:c2:5d:ef:
b7:9f:98:f2:db:4d:c1:fb:df:11:26:33:4d:eb:9f:84:3d:56:
b6:67:0b:a4:8e:c2:41:38:e3:71:47:37:e0:59:77:9b:0a:40:
cb:16:8c:cd:dc:99:f8:a4:db:d6:b9:dc:8d:4b:11:55:de:7a:
2d:a1:a8:d5:ef:1a:76:46:96:05:b5:4f:26:e7:5c:45:c1:65:
73:a7:7c:e3:f7:43:a6:08:77:78:fd:40:4e:d4:7c:77:b9:9d:
65:98:2c:ac:2d:d1:d9:40:9c:3c:68:fb:cc:ef:3b:f9:44:49:
3c:0b:e9:73:fe:22:aa:54:3d:59:5c:bb:ed:89:11:9d:b1:c1:
c0:9f:cf:8e:70:68:93:c7:f8:5c:87:19:d2:fe:ad:d2:03:39:
b4:a0:d4:a0:c8:c3:60:53:2a:f4:97:70:ea:61:c5:ae:c5:64:
dc:27:d5:2a:c0:87:88:ed:98:73:cf:40:55:c8:df:db:42:e1:
f5:3b:13:f8:36:01:4e:0e:e3:29:13:06:29:48:e7:aa:f2:c6:
ae:1c:ff:8b:56:1e:6e:b4:5a:e2:ce:6c:e3:9f:f4:7f:f9:4d:
de:a9:58:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:20:19 2025 by rpki-client