Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3ebd0c-2991-4583-bfec-7122feafc8c7/1/BcW97HMY-HHVPoZkgvQXM97wlCg.mft
File: BcW97HMY-HHVPoZkgvQXM97wlCg.mft (raw, json)
Hash identifier: AfBrkyzA4GyvniodYvlrPcrR6mQXRXG3eKB6UfJvAF4=
Subject key identifier: 5A:B0:7A:B1:76:74:C7:09:5C:36:1E:72:94:C6:0A:11:01:F5:F0:BA
Authority key identifier: 05:C5:BD:EC:73:18:F8:71:D5:3E:86:64:82:F4:17:33:DE:F0:94:28
Certificate issuer: /CN=05c5bdec7318f871d53e866482f41733def09428
Certificate serial: 01984966CFC019C3E5CBCB4E4455F28D89B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcW97HMY-HHVPoZkgvQXM97wlCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebd0c-2991-4583-bfec-7122feafc8c7/1/BcW97HMY-HHVPoZkgvQXM97wlCg.mft
Manifest number: 0D61
Signing time: Sun 27 Jul 2025 01:02:11 +0000
Manifest this update: Sun 27 Jul 2025 01:02:11 +0000
Manifest next update: Mon 28 Jul 2025 01:02:11 +0000
Files and hashes: 1: BcW97HMY-HHVPoZkgvQXM97wlCg.crl (hash: nyRS1mDNlZTxczSh//h/ftBxJLUGnSuFnGMevvx5vHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebd0c-2991-4583-bfec-7122feafc8c7/1/BcW97HMY-HHVPoZkgvQXM97wlCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebd0c-2991-4583-bfec-7122feafc8c7/1/BcW97HMY-HHVPoZkgvQXM97wlCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BcW97HMY-HHVPoZkgvQXM97wlCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:cf:c0:19:c3:e5:cb:cb:4e:44:55:f2:8d:89:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05c5bdec7318f871d53e866482f41733def09428
Validity
Not Before: Jul 27 01:02:11 2025 GMT
Not After : Jul 28 01:02:11 2025 GMT
Subject: CN=5ab07ab17674c7095c361e7294c60a1101f5f0ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dd:56:0d:d7:c6:bf:1a:5a:7d:be:cf:f2:89:
45:70:b0:2c:98:ba:9a:44:6a:a6:b0:89:77:f2:a3:
97:54:7e:3f:6c:3f:e4:fd:5b:e5:a5:28:cf:a4:fc:
98:1a:98:f7:53:91:c4:be:33:f1:0d:e9:76:75:b8:
55:47:11:26:2c:fa:3d:65:44:f4:6d:96:d6:16:c8:
1e:60:5c:7b:74:97:ce:25:67:9e:49:cc:80:a6:47:
78:b6:60:54:f3:2d:fb:b2:56:50:84:5c:2a:a0:8f:
a2:4a:e7:54:23:d8:1e:2d:21:74:a2:0a:01:e8:be:
90:5b:be:7b:9f:02:6c:4c:5a:08:a8:af:4d:72:b3:
34:20:22:33:fb:3d:b9:46:08:a5:ea:fc:70:13:79:
58:ee:36:a1:a1:0e:82:b0:7d:40:fd:dd:3d:98:ee:
a7:ba:b0:d0:ea:2f:f1:0f:e3:70:9c:6c:34:85:29:
87:f3:19:ab:74:c2:a5:17:ff:bf:8a:a3:1b:ad:6d:
81:83:c1:c3:11:e2:a4:38:41:40:2f:2e:3b:64:ad:
30:ea:ed:8f:69:a4:60:52:f1:88:f4:bd:c5:99:9f:
9b:76:e1:74:ff:c6:60:49:55:34:49:d0:98:5d:82:
7d:27:6f:64:5c:35:38:37:dd:3a:c3:be:c2:78:e1:
97:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B0:7A:B1:76:74:C7:09:5C:36:1E:72:94:C6:0A:11:01:F5:F0:BA
X509v3 Authority Key Identifier:
keyid:05:C5:BD:EC:73:18:F8:71:D5:3E:86:64:82:F4:17:33:DE:F0:94:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcW97HMY-HHVPoZkgvQXM97wlCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebd0c-2991-4583-bfec-7122feafc8c7/1/BcW97HMY-HHVPoZkgvQXM97wlCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebd0c-2991-4583-bfec-7122feafc8c7/1/BcW97HMY-HHVPoZkgvQXM97wlCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:25:79:6e:be:60:23:2d:9f:47:2c:70:93:d9:76:2e:cb:59:
f6:0a:ec:81:0d:e0:8f:8a:26:47:ec:38:ab:79:a2:b0:b1:f2:
c7:4f:24:a5:fc:01:bc:3f:60:44:b9:f3:58:b7:eb:e5:55:16:
e6:57:54:f9:41:fa:2c:26:fc:cf:3a:34:73:a1:9d:d9:0a:7e:
80:d1:9c:aa:8c:52:f8:96:48:dd:c2:3a:5f:dd:48:4f:85:fe:
91:3c:0c:92:30:96:fd:4d:d8:be:a5:13:53:a7:68:5e:1d:0c:
f2:6f:99:6a:94:c0:19:96:ac:b5:49:31:81:3d:fe:93:3e:a0:
13:31:a3:bd:e1:14:9f:32:04:74:09:a3:42:e0:3d:34:50:4f:
49:13:c2:a8:37:02:6f:6d:60:d5:55:41:23:96:e7:dc:6d:1a:
e7:c4:d5:6f:5f:56:39:2a:cb:10:fe:64:35:17:52:dc:70:51:
30:d1:42:e5:d8:77:08:ac:c0:a0:f5:76:f9:12:a2:13:72:f9:
eb:b6:a8:c8:36:ab:e6:df:62:cb:a5:f9:1e:e5:45:ca:7b:db:
0a:43:82:dd:86:f9:82:ad:73:6e:63:f2:20:77:84:03:ad:db:
46:48:81:5b:c7:24:ef:10:6e:01:0d:7a:9a:6c:01:ca:69:4d:
a5:f3:11:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:29:24 2025 by rpki-client