Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
File: BvPXAJgq-awbr-TyqnGEStAHWR0.mft (raw, json)
Hash identifier: Lfb8v8f1CfksI3HDLYCS3rK5+S00KHwblOOvU3l63ME=
Subject key identifier: DD:A2:78:A4:B4:94:D8:45:21:D1:70:AF:BC:A5:E6:4F:1A:20:70:DA
Authority key identifier: 06:F3:D7:00:98:2A:F9:AC:1B:AF:E4:F2:AA:71:84:4A:D0:07:59:1D
Certificate issuer: /CN=06f3d700982af9ac1bafe4f2aa71844ad007591d
Certificate serial: 0199161B2C94686885B36B7EF3B29BA47109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BvPXAJgq-awbr-TyqnGEStAHWR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
Manifest number: 099D
Signing time: Thu 04 Sep 2025 19:01:43 +0000
Manifest this update: Thu 04 Sep 2025 19:01:43 +0000
Manifest next update: Fri 05 Sep 2025 19:01:43 +0000
Files and hashes: 1: BvPXAJgq-awbr-TyqnGEStAHWR0.crl (hash: nmjjRa/mThPR3Nv+Mx4cEtPWOp6Xn0NTL53kWkv+sQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BvPXAJgq-awbr-TyqnGEStAHWR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:1b:2c:94:68:68:85:b3:6b:7e:f3:b2:9b:a4:71:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06f3d700982af9ac1bafe4f2aa71844ad007591d
Validity
Not Before: Sep 4 19:01:43 2025 GMT
Not After : Sep 5 19:01:43 2025 GMT
Subject: CN=dda278a4b494d84521d170afbca5e64f1a2070da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fc:b5:5f:27:43:fb:de:d7:d4:b5:e7:06:fa:
47:a4:31:5d:1f:f3:b0:f2:66:0a:31:be:42:ea:ea:
61:76:ed:06:07:a2:e1:7b:24:8a:87:eb:c3:fe:af:
a1:39:44:ad:8d:4b:7d:64:f9:dc:be:f1:d0:46:f2:
c4:c6:96:b0:53:25:48:a5:92:28:90:26:0a:90:b5:
ab:c3:fe:2e:2e:e9:3f:18:2c:28:25:cf:13:ae:cf:
24:a6:57:4b:23:e1:20:0c:dc:9b:cc:1b:60:f3:7b:
d6:50:25:5f:b3:7c:b4:b9:af:68:90:ab:53:95:76:
a7:b6:1e:11:42:fb:0f:b8:86:5c:87:5a:c5:eb:b6:
e0:16:25:1f:62:ca:4f:4f:fd:2b:a6:78:f2:dd:ad:
75:89:a4:a2:79:6d:19:fc:82:2f:44:e9:49:c5:0c:
b4:65:16:be:04:c4:4d:a0:3a:c1:17:72:e0:46:d4:
28:bf:8d:86:fd:3c:ea:13:27:92:89:41:88:7d:9d:
48:1c:86:27:42:59:90:c9:0d:22:50:83:a7:66:00:
0d:21:57:04:0e:7f:9b:c7:be:c4:c9:63:3a:26:9f:
e3:9a:c0:84:ce:1e:91:70:e9:f3:f0:17:3f:c9:3c:
6d:0d:cf:85:f9:63:8d:fc:26:6e:90:d0:91:7d:d3:
7e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A2:78:A4:B4:94:D8:45:21:D1:70:AF:BC:A5:E6:4F:1A:20:70:DA
X509v3 Authority Key Identifier:
keyid:06:F3:D7:00:98:2A:F9:AC:1B:AF:E4:F2:AA:71:84:4A:D0:07:59:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BvPXAJgq-awbr-TyqnGEStAHWR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:1e:bc:8d:d7:d0:65:c1:4b:48:70:8b:5a:f6:30:34:23:3d:
3d:b2:24:e9:20:f8:0c:a0:65:40:85:a1:d5:35:36:ed:72:45:
de:30:e7:1b:28:06:08:a3:d6:63:69:ae:d4:12:e6:99:01:e1:
be:61:b4:72:d2:a2:f4:51:e3:24:14:f6:84:9b:24:8c:e3:8f:
07:57:40:ec:bf:7d:f2:90:98:24:35:1a:a1:bc:c0:af:86:38:
43:25:97:31:c8:69:fb:90:9a:26:ef:3b:0f:84:18:28:f2:f8:
92:d7:5a:10:3a:8a:0e:9b:0c:c4:01:26:2c:8f:1b:3c:a0:be:
f2:ae:3e:80:c6:75:74:d8:d4:ae:8c:a3:fd:bc:dc:11:74:75:
be:7f:1f:4e:e8:f0:e0:a3:db:6c:4f:a4:0a:3a:5a:e1:61:a7:
d8:26:2c:c7:98:c7:e2:2e:a9:86:b9:c4:df:3a:01:7f:32:dd:
7e:71:26:c0:80:0c:77:bb:c4:6c:e2:f1:f2:1d:01:d5:d9:15:
31:73:82:a0:42:99:22:50:1d:9a:5a:56:b7:82:cf:29:c0:4a:
4f:f1:3e:3c:a9:e6:1a:96:f3:3a:28:7b:d3:d6:a1:b8:d7:d8:
4d:b1:a7:19:10:34:d4:8e:80:08:03:4b:76:56:4f:6f:9c:3e:
e2:f6:71:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:27 2025 by rpki-client