Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
File: BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft (raw, json)
Hash identifier: VhDKDUpf4JmiEVCS+0ZqKqb3N6HqZGtmAxm2+gQMnGA=
Subject key identifier: A5:26:85:56:42:ED:5E:19:E2:02:25:CA:1B:58:D5:05:67:BA:91:B5
Authority key identifier: 04:90:43:47:A2:36:1A:CE:D7:C3:70:F7:44:6D:E7:08:27:7E:E6:D1
Certificate issuer: /CN=04904347a2361aced7c370f7446de708277ee6d1
Certificate serial: 019A714A05A0C85A1C421A70A1F640E40BB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
Manifest number: 061E
Signing time: Tue 11 Nov 2025 05:01:07 +0000
Manifest this update: Tue 11 Nov 2025 05:01:07 +0000
Manifest next update: Wed 12 Nov 2025 05:01:07 +0000
Files and hashes: 1: BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl (hash: kovxGs3EJcJdFU1Eoqc9PPt3QtJ3YhjXsMM0j1+HmBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:05:a0:c8:5a:1c:42:1a:70:a1:f6:40:e4:0b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04904347a2361aced7c370f7446de708277ee6d1
Validity
Not Before: Nov 11 05:01:07 2025 GMT
Not After : Nov 12 05:01:07 2025 GMT
Subject: CN=a526855642ed5e19e20225ca1b58d50567ba91b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:57:b9:aa:08:4d:54:26:07:3a:52:a9:57:f7:
c2:30:47:58:07:57:65:1a:75:07:dd:d9:0b:2a:35:
9d:78:f5:0a:8f:dc:c4:62:96:5f:f1:61:8b:69:83:
d2:38:d3:b3:fd:38:bb:4e:d7:00:66:9b:ef:54:a9:
87:17:9e:8a:42:7f:30:0a:59:71:f4:58:05:9c:7a:
09:69:52:7a:48:c2:c7:85:a4:5c:73:00:b3:ab:40:
fd:1f:6f:4a:3a:7f:01:62:e5:74:d0:2a:ff:1f:f9:
3e:3b:ad:d1:a1:ee:15:a2:71:5e:01:bb:d3:87:34:
3b:5a:c2:d7:1a:84:04:d1:28:2d:e5:fb:4e:0a:35:
f4:7d:08:bb:7f:cb:83:29:6d:12:e1:7d:6e:0e:1e:
05:49:e5:7f:d1:54:e2:44:d7:30:da:3c:93:80:f2:
98:bb:14:7e:a4:7e:31:3a:8f:c4:5b:95:71:bc:7f:
19:1c:9f:9b:f7:cf:13:11:12:21:ab:69:06:ea:c9:
16:0e:2b:cf:2e:d0:f5:c6:f5:59:49:e8:5d:13:11:
f2:c7:3a:45:6a:24:15:5e:d2:f4:cb:0c:a7:5d:59:
f3:3b:4f:04:1b:ba:b1:02:89:07:f2:0b:f8:04:26:
a4:65:86:26:0a:63:c9:5e:73:9e:c9:b9:9c:cc:f6:
bb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:26:85:56:42:ED:5E:19:E2:02:25:CA:1B:58:D5:05:67:BA:91:B5
X509v3 Authority Key Identifier:
keyid:04:90:43:47:A2:36:1A:CE:D7:C3:70:F7:44:6D:E7:08:27:7E:E6:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:d0:80:ab:67:3b:e9:fa:51:75:a1:1c:65:e9:74:df:27:37:
4e:a0:6e:9f:63:f4:db:61:ba:49:1b:32:04:ba:31:a9:77:03:
69:0a:07:cc:46:9e:c3:65:ed:2f:1a:f4:69:b4:23:83:24:52:
e2:40:67:31:e9:63:11:e7:59:72:2f:11:0c:27:80:e4:2f:80:
e2:f7:40:5e:11:1a:b7:15:36:c5:22:46:bf:98:9e:17:0b:1e:
e4:74:ac:73:f3:a5:be:28:26:b2:04:6e:3a:0b:3e:04:66:89:
79:62:f4:30:13:d0:2a:d8:95:1c:50:e4:76:87:f4:e4:d7:da:
7f:f1:54:3f:b8:20:13:21:6a:fb:91:98:ac:b7:d2:e5:7e:60:
6c:ea:54:5b:0b:21:c6:65:f8:1d:e9:03:5a:f9:e8:62:d3:d0:
cc:90:9a:ac:54:97:50:37:fc:d8:be:4b:57:29:91:cd:77:f7:
5f:f1:b0:07:59:bb:1f:d8:f0:74:5b:de:b4:b1:46:fc:fd:fd:
2f:e4:35:82:12:be:b0:1c:1f:12:43:2a:a8:21:a3:b4:71:d8:
90:20:0a:d5:2f:80:68:8f:72:b0:b6:f1:82:f6:46:d0:a2:3f:
6b:a7:cd:70:0c:91:03:20:e0:bf:af:41:1c:38:d4:74:ec:40:
2e:5c:d0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:25 2025 by rpki-client