Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
File: BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft (raw, json)
Hash identifier: eeIEYDNORh8RoKtb2Lb8ak1zmbNnoda54o9BCy4hZmw=
Subject key identifier: BB:63:8A:31:73:85:E0:FD:B5:26:26:79:9D:2E:22:EB:F6:4B:B2:C0
Authority key identifier: 04:90:43:47:A2:36:1A:CE:D7:C3:70:F7:44:6D:E7:08:27:7E:E6:D1
Certificate issuer: /CN=04904347a2361aced7c370f7446de708277ee6d1
Certificate serial: 01992330D6BF669C41BD332FE71AA4091FB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
Manifest number: 0571
Signing time: Sun 07 Sep 2025 08:00:27 +0000
Manifest this update: Sun 07 Sep 2025 08:00:27 +0000
Manifest next update: Mon 08 Sep 2025 08:00:27 +0000
Files and hashes: 1: BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl (hash: bj3QWKRxU0kVMNQMaVOBNCiz0tKbvwtcfSgumUvUXrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:d6:bf:66:9c:41:bd:33:2f:e7:1a:a4:09:1f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04904347a2361aced7c370f7446de708277ee6d1
Validity
Not Before: Sep 7 08:00:27 2025 GMT
Not After : Sep 8 08:00:27 2025 GMT
Subject: CN=bb638a317385e0fdb52626799d2e22ebf64bb2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0c:fa:c9:d6:e6:cd:91:2a:83:0f:02:f2:f8:
ea:ee:0e:09:9b:b6:7a:65:77:ed:b8:e2:a9:39:e9:
18:ae:82:08:5f:f6:2a:df:9a:22:f5:11:13:78:cb:
29:ce:86:05:1e:4f:e8:a0:25:f4:da:9a:fd:01:c7:
54:0e:fe:03:14:36:9f:34:94:c4:d0:15:e0:09:d7:
6f:a7:95:a2:91:a1:b1:06:c7:58:5c:0e:f8:71:fd:
e4:a6:fc:40:e3:61:ae:e7:bb:15:eb:d6:18:fd:c8:
c8:59:44:a5:65:9d:57:75:b5:25:e0:95:ea:0c:8e:
7d:f8:40:67:e0:00:37:b6:3b:79:a9:2d:bc:49:b6:
3a:8f:cb:54:68:de:b3:45:40:e5:8b:24:24:45:62:
11:96:56:75:2d:b9:35:6d:65:f1:3c:56:e6:32:b7:
c9:8e:66:60:56:a1:2d:1e:ab:74:16:5f:64:9c:73:
69:c4:67:5f:07:9e:4f:7a:84:35:1b:71:4b:46:4b:
cb:d7:86:78:f6:c6:67:5a:d6:26:c0:76:f3:1b:43:
17:93:cd:9d:36:b0:1e:56:b1:fb:fd:77:ff:67:a0:
c1:a8:8d:a9:88:3a:ae:8e:63:20:2f:7f:6e:4e:02:
72:b8:0c:6e:f9:8d:3f:d5:0c:cc:40:49:d7:e0:50:
82:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:63:8A:31:73:85:E0:FD:B5:26:26:79:9D:2E:22:EB:F6:4B:B2:C0
X509v3 Authority Key Identifier:
keyid:04:90:43:47:A2:36:1A:CE:D7:C3:70:F7:44:6D:E7:08:27:7E:E6:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:8d:a9:3f:28:a0:24:ac:24:32:09:af:48:e4:8a:b7:27:3b:
83:fd:f4:cd:da:22:fd:d8:c9:1a:a3:32:4e:68:ab:eb:9c:4c:
76:cd:00:b6:94:fc:b3:30:fc:b9:67:04:30:0d:00:88:b2:ee:
43:d5:f5:7d:8f:22:71:45:42:ae:c1:73:96:0d:2b:77:df:ea:
9c:03:b4:ec:2b:2f:0b:10:89:bd:a9:37:57:a1:48:f8:a8:a1:
e0:1a:38:61:e1:27:0b:3e:36:c4:79:64:77:5c:69:2a:2f:50:
2b:56:b1:3a:4f:84:0f:15:93:1a:bc:18:3c:1e:81:2c:bd:d0:
db:72:65:92:50:6a:d4:d0:8d:e5:20:3b:56:35:9e:3b:82:e0:
6a:0a:ba:72:39:61:fe:ea:96:39:4b:f9:de:4c:f7:13:58:e8:
4a:e1:5c:5f:3f:73:c7:03:82:d9:1b:f3:24:f6:52:63:d1:34:
02:d8:5a:a4:e8:0a:b9:d7:44:69:b6:4d:39:90:35:6c:5c:02:
12:f1:08:ed:07:43:0b:9b:c2:6d:da:4f:dd:51:c2:19:20:4c:
59:74:07:d5:01:6c:aa:5e:75:f3:f6:76:66:f6:b5:90:e1:00:
9f:99:c0:c4:2f:b9:e8:74:4f:42:b8:07:91:35:11:b5:f2:42:
a1:fe:33:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:11 2025 by rpki-client