Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
File: BjyTAb89LhVgz69-3EGnw-yKFqY.mft (raw, json)
Hash identifier: NbY/09AQCGMH/BoafQXHj45hv+djLSQeC+FvbtxX79g=
Subject key identifier: 8F:E8:FC:C2:50:35:EE:AB:0E:18:05:8F:DF:7E:2D:7E:47:11:86:61
Authority key identifier: 06:3C:93:01:BF:3D:2E:15:60:CF:AF:7E:DC:41:A7:C3:EC:8A:16:A6
Certificate issuer: /CN=063c9301bf3d2e1560cfaf7edc41a7c3ec8a16a6
Certificate serial: 019A71136F52CFA8390B26C18664A443379C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 04:01:30 +0000
Manifest this update: Tue 11 Nov 2025 04:01:30 +0000
Manifest next update: Wed 12 Nov 2025 04:01:30 +0000
Files and hashes: 1: BjyTAb89LhVgz69-3EGnw-yKFqY.crl (hash: UTKIdDRLP4Q0i3E4Z6Pca9tLhiaHDi0Olu6b5mgkAhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:6f:52:cf:a8:39:0b:26:c1:86:64:a4:43:37:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=063c9301bf3d2e1560cfaf7edc41a7c3ec8a16a6
Validity
Not Before: Nov 11 04:01:30 2025 GMT
Not After : Nov 12 04:01:30 2025 GMT
Subject: CN=8fe8fcc25035eeab0e18058fdf7e2d7e47118661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:55:06:18:52:9f:9a:2e:f4:3f:99:af:7f:c7:
2a:2c:aa:8c:92:e7:13:48:70:6d:39:c7:d2:2b:ee:
fe:4e:bb:0d:e3:ef:0c:2b:a4:b4:ec:9b:23:92:fa:
36:46:0e:20:48:4d:df:e6:d1:31:54:fe:b1:12:72:
0e:4b:d7:bb:a1:f2:a1:8a:01:02:70:40:df:ab:5c:
73:2f:c8:7a:7a:8a:20:28:f6:32:c5:8c:81:12:c1:
38:29:2f:95:16:a7:aa:e5:7e:ad:d9:20:c3:24:c0:
2e:22:f2:ae:80:36:49:1b:0e:ae:57:bd:65:f4:a0:
5e:97:23:78:81:34:77:82:6c:05:45:92:c1:a3:e3:
ec:ae:a3:6a:68:df:b6:ca:b3:95:f8:08:15:32:01:
90:3f:8b:d7:e8:ae:09:b7:b1:11:1b:76:8a:66:d6:
75:e5:6b:eb:36:78:88:43:1e:cc:ec:ce:29:18:5b:
83:21:11:31:93:c7:b3:05:bc:ea:64:25:d6:9b:dd:
c0:89:00:bc:8e:58:18:4e:43:47:a6:f3:9a:41:5b:
5d:af:00:0d:fe:b9:20:52:23:e9:a0:9f:df:dc:2a:
68:d1:e8:cb:a9:1b:15:4c:76:74:74:3d:db:18:59:
d3:1a:9f:cd:d5:cf:19:a5:7e:46:b4:4c:23:9e:c8:
a5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E8:FC:C2:50:35:EE:AB:0E:18:05:8F:DF:7E:2D:7E:47:11:86:61
X509v3 Authority Key Identifier:
keyid:06:3C:93:01:BF:3D:2E:15:60:CF:AF:7E:DC:41:A7:C3:EC:8A:16:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:7a:d7:9e:a7:fb:35:6f:c8:0a:f7:bb:d6:39:bb:aa:70:d5:
95:70:0e:4c:f2:81:0d:d9:a6:82:e2:d1:e7:a0:a2:02:e7:eb:
03:76:73:ea:dc:65:64:b2:d8:50:29:2f:97:4f:a9:67:a9:0c:
1d:50:f7:7d:da:f8:88:c4:be:cf:20:d0:7d:9b:7e:2e:9e:e2:
c5:a4:dd:ce:d0:5b:da:de:2e:28:ac:64:9f:99:8b:5e:c7:a9:
b0:b5:90:8d:dd:57:37:7f:bb:35:ea:18:4b:4c:d5:27:80:cf:
46:b5:13:f0:11:6e:cb:4e:60:62:90:3c:0a:6e:ac:aa:56:f4:
06:78:33:81:d1:b5:1e:3c:51:7c:6e:9a:1c:91:34:54:c2:e3:
9d:3f:60:d1:77:2d:72:68:39:86:6c:61:bc:b1:56:ff:2f:5d:
a8:9a:12:22:2f:6c:a7:6a:ad:b7:42:67:f8:df:2b:04:a5:ff:
c2:cc:c7:35:6c:6c:83:84:8a:8a:ac:8c:6e:1b:40:30:b4:ad:
3a:34:6f:08:28:b1:30:af:00:4c:f6:4b:96:75:23:7f:42:33:
d4:21:96:bb:4c:8a:2f:1e:79:fd:ee:01:01:2e:ed:eb:9b:d6:
2a:69:b8:d3:0a:a1:da:cc:2a:ff:cd:ad:73:cc:d7:3b:72:1e:
0e:cc:3e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:33 2025 by rpki-client