Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
File: BjyTAb89LhVgz69-3EGnw-yKFqY.mft (raw, json)
Hash identifier: uJdlgcyR9AWdMNdjB2BNZwQjTYI2M4pswGbluzf86aA=
Subject key identifier: 74:FD:27:65:66:F2:68:7A:02:66:67:D0:35:F4:8C:43:BE:E3:C7:AE
Authority key identifier: 06:3C:93:01:BF:3D:2E:15:60:CF:AF:7E:DC:41:A7:C3:EC:8A:16:A6
Certificate issuer: /CN=063c9301bf3d2e1560cfaf7edc41a7c3ec8a16a6
Certificate serial: 019922FACD005504674FD5ECBBD9C26B17FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 07:01:25 +0000
Manifest this update: Sun 07 Sep 2025 07:01:25 +0000
Manifest next update: Mon 08 Sep 2025 07:01:25 +0000
Files and hashes: 1: BjyTAb89LhVgz69-3EGnw-yKFqY.crl (hash: ANNcgjMXiZpm63cGA7Qsmd2JSD1bBMl47FMDoPn5qjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:cd:00:55:04:67:4f:d5:ec:bb:d9:c2:6b:17:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=063c9301bf3d2e1560cfaf7edc41a7c3ec8a16a6
Validity
Not Before: Sep 7 07:01:25 2025 GMT
Not After : Sep 8 07:01:25 2025 GMT
Subject: CN=74fd276566f2687a026667d035f48c43bee3c7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c1:7c:85:15:d8:92:8c:6f:ef:c0:7e:4a:20:
54:91:e4:d6:4c:e9:8a:66:b9:4c:ba:e1:42:e2:de:
b7:a1:34:7e:34:67:69:1e:f1:6e:cb:43:75:0e:14:
a3:f0:f2:f9:bd:2a:0a:8a:3d:63:b9:a7:5b:a4:48:
60:3f:9d:eb:7d:8a:a1:a6:3a:26:b0:12:34:53:77:
d3:9e:09:80:17:ea:38:da:62:ba:f8:38:6a:1f:a7:
c5:8d:bc:6f:7c:31:0b:18:8d:c6:48:6d:ab:5c:60:
57:ad:6e:66:f9:01:1a:5d:44:5d:d1:5c:46:65:02:
5a:88:ec:95:08:67:33:6f:7f:03:80:4a:f5:cf:09:
45:c8:e4:ca:c6:74:50:51:f1:37:e6:52:97:75:58:
1e:fa:97:7c:58:d3:ff:0c:71:11:71:f8:d7:5f:f6:
54:af:a4:1a:20:41:73:ea:a1:f9:e1:13:09:a1:c4:
b4:07:a9:26:4d:fc:20:ae:e1:08:bf:59:2a:93:2a:
37:0e:62:54:99:0b:a1:dc:ea:98:61:ab:bb:33:94:
ca:4a:72:fb:17:28:5f:9f:e5:ba:cc:e0:78:1e:c6:
5b:a3:87:0f:7f:1a:5b:b9:41:63:31:86:38:50:79:
71:90:5f:69:59:e1:12:4e:3e:12:5a:99:a6:68:06:
88:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FD:27:65:66:F2:68:7A:02:66:67:D0:35:F4:8C:43:BE:E3:C7:AE
X509v3 Authority Key Identifier:
keyid:06:3C:93:01:BF:3D:2E:15:60:CF:AF:7E:DC:41:A7:C3:EC:8A:16:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:8d:26:95:e2:1a:f1:25:af:3d:b4:04:a0:7c:75:46:97:0d:
98:dc:30:4d:b6:32:ed:26:e3:cf:eb:07:6e:f0:db:a2:11:62:
8c:35:e8:44:04:f7:a8:92:48:ff:56:f8:96:04:d5:d8:39:c0:
f1:ed:6b:f3:f3:f1:fb:b6:92:17:8a:9c:fc:92:c1:a2:72:0f:
fd:e3:65:80:90:53:77:82:e6:fb:0c:a4:b0:1c:9a:02:2f:ce:
b5:f1:c1:61:ee:dc:71:08:43:4e:15:70:7d:50:6c:e9:f8:d7:
3d:53:28:12:7e:69:12:60:ba:92:99:93:d9:86:ce:81:57:af:
7e:72:8b:01:42:6f:40:e1:a8:0c:6e:95:e0:cf:1a:a6:21:f1:
48:08:e1:85:f1:48:fd:c6:09:0c:db:04:14:da:8d:d0:86:47:
fb:68:4b:ce:95:09:cd:ae:2a:be:c7:85:65:b4:d8:7c:95:fa:
01:56:9c:26:0c:a4:6f:f1:96:40:c0:2e:d2:90:bc:32:62:d3:
d4:e9:64:44:6a:6b:d0:43:b2:43:1f:02:2b:14:c8:f0:4a:02:
b6:e3:dd:35:f7:6a:4c:e0:7f:fa:85:bc:dd:ad:fb:71:17:0e:
51:15:1d:9a:22:47:e1:54:ff:63:a2:97:bf:b6:45:de:a0:2e:
7b:5f:a0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:51:18 2025 by rpki-client