Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
File: BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft (raw, json)
Hash identifier: sWfM0ihr+W3JdlowdYxfgsSszYDgxipLBS7cqp+w2l8=
Subject key identifier: 93:0B:C2:82:6E:A6:80:63:13:16:65:71:33:83:D4:07:57:19:3E:A7
Authority key identifier: 04:34:5B:76:38:DE:9D:2D:29:66:52:7C:B3:63:E3:7C:31:D4:A1:88
Certificate issuer: /CN=04345b7638de9d2d2966527cb363e37c31d4a188
Certificate serial: 019A729390528E9CD3AE52A96AF11C8A79BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
Manifest number: 0653
Signing time: Tue 11 Nov 2025 11:01:04 +0000
Manifest this update: Tue 11 Nov 2025 11:01:04 +0000
Manifest next update: Wed 12 Nov 2025 11:01:04 +0000
Files and hashes: 1: 1-XQiidk5Ct3ju0BqANY0WBDUrWI.roa (hash: hKawH5abgtjD0UmUaEbKfYzMnvjfzoeylgKFbpggieE=)
2: BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl (hash: 4iHmQP8TyJsHmAv6tv3Cke6/GcFbesF8zu7Au5H8X5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:90:52:8e:9c:d3:ae:52:a9:6a:f1:1c:8a:79:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04345b7638de9d2d2966527cb363e37c31d4a188
Validity
Not Before: Nov 11 11:01:04 2025 GMT
Not After : Nov 12 11:01:04 2025 GMT
Subject: CN=930bc2826ea68063131665713383d40757193ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:33:aa:a4:0f:fd:a3:6f:e1:d7:28:a0:d9:ad:
12:78:6b:ab:da:10:e9:86:d2:bc:69:cd:33:1a:f3:
f1:10:90:52:9f:09:ad:d2:14:e1:e4:31:39:79:2f:
a6:93:d0:37:d5:3f:30:d7:79:ef:96:1d:b0:69:05:
aa:34:31:c8:d5:d6:26:b9:e2:d8:f9:b6:63:a0:67:
5a:26:2c:99:b9:ad:21:43:fb:4b:f3:47:38:0f:1f:
4f:af:00:a4:55:98:72:9c:cb:20:9c:e3:f4:f7:1f:
44:27:eb:20:37:69:75:fc:32:0b:41:f9:f2:44:85:
35:1b:86:e1:e1:58:89:c4:e0:d7:7e:75:17:46:1d:
d1:f2:fe:e4:1a:e1:3e:94:03:3b:15:c5:e1:21:60:
5f:0b:ab:4e:5d:d6:9b:52:00:a0:86:65:1f:79:8f:
13:e8:3c:d4:c0:51:3f:c0:9e:b8:c7:06:05:88:a8:
df:7b:33:0b:9b:51:da:4b:f0:c2:90:2a:d1:37:00:
93:cd:f2:6e:15:85:06:48:49:15:9c:23:41:b1:eb:
60:87:e9:97:c5:34:93:95:ad:44:39:63:c3:05:b2:
7f:11:61:81:04:35:26:41:68:0b:70:18:e3:a0:1d:
5f:33:26:f5:e3:49:d2:a2:11:76:7c:6b:96:d6:45:
0b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:0B:C2:82:6E:A6:80:63:13:16:65:71:33:83:D4:07:57:19:3E:A7
X509v3 Authority Key Identifier:
keyid:04:34:5B:76:38:DE:9D:2D:29:66:52:7C:B3:63:E3:7C:31:D4:A1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:64:99:df:e2:c5:a3:35:b4:e8:c0:74:ea:41:2f:33:cc:9a:
23:16:50:01:84:43:ba:66:50:10:e9:7d:27:4f:49:64:57:9c:
c5:65:08:2e:5c:72:2c:95:f6:95:b1:6a:a6:88:2b:75:02:53:
5c:8f:11:e1:7a:3e:74:95:2a:9c:27:cc:fe:9e:8f:c2:39:eb:
db:0e:90:33:bb:5b:6f:b1:b8:17:75:75:ba:db:73:83:37:3b:
dd:ef:27:d1:f5:af:09:25:3a:52:03:30:fa:6b:7c:4e:e7:52:
39:ff:78:cc:3a:40:e5:22:48:22:22:75:db:e1:09:84:4d:d5:
43:6b:aa:02:92:f0:eb:73:94:ef:7b:4b:8e:f4:97:c4:5e:f7:
0b:0c:89:a6:79:5c:2e:50:02:6c:e3:ac:2f:4a:ef:4a:6e:85:
4c:fd:e7:79:31:d7:55:11:fa:c8:11:06:f1:55:8c:55:07:e0:
9c:14:65:e0:31:be:73:01:73:13:65:28:39:12:76:0a:69:ef:
26:fe:2f:be:eb:f0:53:18:8d:54:57:8e:31:c9:51:80:fe:40:
51:76:22:c2:17:e6:31:40:17:0c:08:65:e4:33:39:f2:97:d2:
cc:03:0d:ae:ff:f2:79:7b:65:1e:47:89:db:6a:cf:d7:b4:96:
1d:7b:6b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:13:58 2025 by rpki-client