Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.mft
File: Bjc-uCHJZromeoONlS_EpBjLoQc.mft (raw, json)
Hash identifier: OAwtOigXXHTE8tE9oXq5CBDzbp5cy2QPXamSvmEse1A=
Subject key identifier: 47:FA:08:51:08:5B:CC:F4:23:5D:9A:53:75:69:63:6A:8D:20:00:61
Authority key identifier: 06:37:3E:B8:21:C9:66:BA:26:7A:83:8D:95:2F:C4:A4:18:CB:A1:07
Certificate issuer: /CN=06373eb821c966ba267a838d952fc4a418cba107
Certificate serial: 019A7293E346BC7FE0A9FB5E0048FC67BF87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bjc-uCHJZromeoONlS_EpBjLoQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 11:01:25 +0000
Manifest this update: Tue 11 Nov 2025 11:01:25 +0000
Manifest next update: Wed 12 Nov 2025 11:01:25 +0000
Files and hashes: 1: Bjc-uCHJZromeoONlS_EpBjLoQc.crl (hash: cqIpn0Z/lwm954dg53zyh/P76q1g5QDIPl0z2sCKoeo=)
2: hzUgKoXbBv3CJRIA7Xas-eVKMjQ.roa (hash: RO7C6LUDj1R9ksySlerfgqbCZKiIyzwGTWcyFyoo2K4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bjc-uCHJZromeoONlS_EpBjLoQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:e3:46:bc:7f:e0:a9:fb:5e:00:48:fc:67:bf:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06373eb821c966ba267a838d952fc4a418cba107
Validity
Not Before: Nov 11 11:01:25 2025 GMT
Not After : Nov 12 11:01:25 2025 GMT
Subject: CN=47fa0851085bccf4235d9a537569636a8d200061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:65:f4:9d:df:77:d5:c7:b3:bc:80:71:7a:b6:
ed:2f:2d:24:57:f3:f3:91:57:cf:1d:dc:7d:e4:71:
4f:08:4b:f2:0d:69:3c:40:72:f8:2f:aa:cb:a5:ce:
df:aa:25:7f:e4:16:20:bf:70:ac:96:9e:e2:1d:1b:
97:12:b0:65:04:d2:7a:31:0e:0c:16:55:88:b7:89:
05:8d:a1:4d:f1:c4:22:10:d6:ea:80:49:49:cd:b5:
82:4e:99:a6:67:6d:45:08:84:d6:42:b5:45:f6:6f:
3c:3d:c3:b4:20:9f:b7:1a:be:7b:20:c9:0c:76:84:
b4:90:d7:fc:7f:46:f4:b7:8e:94:6f:a3:ec:42:89:
7a:8a:44:16:a2:38:38:43:8e:3b:39:01:04:78:58:
45:f7:63:65:35:5d:e1:f3:a2:a8:43:a4:63:1c:8a:
0d:73:b1:05:cb:b3:1f:06:1b:cb:72:1b:b0:81:08:
31:4b:74:04:20:a0:7d:04:11:23:93:75:b4:57:ce:
d5:a7:fb:2e:65:15:3e:f1:6e:dc:08:54:00:c2:5d:
de:0e:0c:8c:03:b3:ad:c5:6a:fe:e0:98:20:94:03:
49:77:80:b4:2e:08:e5:81:12:2c:e8:22:21:48:e8:
66:0e:55:bb:91:f4:9b:c4:f9:34:11:52:b5:af:00:
cd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FA:08:51:08:5B:CC:F4:23:5D:9A:53:75:69:63:6A:8D:20:00:61
X509v3 Authority Key Identifier:
keyid:06:37:3E:B8:21:C9:66:BA:26:7A:83:8D:95:2F:C4:A4:18:CB:A1:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bjc-uCHJZromeoONlS_EpBjLoQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:31:7a:9e:a2:bc:67:7f:17:88:11:60:c9:d0:f7:7e:7c:0d:
3a:5e:5c:93:9d:16:82:5b:ad:c9:58:18:bf:1c:d7:16:00:fa:
50:1b:bc:a8:3c:68:33:2a:4e:29:10:4f:07:01:ac:a6:6d:b5:
a9:82:26:ac:4d:54:ef:e4:b7:23:49:05:19:1f:c6:91:3a:29:
6a:e5:4a:b1:39:85:15:49:87:fd:1c:26:05:95:51:23:2f:cb:
b9:bf:d6:28:90:f0:d6:14:c9:86:c4:80:af:47:b8:19:4a:4d:
01:e2:7d:2f:2c:4d:28:96:b8:64:22:ed:6d:6e:1d:4b:6c:bb:
27:76:37:db:70:e1:ec:9c:87:73:44:f2:bb:fe:ba:f9:12:28:
af:63:10:ab:01:39:97:13:d0:04:27:9a:b3:04:5e:ad:2e:75:
0f:da:bb:7b:46:4f:ef:d4:9f:94:a4:12:9c:5f:79:b2:bf:52:
8f:72:c7:29:11:5b:29:35:0c:1d:d4:56:80:ab:5c:4a:ff:29:
7e:80:fc:81:1b:8b:46:f1:a3:94:a3:97:32:0c:92:bc:f8:d3:
be:0d:fd:ca:9d:7d:b7:87:80:3a:f2:55:31:fa:c6:8b:7b:81:
13:3d:a4:e2:26:3d:ff:8d:49:4e:45:d8:60:8d:2e:cc:88:6a:
f8:51:7d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:45 2025 by rpki-client