Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/832d67-4506-47f2-a944-cabe1d84f709/1/BSLIJ03EQgYXFxrL8pML6bi1bWA.mft
File: BSLIJ03EQgYXFxrL8pML6bi1bWA.mft (raw, json)
Hash identifier: IiMBhqLosGC7iO7YsOGWrS4Q81owIpN71w11bPXcE1g=
Subject key identifier: B2:A1:F0:53:FB:FF:C9:39:C5:D6:BE:78:78:7A:CD:A7:CD:8A:DF:11
Authority key identifier: 05:22:C8:27:4D:C4:42:06:17:17:1A:CB:F2:93:0B:E9:B8:B5:6D:60
Certificate issuer: /CN=0522c8274dc4420617171acbf2930be9b8b56d60
Certificate serial: 0199233100DA11875F831EC4F8091D800AE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSLIJ03EQgYXFxrL8pML6bi1bWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/832d67-4506-47f2-a944-cabe1d84f709/1/BSLIJ03EQgYXFxrL8pML6bi1bWA.mft
Manifest number: 03DB
Signing time: Sun 07 Sep 2025 08:00:37 +0000
Manifest this update: Sun 07 Sep 2025 08:00:37 +0000
Manifest next update: Mon 08 Sep 2025 08:00:37 +0000
Files and hashes: 1: BSLIJ03EQgYXFxrL8pML6bi1bWA.crl (hash: iuQgpce3P5alLlLxeyDIvgY4TBohcvMOKnhjnIccifY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/832d67-4506-47f2-a944-cabe1d84f709/1/BSLIJ03EQgYXFxrL8pML6bi1bWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/832d67-4506-47f2-a944-cabe1d84f709/1/BSLIJ03EQgYXFxrL8pML6bi1bWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSLIJ03EQgYXFxrL8pML6bi1bWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:00:da:11:87:5f:83:1e:c4:f8:09:1d:80:0a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0522c8274dc4420617171acbf2930be9b8b56d60
Validity
Not Before: Sep 7 08:00:37 2025 GMT
Not After : Sep 8 08:00:37 2025 GMT
Subject: CN=b2a1f053fbffc939c5d6be78787acda7cd8adf11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:15:51:59:12:2d:9a:c2:19:36:87:7a:d7:5a:
74:51:d6:ad:d8:5b:a2:ef:04:6e:6d:67:d7:f4:f2:
2a:57:d3:02:f8:7c:8b:00:11:62:a6:15:db:35:75:
04:a4:a0:f9:ec:5d:52:16:6d:d3:f3:0f:5c:29:02:
08:9b:f8:34:a5:ed:1d:b7:bf:45:55:fc:1a:71:3c:
7e:44:1b:44:c3:35:07:16:1e:05:ae:2f:de:ab:c0:
f2:b3:ad:0a:83:1d:cd:d8:7f:21:24:d1:0c:5e:63:
11:67:7e:25:45:bc:62:93:95:32:0e:10:d2:56:74:
57:d1:1b:2b:37:2c:57:22:c1:75:b8:3d:26:66:3a:
3f:6c:13:c1:22:e1:f0:aa:87:9b:a6:59:10:1e:77:
3a:4f:90:50:ee:32:24:cf:f3:6b:13:ce:36:fe:da:
76:7f:ce:8e:d2:0f:ce:39:7d:e4:b8:dc:b8:76:7c:
6a:5d:0a:c0:a7:2c:bf:c1:9b:de:fc:ee:f9:dd:45:
5c:b7:91:88:5c:7c:eb:a4:c9:e8:74:83:cf:d4:24:
49:1c:22:9f:bb:19:4f:ee:8b:2f:c9:55:e1:10:a4:
3b:1a:9a:93:88:59:fc:93:2c:cf:75:0d:14:ca:ab:
6a:1b:59:ce:3d:02:e4:84:84:8f:5a:5a:f2:79:df:
76:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A1:F0:53:FB:FF:C9:39:C5:D6:BE:78:78:7A:CD:A7:CD:8A:DF:11
X509v3 Authority Key Identifier:
keyid:05:22:C8:27:4D:C4:42:06:17:17:1A:CB:F2:93:0B:E9:B8:B5:6D:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSLIJ03EQgYXFxrL8pML6bi1bWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/832d67-4506-47f2-a944-cabe1d84f709/1/BSLIJ03EQgYXFxrL8pML6bi1bWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/832d67-4506-47f2-a944-cabe1d84f709/1/BSLIJ03EQgYXFxrL8pML6bi1bWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ba:43:5c:6c:46:cb:b2:38:9a:0f:df:78:c2:bd:84:d8:c3:
3a:50:df:ec:ae:56:3f:11:36:29:78:cd:28:aa:c8:3a:62:1b:
a8:a0:bf:5d:e0:3e:6e:d3:24:d0:ac:b1:42:db:19:e3:fd:9e:
69:1d:d6:e1:67:b6:67:c0:92:4c:6e:9b:2d:ef:fd:b1:46:41:
3e:07:c6:77:96:de:26:ed:16:6b:66:8a:c2:4a:0a:f0:76:80:
79:cf:cc:c3:56:45:f0:16:14:b3:c1:ee:8c:b6:c5:0b:da:0e:
ae:41:0a:25:b2:c4:e6:43:31:49:bf:21:81:27:54:39:83:8b:
eb:41:08:03:65:5d:b1:6e:6f:0e:cb:ea:61:8b:6f:0b:5c:71:
66:35:8c:15:6a:9a:08:30:8a:4d:f3:70:f6:e8:1a:06:46:06:
79:5d:6d:51:cf:83:cc:b5:29:f3:69:3f:63:90:8f:27:a4:d4:
bf:0e:2a:ed:a4:75:dc:6b:67:05:e2:6e:4c:88:ac:41:3d:17:
f5:ed:28:c3:87:b5:63:5b:e4:25:41:75:12:a3:33:ca:12:24:
bd:bb:81:c3:9f:bc:6a:97:9f:2a:0f:a8:97:97:db:40:fb:f0:
11:8a:2c:90:d1:f7:e7:38:c4:da:98:7b:2a:1a:00:60:d9:fc:
08:38:49:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:54:31 2025 by rpki-client