Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
File: 1-BjewyV4QBB3SCAJDo4KCD3d29w.mft (raw, json)
Hash identifier: Sv4mRxk7LJWuRqjjOBBfFrFgnavR5IKhNtZm803PkCM=
Subject key identifier: 37:DB:BF:94:28:DF:1B:67:9F:CB:F1:C6:CA:61:13:EF:4A:09:C8:80
Authority key identifier: F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC
Certificate issuer: /CN=f818dec325784010774820090e8e0a083ddddbdc
Certificate serial: 019A1E758CABB382489675F248039A9076A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
Manifest number: 13F8
Signing time: Sun 26 Oct 2025 03:00:11 +0000
Manifest this update: Sun 26 Oct 2025 03:00:11 +0000
Manifest next update: Mon 27 Oct 2025 03:00:11 +0000
Files and hashes: 1: 1-BjewyV4QBB3SCAJDo4KCD3d29w.crl (hash: /fInPNaYQTRfXHGOFwBF0st89dNftaYP30cxQC8GWoI=)
2: 4F5-U-IyeBv7jgG-t4o9hlhRjTc.roa (hash: gpdr7Kl3pmYPlDObQ8u3VFe1L12/MWoBa72QoNTdi8I=)
3: CpPijEmYlerTV19r3A6mYbWd_7U.roa (hash: paOU+LXyw4VdCUY8Gvj627Nds5jNeA0tyswAnoZqaYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 20:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:75:8c:ab:b3:82:48:96:75:f2:48:03:9a:90:76:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f818dec325784010774820090e8e0a083ddddbdc
Validity
Not Before: Oct 26 03:00:11 2025 GMT
Not After : Oct 27 03:00:11 2025 GMT
Subject: CN=37dbbf9428df1b679fcbf1c6ca6113ef4a09c880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9d:34:94:ab:78:4d:48:b3:a4:64:cc:f8:f9:
9c:1d:1b:b7:25:6d:dd:d1:87:5b:fa:c1:89:f6:2a:
c3:69:6f:ad:13:e0:50:03:63:99:c5:c9:1f:15:1a:
f6:8d:a0:57:59:87:c7:f7:4b:c4:06:1b:c8:72:12:
30:bf:ab:ac:f5:69:85:98:05:43:aa:6c:8b:71:a7:
56:f4:2f:f7:c5:a6:6c:18:00:ad:5e:0c:71:e1:86:
99:15:79:58:57:64:c6:be:af:ea:5f:f4:79:e8:67:
13:0b:10:29:37:4b:f7:23:1b:13:86:d6:0a:17:72:
c0:f4:33:ab:90:19:81:d6:5a:1d:48:77:f4:23:b2:
6f:90:23:eb:7c:49:6f:e8:98:a9:a7:26:4e:bd:9c:
4b:53:29:26:35:c2:9e:76:c3:74:1c:d1:c6:63:cc:
19:cc:d6:3c:10:03:90:39:44:66:dc:a5:9b:b1:8c:
29:9b:f4:b1:5b:8f:ed:e1:c6:a8:59:77:e5:a2:61:
3e:27:65:d0:d8:92:48:c5:df:f2:e4:24:3f:0f:3e:
e6:02:f0:71:e0:54:e0:d3:18:d5:ca:93:8a:52:37:
78:dc:a0:8d:dc:e5:af:83:bf:a5:5c:c2:e9:81:62:
38:90:4c:7e:9b:14:56:af:59:a1:6e:57:d8:d0:d7:
a1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DB:BF:94:28:DF:1B:67:9F:CB:F1:C6:CA:61:13:EF:4A:09:C8:80
X509v3 Authority Key Identifier:
keyid:F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:df:b0:6c:47:f2:8b:13:a6:bf:59:d9:b0:ef:e8:9f:54:00:
de:e1:cf:03:dd:7c:1d:d1:43:1d:02:f5:ac:02:5f:c7:07:6f:
ce:6b:fe:70:11:3a:d3:e6:9d:5a:f3:55:ef:b1:cd:18:46:64:
1a:5d:5f:fe:50:f7:d9:0f:ea:2b:8a:85:6e:f2:c9:85:f9:3d:
3f:7f:d9:71:ac:d6:b8:f7:f3:4f:be:35:90:8b:ba:c6:00:76:
67:5c:b7:c3:a1:32:1d:6e:ce:e0:1d:96:1e:a2:5f:16:96:2f:
71:a6:f5:df:08:09:56:8a:02:75:20:93:c4:59:2f:e3:80:7e:
70:9a:be:c0:9e:1b:9e:74:69:40:d5:a8:31:cb:fe:8c:5c:d7:
ac:ce:a4:27:5b:e0:6c:b1:f5:88:f9:6a:61:03:59:55:01:05:
40:0f:cf:b6:20:01:f8:0e:18:bc:dd:fc:7e:42:b9:33:78:1c:
79:43:72:14:34:78:e1:78:4f:dd:fe:38:a1:33:38:3f:1b:5c:
8f:d4:c5:ca:b3:5b:43:b6:de:cb:27:e3:59:78:05:18:03:0f:
fa:da:39:d5:3a:83:f6:a4:a9:23:5f:d2:05:01:75:a2:da:bc:
37:ca:18:2c:1a:4e:72:c3:a9:f8:97:63:4a:04:dd:38:1c:db:
86:af:33:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 05:16:42 2025 by rpki-client