Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
File: 1-BjewyV4QBB3SCAJDo4KCD3d29w.mft (raw, json)
Hash identifier: HN9vxZbVbOprxJ+y0H6YDo6aI2qldsS5jI8PCEajnm4=
Subject key identifier: 7E:62:C7:75:58:B8:6A:09:99:72:34:63:1F:05:89:74:80:10:C6:DD
Authority key identifier: F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC
Certificate issuer: /CN=f818dec325784010774820090e8e0a083ddddbdc
Certificate serial: 01993123A6ABCB19A8EA1369EA2B3C611843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
Manifest number: 137D
Signing time: Wed 10 Sep 2025 01:00:43 +0000
Manifest this update: Wed 10 Sep 2025 01:00:43 +0000
Manifest next update: Thu 11 Sep 2025 01:00:43 +0000
Files and hashes: 1: 1-BjewyV4QBB3SCAJDo4KCD3d29w.crl (hash: W23qA+O4SPrOjNayb6KPY+FMXPu30WFlouU2g0tycZs=)
2: 4F5-U-IyeBv7jgG-t4o9hlhRjTc.roa (hash: gpdr7Kl3pmYPlDObQ8u3VFe1L12/MWoBa72QoNTdi8I=)
3: CpPijEmYlerTV19r3A6mYbWd_7U.roa (hash: paOU+LXyw4VdCUY8Gvj627Nds5jNeA0tyswAnoZqaYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 01:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:23:a6:ab:cb:19:a8:ea:13:69:ea:2b:3c:61:18:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f818dec325784010774820090e8e0a083ddddbdc
Validity
Not Before: Sep 10 01:00:43 2025 GMT
Not After : Sep 11 01:00:43 2025 GMT
Subject: CN=7e62c77558b86a09997234631f0589748010c6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:be:8c:72:b2:ef:9a:f3:01:08:2e:ed:0f:45:
df:7b:03:33:33:08:0b:30:d0:f4:e0:70:85:cb:b2:
0f:eb:21:1b:64:f2:2d:86:bc:b9:86:34:3c:9f:95:
43:75:b8:e9:0c:9b:61:aa:05:61:09:4a:c9:9b:48:
49:cc:ba:40:a9:ce:86:b9:7e:7a:be:a9:26:11:60:
6e:a2:d4:68:f3:64:41:5a:89:93:80:aa:88:a6:8b:
c9:56:0a:98:6b:92:69:7c:90:97:04:24:57:b5:a6:
ba:36:ef:98:51:00:2e:a7:8b:ec:f6:96:8e:1b:7b:
bb:20:61:17:31:00:21:3a:77:32:73:57:1c:48:28:
cd:0c:91:38:8c:07:92:46:6e:8c:44:8a:38:41:5d:
ee:7a:b7:ff:16:f5:4f:4f:bb:d5:04:19:c9:04:18:
31:51:54:6f:72:1d:3f:40:68:6b:bb:22:be:4f:9c:
43:e6:9a:12:4f:f7:d0:de:4f:1a:9d:7f:fb:47:f1:
82:29:1b:a0:ab:0b:ec:52:45:f8:26:ca:39:98:8a:
a1:ec:c6:f6:8a:cf:fa:39:ac:ee:f4:f1:f3:3b:76:
d4:22:27:5b:63:de:55:b9:ba:46:f4:a0:ca:eb:9b:
47:c8:3d:8b:3e:b5:98:31:93:8d:1c:8a:d3:42:fe:
10:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:62:C7:75:58:B8:6A:09:99:72:34:63:1F:05:89:74:80:10:C6:DD
X509v3 Authority Key Identifier:
keyid:F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:96:4d:a3:ba:96:db:75:63:99:05:c9:2e:4d:df:c0:83:cd:
c4:b1:fb:c2:45:96:e5:03:b4:29:2a:fb:11:72:18:3c:bb:5c:
e3:5e:52:9a:a7:2f:b3:fe:d2:cd:95:3c:a7:2b:3f:a4:45:54:
9c:00:04:b5:c1:15:b9:c8:62:e0:ee:f6:8a:60:47:fc:e5:70:
dd:d6:df:85:61:f0:f0:b1:6a:3f:f4:04:22:1a:b8:f0:7b:65:
c9:06:c4:55:25:cb:18:b6:4e:f2:13:c7:fb:ff:e9:7e:4b:07:
38:ba:45:cb:e1:ce:f7:6a:d7:73:bf:e8:76:1b:b2:b2:61:24:
ba:3f:96:c4:22:de:8c:e0:40:d2:57:a8:52:bb:d0:67:7f:4e:
8b:3a:9d:87:0e:47:ba:66:54:bc:25:f8:c5:4e:64:9a:98:12:
52:4f:91:a1:d7:1c:ed:e0:8c:5d:c4:62:b6:86:c9:1c:3c:b2:
8c:a6:c6:4b:c2:f0:a8:39:5e:7b:5a:6f:d8:af:5c:88:cc:8a:
dd:28:c9:14:05:13:e1:79:34:3a:f0:88:c9:c8:5d:43:1a:42:
fc:7b:e2:b5:2a:97:5b:36:bb:1d:3d:f1:0f:9d:ea:a6:2b:da:
c9:92:59:95:9f:df:76:ce:b1:ad:f8:c1:c5:2b:c0:29:90:8b:
93:ea:1b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:10:22 2025 by rpki-client