Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.mft
File: BjnEhGuIwtcOMc5MD8y0z03qVDY.mft (raw, json)
Hash identifier: LV183ohf+0X6FjYmCAZ8vjvVthLOWijBvEKVgabKrLg=
Subject key identifier: 5C:5B:E6:19:A0:A6:94:12:8D:38:57:68:23:02:F4:76:6A:B1:03:C9
Authority key identifier: 06:39:C4:84:6B:88:C2:D7:0E:31:CE:4C:0F:CC:B4:CF:4D:EA:54:36
Certificate issuer: /CN=0639c4846b88c2d70e31ce4c0fccb4cf4dea5436
Certificate serial: 0199228CD37F9B2698A75128FA0176F5CD75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjnEhGuIwtcOMc5MD8y0z03qVDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 05:01:18 +0000
Manifest this update: Sun 07 Sep 2025 05:01:18 +0000
Manifest next update: Mon 08 Sep 2025 05:01:18 +0000
Files and hashes: 1: BjnEhGuIwtcOMc5MD8y0z03qVDY.crl (hash: 1AJaU1eENVU8Ye5HMcZzcVaQWnzRI9csXM8SM8JihvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjnEhGuIwtcOMc5MD8y0z03qVDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:d3:7f:9b:26:98:a7:51:28:fa:01:76:f5:cd:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0639c4846b88c2d70e31ce4c0fccb4cf4dea5436
Validity
Not Before: Sep 7 05:01:18 2025 GMT
Not After : Sep 8 05:01:18 2025 GMT
Subject: CN=5c5be619a0a694128d3857682302f4766ab103c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ab:94:3c:14:eb:4b:2c:86:13:0d:51:f9:93:
13:7c:81:17:4c:0d:99:1a:4e:b8:64:61:0b:14:2e:
49:46:d2:89:25:ab:7e:ae:20:b9:f8:b3:a5:16:ca:
cd:f7:df:ad:29:70:e1:81:85:8c:66:41:da:40:d4:
c4:b7:b2:fd:05:85:ea:02:24:df:8d:9a:61:ec:f9:
75:4e:02:f1:c6:bb:4b:15:45:bf:c7:c3:26:17:15:
3e:da:38:00:bb:e5:e1:e6:e6:19:2c:92:1e:84:c6:
4d:8d:63:19:0f:ad:6d:84:0c:bb:ff:c1:8e:fe:56:
81:ba:aa:3d:a4:54:9c:c3:df:83:37:16:9e:b3:4e:
77:59:33:6e:6c:f9:af:e3:c1:41:af:f7:44:6c:52:
af:a7:de:38:8f:21:ce:72:4f:1d:e6:2e:e7:62:b4:
2a:f9:da:cf:3f:09:05:44:76:cf:90:b0:1f:62:03:
41:59:e7:e3:2c:c2:7a:25:2e:c1:e5:28:1e:cd:42:
0c:a8:04:0f:a7:94:85:e3:2c:36:50:a1:8e:7a:54:
77:c5:e0:a2:2b:07:0f:86:eb:74:4a:24:60:4b:33:
aa:5d:ba:51:01:a6:3c:16:d5:37:ae:6e:a3:d3:70:
c1:95:90:02:85:7a:8a:ea:58:d8:3d:70:c0:0b:2a:
bc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5B:E6:19:A0:A6:94:12:8D:38:57:68:23:02:F4:76:6A:B1:03:C9
X509v3 Authority Key Identifier:
keyid:06:39:C4:84:6B:88:C2:D7:0E:31:CE:4C:0F:CC:B4:CF:4D:EA:54:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjnEhGuIwtcOMc5MD8y0z03qVDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:9f:cf:c9:e3:be:16:de:a3:de:8c:08:02:36:86:c5:65:a7:
d0:58:e5:95:e6:48:2f:16:9d:77:a7:f0:9d:7f:28:7f:be:1b:
4d:ef:40:8d:3a:b3:7a:fd:ae:51:0a:0a:7e:b1:f3:38:05:33:
63:81:ff:39:56:26:27:be:fa:50:e4:90:c4:b8:c9:43:21:61:
b0:8c:14:e5:7e:61:4b:d5:76:8b:c7:2b:e3:70:fb:6d:b3:1d:
2a:0f:55:cf:61:75:9c:f4:a6:9f:4c:5d:7a:73:a2:07:55:cf:
bb:37:1b:d8:a1:2e:3b:66:e5:b7:0f:8d:9b:ec:26:72:f7:e5:
fc:6c:de:05:c0:32:cb:f2:69:22:55:07:2b:7c:9c:d1:af:cf:
59:3a:ce:ac:6e:f4:ef:d9:a7:20:3d:92:76:47:0d:3c:17:47:
84:9f:db:db:91:58:70:59:fc:fe:dd:ac:40:1f:0b:46:eb:55:
66:e8:f0:8a:14:5f:38:eb:48:e9:ec:54:38:79:3f:ca:8e:ff:
63:25:a5:c2:25:fb:5b:07:de:85:85:4c:9b:f4:68:25:5c:02:
b8:2a:59:18:03:6a:78:b4:5e:8e:ba:b1:ce:0c:11:b2:ab:9c:
23:fe:84:da:b2:e0:97:a1:f1:6b:2b:e7:37:93:7a:8f:a4:bc:
bd:41:48:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:51 2025 by rpki-client