Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
File: BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft (raw, json)
Hash identifier: hYkZQnh6TQlLkgPlDvw9h1HVX5JTXwLmeNL0XMfYXYI=
Subject key identifier: B9:66:11:C2:8E:9E:EA:0B:FC:16:4D:AF:64:FF:6D:56:A8:17:95:F0
Authority key identifier: 05:F2:74:8C:B4:38:62:A1:04:B5:6F:8C:62:04:B6:20:97:06:55:8C
Certificate issuer: /CN=05f2748cb43862a104b56f8c6204b6209706558c
Certificate serial: 019922C358A14F121A406C22ABCB219610E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
Manifest number: 0D5C
Signing time: Sun 07 Sep 2025 06:00:51 +0000
Manifest this update: Sun 07 Sep 2025 06:00:51 +0000
Manifest next update: Mon 08 Sep 2025 06:00:51 +0000
Files and hashes: 1: BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.crl (hash: 3EYqaFb1GEjM14nLGeRf1kIHdhz0IDwkdACcBtV0ttY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:58:a1:4f:12:1a:40:6c:22:ab:cb:21:96:10:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f2748cb43862a104b56f8c6204b6209706558c
Validity
Not Before: Sep 7 06:00:51 2025 GMT
Not After : Sep 8 06:00:51 2025 GMT
Subject: CN=b96611c28e9eea0bfc164daf64ff6d56a81795f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ef:b3:73:46:98:b1:3f:0f:b0:4c:37:37:a6:
c0:e1:bf:24:dc:ff:d5:df:45:f0:a6:11:aa:d9:2b:
f3:c3:4e:db:86:c2:a7:c9:cd:b3:1c:7e:39:14:c1:
02:64:65:bd:1e:61:a4:c2:e6:c8:d7:2a:b5:b4:cc:
ad:c3:d9:9b:9d:50:b8:2e:92:f0:af:cb:df:8e:68:
7d:84:9e:d7:52:0b:79:e4:1c:15:7e:f1:e3:38:6a:
12:5d:92:d5:8a:c0:1e:ae:3b:37:8d:15:40:46:30:
c6:9c:f4:90:67:a4:2d:46:77:87:c0:2c:53:e7:a2:
90:fc:6f:e2:70:fe:75:19:67:24:a0:1c:d6:5e:46:
7c:6e:1a:eb:a5:a1:49:41:d5:ab:63:d1:cd:89:23:
76:19:06:4d:98:01:21:5b:eb:3e:aa:29:03:71:d0:
23:b2:ae:42:1b:9b:7b:6a:34:10:be:04:6b:4e:da:
0a:2c:e1:e4:29:d2:67:64:15:33:2d:0c:15:39:65:
05:73:43:1f:61:ed:ac:bc:e4:38:29:fd:64:35:12:
98:b7:b4:ff:49:62:e1:7e:72:98:9e:d9:c3:3b:67:
bc:5c:d6:61:31:cb:6b:ce:c7:7e:e1:50:30:3b:7e:
25:e1:1d:7b:7a:3e:85:40:5c:3e:53:8e:2e:a6:39:
3b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:66:11:C2:8E:9E:EA:0B:FC:16:4D:AF:64:FF:6D:56:A8:17:95:F0
X509v3 Authority Key Identifier:
keyid:05:F2:74:8C:B4:38:62:A1:04:B5:6F:8C:62:04:B6:20:97:06:55:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:1d:4f:bb:38:e2:2e:17:2c:f3:ff:f6:2e:bd:ec:4e:04:39:
2e:ad:ed:5f:fd:1e:a5:d0:75:34:0a:37:b0:c6:85:f7:bb:72:
ff:99:ec:96:a7:43:cb:e4:fe:e8:6b:cc:d9:44:5c:e2:9d:9a:
ab:bd:0b:67:57:26:9a:cd:71:40:6b:3e:a4:ff:ff:7b:a4:a8:
bd:0d:6f:d2:94:6f:67:5a:1f:a7:d5:75:f7:0b:7c:b9:a4:a0:
69:21:d6:8e:5c:b4:88:74:4d:db:21:96:35:4c:51:a7:f2:c5:
ea:4a:7c:19:65:cf:95:a0:2b:e8:a9:1d:f6:af:3c:5d:91:de:
e5:d2:12:fb:9c:e5:5e:d5:72:d9:a6:6f:e0:1a:21:c3:75:f4:
e5:68:48:d9:aa:fb:3d:05:83:06:36:1d:9e:a7:c7:4f:29:2d:
15:a9:b0:2b:5c:79:fb:9f:88:91:58:e8:00:0f:92:32:63:8d:
d6:c7:8e:e2:2c:c9:b7:89:64:db:ef:9f:53:13:81:24:a3:71:
57:0f:65:72:c3:65:23:39:50:7b:e2:43:26:28:f7:e7:94:27:
47:2d:d0:b6:cb:14:9e:d8:78:3a:56:48:b0:67:a9:87:e4:f3:
97:68:dd:21:1f:6c:d4:e2:96:21:b6:51:a5:07:63:b4:83:48:
19:e5:88:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:24:50 2025 by rpki-client