Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft
File: Bjutx4U7BRAKayJN3O_Bji59PdU.mft (raw, json)
Hash identifier: 9MZWOWJU6pTMB92srLkZD81w/GK3VtOoCyesII5dUDM=
Subject key identifier: 35:B1:34:2B:9D:8E:23:0B:26:CF:84:A9:76:4B:7A:E4:4C:D4:A1:92
Authority key identifier: 06:3B:AD:C7:85:3B:05:10:0A:6B:22:4D:DC:EF:C1:8E:2E:7D:3D:D5
Certificate issuer: /CN=063badc7853b05100a6b224ddcefc18e2e7d3dd5
Certificate serial: 019A23655E23232DB036C6B622CBCBFD7FF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft
Manifest number: 0E9C
Signing time: Mon 27 Oct 2025 02:00:37 +0000
Manifest this update: Mon 27 Oct 2025 02:00:37 +0000
Manifest next update: Tue 28 Oct 2025 02:00:37 +0000
Files and hashes: 1: Bjutx4U7BRAKayJN3O_Bji59PdU.crl (hash: 5cz5KroMVWjAS9VSgz//BtmheEXhq8o0qdPvgkPLuGA=)
2: Xziix3WpukeN1e5SpGgnYgqIF3I.roa (hash: IunBp4C+veP99rGSTt8SQ5POqclxS7qKVFGqTiG4pb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:65:5e:23:23:2d:b0:36:c6:b6:22:cb:cb:fd:7f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=063badc7853b05100a6b224ddcefc18e2e7d3dd5
Validity
Not Before: Oct 27 02:00:37 2025 GMT
Not After : Oct 28 02:00:37 2025 GMT
Subject: CN=35b1342b9d8e230b26cf84a9764b7ae44cd4a192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d6:cb:90:c9:44:8b:0a:00:54:8c:ec:de:40:
60:87:03:fa:a3:1a:ab:84:f4:54:14:d0:62:ac:33:
35:37:0e:75:53:38:f7:db:b3:08:bf:be:40:ca:2f:
06:55:43:1f:ad:73:86:d2:14:fb:fa:9d:c1:a5:e1:
02:80:8e:e7:db:f9:f5:31:12:3b:d5:b6:62:ca:03:
ab:37:c2:19:d0:c6:80:c2:ba:7f:7e:94:f2:67:5d:
6c:14:a2:53:db:0c:48:c8:ce:4d:23:26:a5:9c:3b:
1a:ee:a9:1f:9c:8a:6e:2c:54:23:9b:ad:36:a0:f8:
32:bd:2b:b0:2e:33:e9:38:87:76:41:97:48:b1:39:
54:83:b7:66:07:fb:5c:f9:7c:d2:12:fa:a0:63:01:
a4:f2:2d:8b:9d:e0:95:fb:3c:40:6b:af:a0:78:47:
da:b0:64:b6:5b:a9:45:c2:97:c9:1c:82:a8:20:93:
56:87:15:3d:16:72:5e:e4:14:09:0c:98:2a:cc:76:
b0:1f:ec:5d:8e:e2:90:f4:56:95:9f:6e:f2:70:6e:
0b:10:69:37:74:d3:7a:13:8c:90:75:64:1c:2a:8b:
ef:4a:47:f0:13:a1:46:1d:5d:04:7a:c0:93:20:e9:
1b:ce:d1:5d:95:77:8b:4d:03:ff:e7:da:e6:71:82:
50:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B1:34:2B:9D:8E:23:0B:26:CF:84:A9:76:4B:7A:E4:4C:D4:A1:92
X509v3 Authority Key Identifier:
keyid:06:3B:AD:C7:85:3B:05:10:0A:6B:22:4D:DC:EF:C1:8E:2E:7D:3D:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f4:f2:c6:75:1e:3a:e2:ca:cb:0d:b2:58:3f:ff:64:cb:fa:
75:6e:a6:b6:ca:e4:84:17:25:3f:5e:20:f7:67:a9:15:1f:7a:
d7:14:aa:03:01:e9:71:47:30:25:ba:21:74:5a:32:a6:81:9b:
cd:ef:eb:a4:cc:03:f1:98:c5:59:f5:1f:97:22:33:84:11:1f:
9f:59:14:92:e0:aa:c8:a3:2f:97:f8:34:48:bc:75:dc:e6:e8:
44:c6:3f:0b:b5:93:51:2e:d1:2e:dc:a7:56:bb:e7:d5:2b:56:
a4:88:3f:cd:b6:28:18:ca:3c:fe:16:98:7a:b9:e5:74:df:47:
3a:56:e3:62:5c:00:e4:c5:03:43:76:98:f7:39:44:1e:6d:0f:
26:13:8a:c6:8e:90:e8:35:f7:f9:c1:a5:bb:b8:2c:fd:a0:ef:
79:81:6e:de:e2:80:06:fa:9a:6d:0a:2c:ef:38:29:e9:28:8e:
d8:df:cd:c9:b8:71:22:01:79:74:22:e2:35:e1:d9:3c:9c:70:
70:f1:f6:d4:5b:42:75:f9:34:32:21:ee:b9:b9:b9:89:fb:4c:
be:26:3b:1e:ae:f9:cd:15:b1:36:0b:45:11:6d:8f:7a:77:6e:
4b:1f:3e:69:ed:7a:92:dd:8d:fc:b5:eb:e3:b7:fc:c1:83:12:
24:52:66:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 06:31:44 2025 by rpki-client