Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
File: BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft (raw, json)
Hash identifier: 2KjjjSI2P1/RBN4de+oOTh2NvrqCDTjPyNKc+HPPcf8=
Subject key identifier: 8B:D8:70:63:96:FD:6A:B4:E2:7D:72:C7:C3:49:53:01:0F:78:E3:87
Authority key identifier: 04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4
Certificate issuer: /CN=0438e64299e545d3637074cb946b400f7990ecf4
Certificate serial: 0199179AF0D0FEA38F735EC67F90557B0644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
Manifest number: 166C
Signing time: Fri 05 Sep 2025 02:00:54 +0000
Manifest this update: Fri 05 Sep 2025 02:00:54 +0000
Manifest next update: Sat 06 Sep 2025 02:00:54 +0000
Files and hashes: 1: BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl (hash: zSb9rM2o6+qUvMw447bZPJaVOlf8b00mujKlF12CqAc=)
2: SiRuz5DPXz9HshuqRJYB7VyQXyE.roa (hash: bgytOhweICmzdqwpnRZX5G1gQSNta8oc7hejatWlbv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:9a:f0:d0:fe:a3:8f:73:5e:c6:7f:90:55:7b:06:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0438e64299e545d3637074cb946b400f7990ecf4
Validity
Not Before: Sep 5 02:00:54 2025 GMT
Not After : Sep 6 02:00:54 2025 GMT
Subject: CN=8bd8706396fd6ab4e27d72c7c34953010f78e387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:44:85:e3:fd:2d:ed:79:ae:a0:e6:36:71:d2:
f3:4d:f7:be:ef:95:e1:11:f9:f4:9f:96:b2:98:83:
e3:2a:45:65:f3:c0:c4:88:ba:0b:6c:fc:2f:ef:21:
1d:b8:aa:d2:27:48:22:09:f0:ea:a2:21:f8:49:7b:
ff:2d:77:68:f7:77:7d:6e:33:18:76:e6:5f:6c:d0:
93:36:34:64:87:ab:cb:1d:82:8d:c7:68:25:be:9d:
bc:98:7b:2b:51:63:e5:5c:39:53:90:be:01:84:ae:
e1:b4:d8:58:57:ad:d1:74:05:a2:c1:01:9e:38:12:
99:f5:75:f3:82:7e:45:f3:a3:31:4c:5b:6d:c9:56:
5c:de:46:f6:b9:75:09:a5:5c:dd:69:ea:12:e3:69:
6a:7e:1b:be:a8:d7:50:cd:8a:15:3a:74:68:a7:47:
c4:31:c4:27:3d:71:3d:85:38:0f:d1:fe:8a:14:e1:
6c:b8:05:91:b7:6c:8e:0d:49:fa:c2:5c:43:a2:16:
94:9f:b3:d4:39:fa:d5:bb:40:2b:bf:31:a9:8b:8a:
28:b0:44:e1:ec:0b:7d:76:15:d6:ec:50:c2:3c:29:
0a:e3:44:3c:27:7b:bb:12:f0:fe:9b:dd:06:3d:8a:
27:8d:da:88:80:ce:35:d7:a7:67:d7:e1:fc:66:c9:
16:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D8:70:63:96:FD:6A:B4:E2:7D:72:C7:C3:49:53:01:0F:78:E3:87
X509v3 Authority Key Identifier:
keyid:04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c1:81:eb:bb:19:90:fa:77:25:85:00:85:83:1e:e7:67:ee:
2e:44:c8:f6:71:60:b9:1a:be:98:72:c6:c1:67:d3:bd:d4:58:
3a:a3:bf:bb:88:7f:47:56:42:b7:a1:3e:44:2b:1c:cd:2d:3c:
cc:1a:56:d4:4b:6f:ec:3d:d6:60:e8:d3:eb:0a:64:80:f3:99:
0c:08:f6:96:e2:a6:09:c9:63:53:b7:d0:97:1d:6a:45:24:a0:
d1:de:f2:59:c1:a6:1c:5b:be:0b:ad:2b:4f:0c:24:36:88:cb:
dc:17:26:ab:2c:4f:54:e9:e9:4c:cc:6c:4e:9a:b2:6f:e0:fe:
37:81:88:b2:bc:f4:d1:86:c2:de:ed:b4:ec:fa:0e:b3:3f:6f:
ee:6e:52:51:51:fd:34:9d:c8:30:5c:0c:85:36:be:2a:98:c0:
44:25:a9:3d:d7:70:61:eb:03:21:05:06:56:09:c4:52:b6:ab:
ff:ac:b5:23:9a:f3:52:e8:83:34:ba:27:46:ce:e6:a8:37:2f:
9a:f1:17:3a:ab:37:ef:95:34:70:05:30:b3:e1:6c:4e:34:1a:
da:4a:26:7b:ae:ed:d1:77:2a:a6:5c:71:c4:ea:c4:23:25:38:
24:06:37:53:be:bc:63:cb:a4:18:f2:b8:2c:c1:4e:34:7a:6c:
0a:d5:37:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 11:24:35 2025 by rpki-client