Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
File: BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft (raw, json)
Hash identifier: NIRzqzCRxmylsQ6Q8IRntLO0Vc0d+J745XfhzSrKRto=
Subject key identifier: 1A:42:B6:20:11:37:60:F7:23:5A:FC:D1:78:E1:7F:2E:D4:31:DC:07
Authority key identifier: 04:34:7F:A5:11:09:DD:EC:D6:CD:59:4C:67:BB:02:B2:D5:E7:21:0E
Certificate issuer: /CN=04347fa51109ddecd6cd594c67bb02b2d5e7210e
Certificate serial: 019A71B880949FFE3641F2C4A07F1E736782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
Manifest number: 0C10
Signing time: Tue 11 Nov 2025 07:01:48 +0000
Manifest this update: Tue 11 Nov 2025 07:01:48 +0000
Manifest next update: Wed 12 Nov 2025 07:01:48 +0000
Files and hashes: 1: BDR_pREJ3ezWzVlMZ7sCstXnIQ4.crl (hash: gJmfx+wenin6zjUlRaxHsN/iDUFUDFqYLqfUOJ+OtyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:80:94:9f:fe:36:41:f2:c4:a0:7f:1e:73:67:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04347fa51109ddecd6cd594c67bb02b2d5e7210e
Validity
Not Before: Nov 11 07:01:48 2025 GMT
Not After : Nov 12 07:01:48 2025 GMT
Subject: CN=1a42b620113760f7235afcd178e17f2ed431dc07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:77:b6:cc:86:6a:7d:33:c5:a8:e3:8c:3d:ff:
ae:74:2b:75:ba:34:3d:c4:e0:ed:45:c4:28:74:19:
94:9b:8f:9d:18:2d:63:54:93:d0:46:b4:c4:a9:09:
8c:59:76:1c:49:5f:1a:36:cf:d2:e2:c6:9e:bf:f2:
6c:63:85:1c:4c:57:e5:48:21:66:c9:ae:3e:37:6d:
1b:05:5d:b6:48:da:19:a9:4e:2a:a2:65:27:25:95:
6b:d5:f6:cf:fb:13:6b:90:60:3f:3f:6a:5a:29:4f:
4a:5e:06:1f:64:97:3d:be:e1:33:96:b1:8b:11:05:
d5:1d:e0:f2:49:38:c0:d0:fd:34:70:49:d8:9c:d4:
a3:11:6b:04:b5:db:3c:d1:44:61:b8:2b:d8:35:54:
3e:b6:f8:5e:2a:0a:30:a8:5e:19:87:d4:77:0f:f9:
46:4d:7a:7a:73:af:e2:04:1d:62:b5:24:e2:ce:0e:
ca:4d:3b:94:c9:79:dc:2a:85:0c:2a:8f:56:29:75:
a9:d8:51:01:dd:bf:b4:23:25:f5:cb:4e:bf:12:81:
d6:28:56:7c:c3:ff:44:9c:d8:6d:9e:eb:51:f0:78:
9b:70:51:1a:4c:92:c1:6d:ff:6f:44:de:d9:87:34:
e8:fd:89:b3:38:5e:a5:e7:4c:f2:11:7c:52:cb:e1:
24:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:42:B6:20:11:37:60:F7:23:5A:FC:D1:78:E1:7F:2E:D4:31:DC:07
X509v3 Authority Key Identifier:
keyid:04:34:7F:A5:11:09:DD:EC:D6:CD:59:4C:67:BB:02:B2:D5:E7:21:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:9d:b5:6f:5f:a6:1a:89:cb:33:fd:9d:95:17:9e:1e:c0:08:
df:dc:c9:9f:30:03:c6:cf:8a:0d:2f:3e:53:db:4c:2b:d2:a4:
39:99:25:a9:36:72:a6:fc:63:73:ba:ed:43:9f:db:9c:78:50:
b3:7b:3b:7c:9c:d3:e0:c3:2e:01:65:4e:e2:36:d2:20:5a:7d:
ff:33:85:95:84:d8:d3:48:3d:2e:55:45:f4:e8:52:af:ae:b1:
05:b2:03:aa:7c:ff:d6:06:92:02:11:39:a3:08:56:c1:97:af:
e8:cc:26:bf:c1:65:53:2c:e4:6d:cf:c1:81:77:58:7c:98:17:
61:9e:c4:08:ee:b3:0e:9b:ce:dd:84:c2:17:ce:bc:82:b7:d0:
f4:b7:d6:b6:e5:d2:b4:8c:8a:9c:71:a6:97:cd:98:e1:bf:9f:
0d:23:38:ae:a8:b1:c8:15:f7:67:0e:b9:0e:00:98:13:ee:ea:
b8:31:04:6b:08:86:c4:92:22:f6:f3:4a:1f:15:ba:54:e6:a5:
90:46:68:89:9c:fd:ba:40:79:f8:8c:75:83:aa:3f:30:f7:35:
8d:d5:27:97:38:25:97:cb:9e:ea:c2:22:22:67:bf:35:7e:5f:
87:8c:f2:63:60:a7:1d:3b:18:6d:cb:44:72:3c:cf:55:00:67:
69:c6:8d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:20 2025 by rpki-client