Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
File: BjJUIiHK72RIzFRSFOAABxvVa4Y.mft (raw, json)
Hash identifier: w/AU2yZ98+H6fe4C/oHyfbBkvSvC6z5ctYC0u4FDD+o=
Subject key identifier: 33:7D:15:B5:23:87:54:27:AF:AA:AC:9E:2F:8A:9E:42:FB:16:9D:92
Authority key identifier: 06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
Certificate issuer: /CN=0632542221caef6448cc545214e000071bd56b86
Certificate serial: 019A7301945DD44D2328351B1D9EDAF3F417
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
Manifest number: 1156
Signing time: Tue 11 Nov 2025 13:01:14 +0000
Manifest this update: Tue 11 Nov 2025 13:01:14 +0000
Manifest next update: Wed 12 Nov 2025 13:01:14 +0000
Files and hashes: 1: BjJUIiHK72RIzFRSFOAABxvVa4Y.crl (hash: j7qnIFxEmYFQVb5VLxlseirS8rg0VubTRFk6LIZ+tUs=)
2: GI2JqYrwfOB4H4-WFfI5AvlAgXw.roa (hash: wx2kzfl5/eKVV8cW/FCB0zPSR7qqCq5F0M1Y8hdHGxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:94:5d:d4:4d:23:28:35:1b:1d:9e:da:f3:f4:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0632542221caef6448cc545214e000071bd56b86
Validity
Not Before: Nov 11 13:01:14 2025 GMT
Not After : Nov 12 13:01:14 2025 GMT
Subject: CN=337d15b523875427afaaac9e2f8a9e42fb169d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c9:4d:f5:fc:29:9b:80:64:f7:11:3c:7e:b6:
d6:df:e9:cc:f8:22:bc:dc:dc:be:5b:15:d1:30:6f:
b7:4c:13:b4:13:d0:5e:b5:38:c5:43:dc:ae:e5:09:
76:a7:eb:3a:99:0d:95:2e:1d:5f:33:b0:2a:79:08:
42:af:b6:7e:67:a8:58:fd:d4:4b:e6:97:a1:40:04:
5c:55:cb:bd:25:0b:49:f4:28:d1:2a:ed:a1:cc:32:
af:28:fe:65:01:36:be:48:40:86:26:56:3e:9d:fc:
1b:ec:a9:63:9b:67:f4:95:fa:3a:0b:31:b5:64:85:
dd:56:ad:85:ff:f8:7f:c4:96:43:e1:6c:75:92:c8:
a5:61:48:8f:f2:df:ef:f1:c1:ae:09:1a:2f:fd:9c:
f6:06:be:a4:6d:a8:72:21:d9:92:67:d0:8c:8d:a7:
f8:9d:2c:3a:5c:6a:73:e4:dd:a4:0c:1c:aa:84:31:
04:db:dd:8c:41:9f:36:eb:22:61:02:1d:38:80:8c:
4a:6c:05:d9:45:cc:03:f8:8e:3c:df:c3:c8:56:7e:
90:55:5d:ec:e4:07:3d:b7:12:7d:b9:3f:1f:d4:06:
e0:31:83:20:b1:0c:49:c0:36:ff:4e:3b:2c:39:1b:
3b:01:3c:90:d6:07:50:2b:36:39:ae:d7:57:b7:1a:
1a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7D:15:B5:23:87:54:27:AF:AA:AC:9E:2F:8A:9E:42:FB:16:9D:92
X509v3 Authority Key Identifier:
keyid:06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:be:2c:a4:a7:c9:d5:6a:ac:38:69:70:d8:72:0b:4c:73:b2:
21:ba:0e:eb:a1:4d:7b:0b:bd:97:26:ab:af:10:e5:77:d7:30:
2d:7c:ea:36:a3:e7:6e:25:cb:87:a2:65:11:d2:44:df:66:ee:
42:3d:6c:50:b2:fa:ef:c8:61:03:a4:bb:4a:5a:ce:89:14:42:
29:ce:a5:3c:66:97:36:3f:54:29:f9:6a:7d:ee:49:c6:cf:f7:
e3:a0:d2:2c:cc:46:c0:69:25:92:9b:d1:f7:d2:4a:35:ea:e5:
29:0e:a2:6f:59:c9:ef:1d:e4:74:75:a5:f8:4c:d8:b6:8a:86:
b2:17:15:6e:0f:d6:d6:9e:5d:22:a4:1c:85:ea:16:7e:98:7e:
cc:e1:75:29:2f:be:1e:d3:5a:4d:a8:1a:ba:5d:d4:5b:af:4e:
5d:d2:d1:82:71:42:d9:cd:de:54:e8:34:06:7f:36:eb:e7:6b:
49:53:d4:29:98:bd:64:c5:09:26:15:6b:ba:51:ce:41:78:20:
b0:ad:b8:ac:69:30:de:5a:82:de:a2:3e:79:21:85:3b:f2:99:
18:c9:c6:02:2b:f5:12:c2:b5:e7:22:97:69:91:31:3e:5d:ff:
87:38:66:be:ff:9a:5e:52:60:9a:d7:6d:6a:69:de:13:12:53:
8f:11:29:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:52 2025 by rpki-client