Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
File: BjJUIiHK72RIzFRSFOAABxvVa4Y.mft (raw, json)
Hash identifier: 0k/YSSs3BQk6lx6zMdq9ZbG/DAfOX4c4EefJ/6dq0VY=
Subject key identifier: D3:60:80:78:62:60:5E:84:32:DB:2D:19:EA:A1:4B:DA:D5:C6:80:2B
Authority key identifier: 06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
Certificate issuer: /CN=0632542221caef6448cc545214e000071bd56b86
Certificate serial: 019749D602B1B685DF7174ABB2585C276189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
Manifest number: 0FB3
Signing time: Sat 07 Jun 2025 10:00:51 +0000
Manifest this update: Sat 07 Jun 2025 10:00:51 +0000
Manifest next update: Sun 08 Jun 2025 10:00:51 +0000
Files and hashes: 1: BjJUIiHK72RIzFRSFOAABxvVa4Y.crl (hash: mc5uXltNB4rvOaAt+oU/SBuKzj2unIaod95dboVFpRU=)
2: GI2JqYrwfOB4H4-WFfI5AvlAgXw.roa (hash: wx2kzfl5/eKVV8cW/FCB0zPSR7qqCq5F0M1Y8hdHGxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:02:b1:b6:85:df:71:74:ab:b2:58:5c:27:61:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0632542221caef6448cc545214e000071bd56b86
Validity
Not Before: Jun 7 10:00:51 2025 GMT
Not After : Jun 8 10:00:51 2025 GMT
Subject: CN=d360807862605e8432db2d19eaa14bdad5c6802b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f5:0a:af:9b:19:1d:d8:ca:76:46:5f:25:48:
7c:69:48:02:54:f4:de:d4:0f:ff:3f:30:d9:1e:ca:
9b:fd:94:45:5c:96:2c:7e:c1:48:5e:69:59:c4:0a:
68:08:03:d0:ce:a4:2a:20:a4:86:68:ba:1f:e0:a7:
28:46:f1:30:29:3b:2c:19:b5:00:c6:e0:72:a6:32:
75:ac:5d:9d:b3:31:03:ab:b5:4b:98:89:20:c6:42:
be:1d:02:8b:a7:6e:fd:1a:97:5f:dd:dc:ff:c4:83:
bd:7b:5e:bf:89:98:55:23:3d:9b:1d:e8:77:fc:fa:
0e:4a:45:4f:b5:2d:49:98:b9:45:cf:0f:c8:12:b1:
0a:30:e7:37:06:d7:50:1e:c3:45:3c:dc:d3:05:01:
93:a2:20:fa:ae:8b:91:dd:ff:0a:20:66:45:b0:a7:
af:30:c3:44:a4:b8:d4:ea:fe:ff:06:16:2d:54:9a:
90:b6:d6:d6:f7:64:62:8e:67:7d:8e:d1:25:3b:7e:
c7:55:ae:de:ab:7b:25:f2:f3:0d:98:2d:ac:08:ec:
76:1c:44:e4:7b:6a:c2:c5:fa:c7:0d:ce:b9:02:a0:
cf:3a:2a:fe:12:26:a5:4e:58:04:a9:a2:a3:21:18:
6f:40:b7:a6:6f:38:4e:9a:1c:fc:2a:a8:1b:95:c7:
c5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:60:80:78:62:60:5E:84:32:DB:2D:19:EA:A1:4B:DA:D5:C6:80:2B
X509v3 Authority Key Identifier:
keyid:06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ac:38:97:c4:8d:97:c5:28:46:d3:ea:f3:4f:a8:29:3a:ce:
f9:4e:de:19:06:a9:f4:ba:48:6f:b8:11:68:f1:4b:9b:90:25:
5c:63:61:06:e9:a2:8f:47:61:64:9d:8f:eb:03:96:82:53:82:
16:28:fc:63:d0:e6:cf:01:6b:c7:da:dd:6f:8d:09:03:6c:5c:
30:90:d3:00:c8:3f:95:aa:0c:e4:c0:b5:a7:be:d2:18:ef:2d:
fb:d2:6c:3a:15:57:10:2c:a2:ac:04:2f:91:76:99:c7:d5:b5:
96:a8:d4:ea:78:91:27:b8:0e:75:98:c3:f6:fd:8a:f7:1d:d1:
78:fc:74:c5:46:28:2b:5f:8d:d8:b1:15:31:09:8b:7c:af:b2:
42:5b:a9:c3:fa:ce:1f:b1:3d:cd:82:d5:73:62:1c:da:20:31:
c7:84:62:cd:81:cb:65:25:51:df:cc:18:ca:70:a8:20:32:10:
b9:a5:38:e2:8e:40:4c:01:40:79:75:9a:a4:8a:e8:a2:dc:06:
d7:44:24:01:de:c1:98:99:82:c5:3a:d8:00:a3:25:32:09:56:
11:62:d3:6f:4d:6e:16:7e:f9:d5:d7:b6:21:28:d9:05:fd:c1:
d3:f9:9e:9e:5f:43:bf:99:cc:3a:f1:5c:c6:14:93:85:d4:ca:
51:14:5e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:31:02 2025 by rpki-client