Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/BjcCShgkPkX40Eqtrr66kKVp6IM.mft
File: BjcCShgkPkX40Eqtrr66kKVp6IM.mft (raw, json)
Hash identifier: 7wx0suYVTVXaJ2pv0lKPWYTcSSqAgCWF5H3rQ1CwZYA=
Subject key identifier: D5:EB:D1:9E:BE:A1:94:28:8A:D8:0A:BD:55:6D:AF:27:B2:50:C8:07
Authority key identifier: 06:37:02:4A:18:24:3E:45:F8:D0:4A:AD:AE:BE:BA:90:A5:69:E8:83
Certificate issuer: /CN=0637024a18243e45f8d04aadaebeba90a569e883
Certificate serial: 019A7113650001FFC17ECBB0C4C44AF8BB54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjcCShgkPkX40Eqtrr66kKVp6IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/BjcCShgkPkX40Eqtrr66kKVp6IM.mft
Manifest number: 0194
Signing time: Tue 11 Nov 2025 04:01:27 +0000
Manifest this update: Tue 11 Nov 2025 04:01:27 +0000
Manifest next update: Wed 12 Nov 2025 04:01:27 +0000
Files and hashes: 1: 6FSKWG-EGTHbHR3wSnfZzAiHhXY.roa (hash: VmwTyVH3w9xwUHgrQoPTWP7hFDzEQmvR4R1wYGDo/XU=)
2: BjcCShgkPkX40Eqtrr66kKVp6IM.crl (hash: p4M/VjYtAMMqWzDsr5XhZ6NgA6yVzCs5JCb4weqECh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/BjcCShgkPkX40Eqtrr66kKVp6IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/BjcCShgkPkX40Eqtrr66kKVp6IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjcCShgkPkX40Eqtrr66kKVp6IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:65:00:01:ff:c1:7e:cb:b0:c4:c4:4a:f8:bb:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0637024a18243e45f8d04aadaebeba90a569e883
Validity
Not Before: Nov 11 04:01:27 2025 GMT
Not After : Nov 12 04:01:27 2025 GMT
Subject: CN=d5ebd19ebea194288ad80abd556daf27b250c807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8f:23:d9:a1:48:82:c9:f9:83:87:54:66:f0:
4e:cc:cd:78:6f:79:1d:09:d5:a4:96:ed:ba:d5:40:
32:c7:ac:95:3f:64:34:26:39:42:a0:d3:17:f8:b7:
2e:78:61:32:6f:cf:58:e3:27:91:f6:98:5b:5b:a2:
06:a4:81:5b:e9:b4:55:a0:de:95:f9:2a:e5:fb:7c:
e6:44:e2:fe:85:e6:ed:dd:b8:19:38:dc:75:5c:02:
d7:65:5e:52:ff:cb:a8:80:4b:71:07:bd:1c:e1:27:
51:d2:4c:16:68:f4:36:18:f7:cd:1e:64:0f:4c:b3:
c4:6e:9d:c8:ad:87:cf:60:ca:ec:16:18:21:90:47:
56:7e:fc:bc:9e:a3:60:74:ef:f8:66:88:1d:87:7a:
d9:c5:1c:ac:b5:c9:03:7f:6e:7e:a4:c5:1e:27:13:
d0:55:bd:fb:54:cd:3f:c0:08:12:49:3b:e4:f1:9f:
65:14:ea:47:97:d0:25:f6:47:e6:ca:ab:93:56:81:
53:c4:51:43:c5:a5:0d:66:1a:87:06:04:52:b7:fb:
4c:73:b0:ff:1e:e6:85:7a:e4:f5:58:f3:f1:7e:f5:
1c:7c:76:92:67:d5:08:9d:3a:82:81:b6:df:99:a2:
6f:49:ca:ec:ff:ab:17:21:96:fb:14:02:01:92:36:
db:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:EB:D1:9E:BE:A1:94:28:8A:D8:0A:BD:55:6D:AF:27:B2:50:C8:07
X509v3 Authority Key Identifier:
keyid:06:37:02:4A:18:24:3E:45:F8:D0:4A:AD:AE:BE:BA:90:A5:69:E8:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjcCShgkPkX40Eqtrr66kKVp6IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/BjcCShgkPkX40Eqtrr66kKVp6IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/BjcCShgkPkX40Eqtrr66kKVp6IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c4:f8:65:d5:12:95:5e:ae:27:2f:d5:b3:e2:b1:cc:d2:35:
9e:b2:47:46:bd:66:00:e3:f8:d0:9b:c9:19:77:27:1f:59:77:
9f:25:5e:7f:e5:4d:5e:0d:fe:37:25:2a:76:99:48:66:98:87:
e9:95:a9:fc:e5:00:fc:1d:ca:a3:47:92:8f:00:b0:56:b3:06:
48:3f:ca:77:cb:43:34:c1:83:77:b1:45:c6:41:2e:22:55:98:
0e:82:eb:27:b1:38:9c:69:f3:bc:76:38:68:61:8a:95:14:09:
f1:8b:fa:1f:69:6c:4d:47:2c:34:15:7f:ce:b8:7e:2f:12:41:
58:37:82:6c:a2:9f:f1:20:32:55:b3:09:71:63:28:4c:ff:27:
f5:8c:89:a2:61:0f:a4:0b:1e:c6:15:fd:9c:97:91:3f:c1:15:
74:fb:6f:ef:29:c1:74:2e:0b:2d:a1:8c:93:8e:58:47:6e:d4:
00:c5:26:ff:84:61:e6:38:fd:71:7d:ca:02:a1:64:4b:83:3f:
31:46:0f:6d:3f:85:4c:3b:d4:24:30:dc:76:e4:85:5c:a9:96:
12:77:98:ce:9f:6b:29:de:68:38:a2:c1:13:9a:dd:7e:64:31:
8b:cb:16:6e:83:4a:ed:88:83:de:be:c0:bb:d6:87:f7:ae:74:
bd:ce:87:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:22 2025 by rpki-client