Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
File: BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft (raw, json)
Hash identifier: cIl+fHOMop3nClWjTpOc7Lv4mLKR45Mdwm8whTLPaaA=
Subject key identifier: AD:E9:7C:8A:D8:17:CC:BC:57:FC:52:52:64:3F:A7:F4:F6:71:4F:D5
Authority key identifier: 05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95
Certificate issuer: /CN=05712e88949d5a435a33e7040c9fb7e7a8244395
Certificate serial: 01992330FC38359123F3023C98D9C37CBDE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
Manifest number: 1374
Signing time: Sun 07 Sep 2025 08:00:36 +0000
Manifest this update: Sun 07 Sep 2025 08:00:36 +0000
Manifest next update: Mon 08 Sep 2025 08:00:36 +0000
Files and hashes: 1: BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl (hash: /tiJC6+CuvIhmCETnnsW0QixjFcXG4BvbESy3Ayfb3U=)
2: Sj4J_mFP2lQkR8Pqu4-vUWhntlo.roa (hash: OyHUO8zUzkjWGYsEn0Hm1G4SAQZ+8DrBTjWOD/M90zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:fc:38:35:91:23:f3:02:3c:98:d9:c3:7c:bd:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05712e88949d5a435a33e7040c9fb7e7a8244395
Validity
Not Before: Sep 7 08:00:36 2025 GMT
Not After : Sep 8 08:00:36 2025 GMT
Subject: CN=ade97c8ad817ccbc57fc5252643fa7f4f6714fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6c:66:99:cb:a8:b8:c9:ba:ea:7c:bb:66:93:
c3:ba:82:f7:3e:81:ea:e7:3d:24:df:6c:29:c7:01:
88:35:3e:4d:05:f7:61:a7:66:f6:27:54:af:c8:06:
8f:73:8b:aa:13:69:b8:22:1f:5e:fd:93:bc:49:e4:
49:38:21:b2:e6:94:41:d1:18:6e:3c:cb:69:7b:67:
d1:6c:f9:c9:fd:b4:67:df:39:36:a0:b8:3d:3c:38:
ef:07:2d:52:2b:ca:e0:17:b7:d9:fa:d3:2b:df:38:
dd:b7:e2:6a:55:25:bc:ec:84:93:b9:18:6c:83:b5:
d2:c3:da:85:72:09:1f:0f:b3:1e:41:c5:96:a4:1c:
72:7b:c1:30:ff:b2:af:74:c8:5f:22:3b:62:11:25:
5e:bd:b0:4a:db:e1:87:a3:56:3a:5c:cc:25:5e:66:
19:61:4a:b7:49:1b:ba:97:90:ef:8c:e6:d7:e1:b5:
ca:22:ab:2b:25:7f:80:91:1e:27:0a:aa:2d:15:11:
f4:6a:9b:ba:b0:18:6a:c4:d6:17:34:08:d5:df:a2:
f9:f1:61:46:7c:cb:db:9f:ea:8b:9a:c7:ed:2a:ed:
a5:2f:53:58:79:be:5d:bf:da:1a:cf:67:6f:01:e1:
9c:6d:2b:93:27:fc:52:84:0a:88:14:f3:02:63:59:
3d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E9:7C:8A:D8:17:CC:BC:57:FC:52:52:64:3F:A7:F4:F6:71:4F:D5
X509v3 Authority Key Identifier:
keyid:05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:5d:38:4d:2f:81:f3:44:16:fe:02:51:b2:15:75:91:e6:2f:
e6:2e:1c:6f:ef:c8:30:7e:a4:e3:bf:0f:75:ec:50:b3:8e:29:
6b:35:59:ad:ca:61:06:db:c8:b2:2a:21:f5:15:3b:75:4c:db:
ba:b7:f3:ec:0e:d5:90:cb:d1:9e:31:c9:84:85:b4:af:a4:bc:
16:ef:38:88:8a:81:4d:83:67:d4:7b:ba:28:2d:90:42:37:23:
12:f2:a5:cb:d4:9c:3d:04:33:18:b0:d4:1c:14:3e:93:a5:f6:
d8:87:c9:7e:e0:ab:05:fb:51:25:dc:28:ea:b6:6e:06:5d:3a:
98:88:ed:2b:e9:c6:ac:f1:82:68:4d:79:ba:4f:d3:c2:f6:29:
03:da:2b:e2:4f:28:d9:e5:a6:8a:30:70:1d:7f:04:c5:ee:ca:
83:aa:19:2a:01:2f:17:04:4c:7e:99:42:89:d0:93:0c:6d:59:
0d:7d:80:24:d5:a8:91:e2:a5:ce:08:71:ec:79:b1:1e:87:be:
8b:03:66:77:a1:79:e2:ae:4f:06:94:21:86:4f:fd:e9:2f:77:
a3:94:94:fd:cc:0d:9f:43:7b:ef:35:a1:2b:79:5c:dd:4d:33:
57:f1:68:4d:d0:e3:78:9d:86:55:0f:ba:f7:24:51:3e:dc:ce:
b9:9f:6f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:24 2025 by rpki-client