Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
File: BjDTqdwDknrlWoHYbKkb3J7nTHM.mft (raw, json)
Hash identifier: 6EQ4tp3WpRWarwJkstdQUeyzZWO76T81JLAjlfjMy0E=
Subject key identifier: CD:C5:C8:30:1F:C4:7C:1D:81:0F:17:D5:D0:75:88:E7:E2:4E:0A:5F
Authority key identifier: 06:30:D3:A9:DC:03:92:7A:E5:5A:81:D8:6C:A9:1B:DC:9E:E7:4C:73
Certificate issuer: /CN=0630d3a9dc03927ae55a81d86ca91bdc9ee74c73
Certificate serial: 019A71EE9F83B45C117D743A4203D5B870EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
Manifest number: 13F9
Signing time: Tue 11 Nov 2025 08:00:55 +0000
Manifest this update: Tue 11 Nov 2025 08:00:55 +0000
Manifest next update: Wed 12 Nov 2025 08:00:55 +0000
Files and hashes: 1: BjDTqdwDknrlWoHYbKkb3J7nTHM.crl (hash: PSdL0EWv1KDxNMea0xfnBgFjfrfUKnnNDUQSCpyuAQU=)
2: J3YmuWHk-BjnoadebZpHdu7-LaY.roa (hash: e9ui3M/lG4q+b0jcfdPkcURL44aWIzlT3g4fpEz2u0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:9f:83:b4:5c:11:7d:74:3a:42:03:d5:b8:70:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0630d3a9dc03927ae55a81d86ca91bdc9ee74c73
Validity
Not Before: Nov 11 08:00:55 2025 GMT
Not After : Nov 12 08:00:55 2025 GMT
Subject: CN=cdc5c8301fc47c1d810f17d5d07588e7e24e0a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f8:64:9d:16:ee:1c:5c:6b:a9:81:44:7c:e5:
c9:39:49:7e:d7:58:63:d6:bb:44:c3:73:d4:6c:12:
77:b1:cc:8c:db:38:3c:0a:80:4c:04:c9:5a:91:e8:
1b:2a:8a:c1:bf:72:18:f4:0c:e0:b4:fa:3f:2d:2d:
91:43:19:17:6b:52:af:ef:06:ce:3b:33:78:6c:e8:
60:a9:39:90:ee:9c:f2:0e:68:36:08:7f:dc:d5:e5:
d7:9e:49:74:f1:6b:d4:ff:66:81:7c:f8:16:e5:00:
28:ac:81:dc:53:0b:51:2c:3c:c3:cc:19:87:9a:04:
11:ea:ab:b7:ca:b6:e1:cd:fe:87:09:05:47:b6:af:
81:83:25:ed:60:6d:6f:be:ac:8e:b5:0e:b8:c6:45:
21:1c:5a:d1:0b:70:35:d5:e8:ce:4d:e4:18:eb:21:
93:06:f3:8b:0a:c7:5d:90:c5:8a:e5:79:df:8c:e6:
20:b8:d8:81:63:5a:77:41:93:6a:e7:fb:36:b8:7c:
74:56:c5:22:13:6f:ea:2c:88:8b:36:11:21:73:2d:
e5:0f:f8:eb:9d:ef:bf:1e:33:0f:3b:dc:a6:8a:fd:
76:ed:65:fd:c8:eb:1d:a8:13:98:48:17:f0:33:e0:
75:9c:4e:12:e3:d9:fe:62:26:d6:0e:eb:ba:de:87:
00:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C5:C8:30:1F:C4:7C:1D:81:0F:17:D5:D0:75:88:E7:E2:4E:0A:5F
X509v3 Authority Key Identifier:
keyid:06:30:D3:A9:DC:03:92:7A:E5:5A:81:D8:6C:A9:1B:DC:9E:E7:4C:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c9:7b:c8:20:7b:61:6d:5f:73:be:d7:d6:9a:75:52:12:5f:
a0:95:64:be:49:f9:18:21:bf:98:14:c9:83:e5:f0:e7:e9:6c:
29:a2:b7:6e:bd:56:ae:a9:14:ee:58:95:25:09:b8:26:cb:1f:
d1:7b:f8:01:65:c4:0c:7b:26:2f:ec:2e:c3:b2:59:f1:ad:f1:
f2:04:fd:f4:26:44:61:d5:52:2a:19:00:8f:97:42:1d:3a:99:
50:f5:0e:b4:e4:9b:54:f6:ed:92:87:5d:45:61:de:65:9b:9b:
1f:44:d9:d5:74:30:d7:26:72:f2:a7:dd:b5:1c:d5:c0:9a:9c:
63:22:9e:68:0e:45:d1:1c:1e:01:35:25:58:be:78:3b:22:d4:
b7:24:8a:10:ee:e4:ee:91:d3:db:e2:52:3a:6b:c0:fd:1a:7f:
cd:ca:f6:b1:3f:a0:e1:fa:59:c3:14:42:35:9a:72:48:1c:8d:
9d:02:1c:df:12:6d:4b:e2:a9:7e:5e:6d:45:6b:1f:a2:cf:23:
ab:d6:e8:e1:ce:b7:a2:99:ac:68:03:d8:89:8e:d2:48:7e:13:
13:7f:21:30:7e:46:55:85:83:67:90:24:07:eb:06:b4:5c:1f:
8b:10:76:12:d5:bc:72:19:9b:d5:b8:b8:ee:97:2d:74:bc:b8:
ce:e8:78:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:16 2025 by rpki-client