Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
File: BjDTqdwDknrlWoHYbKkb3J7nTHM.mft (raw, json)
Hash identifier: YTga0E59tUbwOCJF/7tSE7fMcPp+J4YlIh1p8/D27f0=
Subject key identifier: 9F:94:2F:5D:90:A3:5D:0E:19:DE:5D:84:8A:92:14:AB:1F:94:27:6C
Authority key identifier: 06:30:D3:A9:DC:03:92:7A:E5:5A:81:D8:6C:A9:1B:DC:9E:E7:4C:73
Certificate issuer: /CN=0630d3a9dc03927ae55a81d86ca91bdc9ee74c73
Certificate serial: 019923D5DF0A99FB541EA661182B100A95E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
Manifest number: 134C
Signing time: Sun 07 Sep 2025 11:00:42 +0000
Manifest this update: Sun 07 Sep 2025 11:00:42 +0000
Manifest next update: Mon 08 Sep 2025 11:00:42 +0000
Files and hashes: 1: BjDTqdwDknrlWoHYbKkb3J7nTHM.crl (hash: kcCTSg7XqAaFhFKLzpHcZ564sOdZZ5bnGrNzFHLPmaA=)
2: J3YmuWHk-BjnoadebZpHdu7-LaY.roa (hash: e9ui3M/lG4q+b0jcfdPkcURL44aWIzlT3g4fpEz2u0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:df:0a:99:fb:54:1e:a6:61:18:2b:10:0a:95:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0630d3a9dc03927ae55a81d86ca91bdc9ee74c73
Validity
Not Before: Sep 7 11:00:42 2025 GMT
Not After : Sep 8 11:00:42 2025 GMT
Subject: CN=9f942f5d90a35d0e19de5d848a9214ab1f94276c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f8:bc:d6:7c:af:ef:39:28:de:22:03:9f:b5:
83:00:a8:81:58:b5:8e:3e:c9:1a:9d:79:c2:f9:a9:
26:70:66:04:33:5f:96:bd:88:7e:5b:6a:6f:37:1f:
dc:1f:94:f8:c3:3c:53:26:03:ae:fd:cc:0f:ba:93:
3f:31:45:d3:62:ed:24:aa:fd:7b:cd:40:8b:03:82:
a0:65:cc:8c:80:15:ac:c1:6d:77:5d:96:eb:2b:df:
d5:52:fa:1e:a0:c4:78:ae:d0:dd:47:de:32:a8:6a:
f0:73:4c:16:f9:0e:11:6a:85:cd:87:4d:1d:e2:cf:
20:90:b3:8f:33:d2:ef:fd:2f:ad:8d:8f:8f:43:7a:
58:84:9f:eb:59:95:94:64:57:db:37:b2:38:98:ff:
21:79:8b:4a:ba:55:4f:ae:c9:22:a6:f2:72:ab:8d:
cb:e1:7b:13:47:94:35:30:66:61:b2:6e:8f:fc:32:
9d:73:e0:ff:44:ad:25:5c:3b:ec:d4:a4:91:61:0c:
91:38:25:c8:2c:01:a8:f8:a7:f6:0f:b9:e1:f9:95:
e6:1f:e0:36:4f:3f:93:3f:18:62:c8:b1:33:00:48:
8a:2c:ae:af:88:05:3c:8e:68:f8:91:43:e1:8d:63:
f4:96:c2:89:65:1d:a0:ba:7c:10:07:3c:28:6f:78:
e8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:94:2F:5D:90:A3:5D:0E:19:DE:5D:84:8A:92:14:AB:1F:94:27:6C
X509v3 Authority Key Identifier:
keyid:06:30:D3:A9:DC:03:92:7A:E5:5A:81:D8:6C:A9:1B:DC:9E:E7:4C:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:dd:2f:0d:7f:0e:40:4b:4f:c9:15:33:02:a7:b7:5a:0c:12:
70:b5:4f:4d:88:54:1c:c1:52:09:1b:ee:a7:89:d1:66:46:f0:
96:68:9b:a2:9c:e2:d2:f9:10:93:e0:2c:a2:18:18:41:b7:45:
33:72:28:19:ed:54:a7:3e:0b:04:19:df:9d:58:e2:fd:c8:5b:
4c:5c:4e:02:88:b9:27:1f:3e:53:4c:60:d0:26:69:b1:bd:a1:
5c:02:f8:6b:95:9f:a3:bd:5c:2f:99:29:d9:29:cc:99:e1:e7:
67:47:c3:da:8d:7f:fa:ee:ab:33:d2:e8:9c:e6:8b:0e:8e:ce:
d3:00:89:e0:94:a0:87:55:2c:8b:76:97:32:7f:94:3d:d5:7d:
fd:b1:df:60:19:ba:9b:54:25:ee:50:66:81:64:ff:b7:65:78:
e8:2a:df:ec:cf:dc:60:18:f3:ad:5f:76:62:75:ec:41:29:58:
88:09:31:9e:20:d4:19:04:30:d9:12:82:b8:85:40:04:2a:e9:
7b:cb:6e:ce:11:ca:3f:e6:99:25:00:3b:a2:62:3a:fa:17:3e:
ea:a7:87:72:40:b9:59:9a:3d:d4:27:e2:5a:fc:16:cb:5f:0c:
2b:1c:fe:62:14:78:d0:ba:c6:01:79:ee:38:64:bf:9a:b3:73:
56:a2:55:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:42:04 2025 by rpki-client