Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
File: BjDTqdwDknrlWoHYbKkb3J7nTHM.mft (raw, json)
Hash identifier: RctA3SZ00v1PYG/RLmdYJUr1HD27SRehebFIPqCDjyY=
Subject key identifier: DD:93:86:E1:51:08:1A:4B:E1:5E:CE:87:FC:1D:93:7B:BD:4D:84:36
Authority key identifier: 06:30:D3:A9:DC:03:92:7A:E5:5A:81:D8:6C:A9:1B:DC:9E:E7:4C:73
Certificate issuer: /CN=0630d3a9dc03927ae55a81d86ca91bdc9ee74c73
Certificate serial: 01974AB1B41C50D9CFB6EA21A72D218BB104
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
Manifest number: 1257
Signing time: Sat 07 Jun 2025 14:00:49 +0000
Manifest this update: Sat 07 Jun 2025 14:00:49 +0000
Manifest next update: Sun 08 Jun 2025 14:00:49 +0000
Files and hashes: 1: BjDTqdwDknrlWoHYbKkb3J7nTHM.crl (hash: bst4E6RfEw4qM40aKm+9v42Ip0/t9Yhh1DvGZqIWvAM=)
2: J3YmuWHk-BjnoadebZpHdu7-LaY.roa (hash: e9ui3M/lG4q+b0jcfdPkcURL44aWIzlT3g4fpEz2u0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:b4:1c:50:d9:cf:b6:ea:21:a7:2d:21:8b:b1:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0630d3a9dc03927ae55a81d86ca91bdc9ee74c73
Validity
Not Before: Jun 7 14:00:49 2025 GMT
Not After : Jun 8 14:00:49 2025 GMT
Subject: CN=dd9386e151081a4be15ece87fc1d937bbd4d8436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:21:4b:24:24:04:5c:59:0e:85:fa:cb:af:b1:
19:b0:a4:cc:f1:7c:1d:bd:39:56:4a:34:6f:bc:36:
f6:c7:e4:af:b8:f9:5f:98:74:e5:a6:b9:aa:68:94:
c9:c7:f2:1e:5d:35:5b:76:23:e7:a8:5c:3a:bc:62:
c9:8e:f5:d8:48:4a:45:fb:2b:1d:d0:64:f0:d1:16:
f5:60:7f:94:8d:cc:53:91:e7:d4:ea:86:ad:48:0d:
85:f0:04:6e:5c:2c:1c:9c:bc:e3:44:dc:35:ae:6b:
d6:94:f0:ed:cc:43:6a:4f:cd:6f:10:0a:d4:bd:e0:
2d:56:4d:07:3c:a7:56:7b:0f:62:40:42:7a:0d:4c:
f4:38:35:2d:60:17:cc:ad:aa:55:e1:71:73:5e:a7:
2a:9d:ae:b6:ba:2f:e9:07:63:7e:2a:23:8e:ef:63:
9d:b9:7b:59:a9:f0:35:bf:74:dd:2b:ca:98:c0:8b:
42:34:0c:b6:3d:e8:3a:a5:3c:c5:ec:a9:5c:83:83:
0a:70:48:7e:c1:6e:f4:e6:2a:84:71:d2:cf:d8:71:
8a:9e:df:ce:2e:bb:4e:0b:f1:af:98:ba:5a:e8:07:
b0:d6:be:40:4f:bc:ca:31:33:9d:63:bd:aa:72:e0:
dc:65:84:e0:45:09:bc:b6:ec:eb:61:8f:57:72:17:
48:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:93:86:E1:51:08:1A:4B:E1:5E:CE:87:FC:1D:93:7B:BD:4D:84:36
X509v3 Authority Key Identifier:
keyid:06:30:D3:A9:DC:03:92:7A:E5:5A:81:D8:6C:A9:1B:DC:9E:E7:4C:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d6:fd:06:0e:4d:03:e3:c9:be:02:7c:ba:7a:88:29:ea:a9:
56:f7:af:38:94:bd:d9:36:7d:c9:b4:38:e1:b5:ca:15:9c:65:
55:05:7d:79:ae:fa:a0:2b:59:a0:cb:73:19:a2:bb:1f:22:9b:
62:98:84:e1:51:8f:b0:4a:03:ae:7d:c8:27:da:d5:f7:5c:43:
87:18:1e:5f:f7:58:75:a9:78:38:43:e4:8f:34:8b:7a:7a:44:
2e:02:df:c1:f7:3b:81:24:38:7e:d6:9d:fe:41:a1:8f:aa:d6:
68:22:dd:9c:39:43:e0:c7:bd:95:4f:5c:19:de:d1:06:69:3d:
ae:de:6c:14:19:1b:3d:b9:01:aa:4d:a2:18:fc:1c:48:b5:b6:
c2:9d:fc:46:7c:70:b2:7e:ba:f2:54:47:5d:68:08:df:5a:0c:
36:99:3d:8b:12:bc:9e:2a:90:7b:0a:a8:da:d8:2e:a1:52:d9:
9d:bf:a8:3d:b3:20:32:83:04:29:bc:f2:4d:5f:66:06:43:93:
3f:33:93:f2:9d:86:ee:00:75:e5:1d:a5:e9:be:d1:7e:7e:5c:
96:3b:1c:95:89:c3:8f:3a:40:1f:85:95:e9:81:73:7f:e8:26:
ea:e6:46:94:b1:25:75:97:54:c0:fb:ec:58:1a:37:01:36:17:
94:d6:e3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:13:09 2025 by rpki-client