Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
File: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft (raw, json)
Hash identifier: JHPxP3iYSVizZjFtdIDKaLBZ8NZnaO0rBfMFzKrQ/6A=
Subject key identifier: F1:55:52:93:99:7B:7C:E5:45:1F:62:00:D7:3F:90:D3:B2:2B:06:BD
Authority key identifier: 04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
Certificate issuer: /CN=049d4f66598668079353721c21935a00319f6759
Certificate serial: 019960C65D9838B083978E060321329448BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
Manifest number: 15D7
Signing time: Fri 19 Sep 2025 07:00:36 +0000
Manifest this update: Fri 19 Sep 2025 07:00:36 +0000
Manifest next update: Sat 20 Sep 2025 07:00:36 +0000
Files and hashes: 1: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl (hash: rQlJIXGeNG6l8S+//sDf7zxPa4hgHgnKsuUjXjG+DRI=)
2: SBmVAlodI7xnOy2vKS8iSbQ2L-c.roa (hash: Qjp3sgcgeheRs3EPb5cqh07Ww165sSq1F+/13L3R5T4=)
3: g0VLR4dmZuTUcMAH8lFP9-35SEQ.roa (hash: VJzmNAtUkQtzYlHT74BgFDK6+FNteK79SAvoZ6OtMvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:60:c6:5d:98:38:b0:83:97:8e:06:03:21:32:94:48:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049d4f66598668079353721c21935a00319f6759
Validity
Not Before: Sep 19 07:00:36 2025 GMT
Not After : Sep 20 07:00:36 2025 GMT
Subject: CN=f1555293997b7ce5451f6200d73f90d3b22b06bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:24:0d:74:85:7b:89:b8:9a:83:05:90:00:79:
dc:28:17:5a:0d:4d:5e:8a:ae:e6:5e:ff:38:73:a4:
07:41:aa:9d:c3:57:21:83:2b:50:c0:9f:14:fe:7f:
79:e8:c4:5b:86:88:2d:aa:53:69:c9:fc:ed:20:29:
4d:6d:f8:47:f4:5c:37:d4:61:4b:bb:0a:dd:ec:20:
e2:14:8a:d8:19:20:ac:4a:e0:ae:ec:b4:74:cf:af:
52:a9:df:f3:f0:2d:4e:44:cc:ed:6c:85:13:74:38:
4a:b7:da:c6:f4:bb:df:31:32:0f:70:7b:03:7e:2c:
47:00:eb:48:db:4c:90:4c:46:57:0b:93:e7:1e:f3:
da:ca:5e:7a:8a:1b:c1:d6:56:80:f6:5d:ce:8d:d9:
26:31:4f:23:f0:cf:09:08:6d:a4:55:ae:36:62:f6:
29:8f:45:ca:0d:25:84:da:ff:36:c1:f2:85:0a:7a:
d3:af:ac:65:85:25:ed:18:3b:94:a0:5f:8c:07:4d:
cf:03:86:8a:a5:a1:28:e3:6f:8a:93:ae:20:f2:52:
85:4b:2a:4d:a7:06:2d:3c:2e:35:91:f9:53:f6:1a:
7f:e8:c9:83:c2:cb:15:f7:81:8f:c4:55:19:3d:b5:
bd:42:79:35:35:ef:87:0a:54:b1:a0:24:11:60:93:
3d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:55:52:93:99:7B:7C:E5:45:1F:62:00:D7:3F:90:D3:B2:2B:06:BD
X509v3 Authority Key Identifier:
keyid:04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:5a:a2:0c:b7:e8:7f:c9:63:ce:7e:60:8e:42:af:9c:0d:b2:
9f:ba:69:bb:da:ee:0c:3d:80:bc:be:7c:11:b9:85:03:56:90:
97:3d:83:0e:31:53:ac:b8:99:c6:57:70:6b:78:f8:1f:bf:7d:
dd:40:da:a3:cf:81:28:45:a2:02:66:62:f1:d4:54:2f:70:92:
42:c2:ed:0a:0d:c6:01:c5:aa:95:50:af:4a:55:70:4b:3a:a6:
f2:32:92:49:3c:7f:05:5d:d3:1b:7f:b5:d4:3f:57:3e:49:b1:
4a:4f:0a:5a:e8:04:15:3c:23:f8:7d:91:59:4e:e9:95:a1:d9:
26:fc:f9:81:27:45:9d:56:05:31:89:24:5f:a1:a2:72:41:27:
46:78:c6:ce:77:20:ea:79:f6:3e:ed:85:14:d2:0c:01:8f:03:
a4:96:25:51:61:06:aa:1b:a5:f7:86:91:59:04:24:2f:1f:50:
9a:15:ef:7b:58:0f:d6:a4:75:13:33:e6:f8:ec:cf:20:e2:95:
c9:59:7c:05:a3:34:b2:80:01:d5:43:af:3e:a9:db:c1:b8:f7:
10:a8:5b:f8:63:3c:82:7d:72:25:6b:ad:9b:80:0c:cc:6f:2d:
11:ff:3d:fe:8a:92:05:16:36:cd:e6:e5:92:c5:fb:10:c4:03:
eb:d9:42:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 16:07:34 2025 by rpki-client