Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
File: BDjuFv-LwYTI-qF62vWZ4_rwynE.mft (raw, json)
Hash identifier: mbX/xGZ1YsFhvKBfs40dljVbYTlv3M6/YpZFS+imuto=
Subject key identifier: 4D:DB:BA:20:9C:C2:A7:73:3E:F8:82:8E:5E:5D:D3:DD:7F:CC:3E:90
Authority key identifier: 04:38:EE:16:FF:8B:C1:84:C8:FA:A1:7A:DA:F5:99:E3:FA:F0:CA:71
Certificate issuer: /CN=0438ee16ff8bc184c8faa17adaf599e3faf0ca71
Certificate serial: 019922556EF9328360FA166967DFC33C4EDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
Manifest number: 0C34
Signing time: Sun 07 Sep 2025 04:00:48 +0000
Manifest this update: Sun 07 Sep 2025 04:00:48 +0000
Manifest next update: Mon 08 Sep 2025 04:00:48 +0000
Files and hashes: 1: BDjuFv-LwYTI-qF62vWZ4_rwynE.crl (hash: ArxAHaOEbnu6kIaqRmHKqQu9j3g+B62Z+03AyDsWuwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:6e:f9:32:83:60:fa:16:69:67:df:c3:3c:4e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0438ee16ff8bc184c8faa17adaf599e3faf0ca71
Validity
Not Before: Sep 7 04:00:48 2025 GMT
Not After : Sep 8 04:00:48 2025 GMT
Subject: CN=4ddbba209cc2a7733ef8828e5e5dd3dd7fcc3e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:45:51:a8:7f:7b:df:e3:be:3e:2b:75:6d:b3:
24:92:b8:19:f9:bf:75:9a:0a:5a:c8:65:6a:f4:ec:
48:8b:f6:20:9d:d7:fe:74:19:fe:77:ea:67:dc:7d:
0a:cd:82:3f:13:ec:74:d4:4f:17:50:97:e5:f7:ce:
c8:03:cc:27:03:db:8c:4a:8d:26:2e:fb:5e:18:d8:
a5:13:88:50:81:bc:15:04:0a:94:12:a4:20:4d:eb:
ed:0f:0c:2b:ac:c0:4c:31:0d:c0:39:ce:24:50:57:
fb:0c:7d:58:fa:13:22:c5:e6:44:be:9e:55:57:fb:
05:55:f0:6c:81:03:cf:bb:72:d9:1c:dc:de:1e:d3:
a2:24:4c:2f:4d:26:c4:5b:32:8f:de:a5:45:c7:46:
ef:df:1d:8f:a8:dd:c5:eb:14:a4:e0:5e:72:7f:e4:
d4:2e:e5:c1:19:6a:05:ad:f0:28:4a:cd:7f:50:29:
81:85:7e:53:8c:ea:52:5a:2a:7d:8f:fd:b1:f4:bd:
52:ec:37:11:20:50:71:75:44:4f:1f:0c:f9:ba:ac:
1a:2d:18:13:d8:54:0e:41:bf:82:a1:f5:5a:e2:7b:
30:a9:d7:9b:b7:74:89:43:27:c8:97:50:2d:34:82:
1b:11:2e:01:27:17:0f:a8:9e:70:49:cf:7e:77:a4:
6d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:DB:BA:20:9C:C2:A7:73:3E:F8:82:8E:5E:5D:D3:DD:7F:CC:3E:90
X509v3 Authority Key Identifier:
keyid:04:38:EE:16:FF:8B:C1:84:C8:FA:A1:7A:DA:F5:99:E3:FA:F0:CA:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:26:2c:2b:eb:27:bf:20:66:df:3f:07:5a:4e:04:44:46:c3:
1a:ed:0e:43:ad:6b:07:17:f3:d8:c6:b5:30:5e:8f:84:37:e7:
89:dd:a8:70:96:89:cc:59:51:72:b9:16:df:71:1b:4d:ac:dd:
cf:db:30:2c:5b:04:e1:db:26:ee:54:cb:12:82:e5:cf:16:84:
2b:85:b5:aa:bc:2a:a5:e4:0b:9b:3b:c8:9d:33:19:bd:ca:d4:
7a:e2:e1:bc:9c:ab:b3:aa:49:06:f4:7f:e4:20:1e:6e:2b:c3:
fb:54:06:22:73:62:3b:66:14:be:16:2a:63:97:83:64:ae:48:
9c:c8:50:63:17:f5:fd:62:26:d5:0e:46:b4:c6:b0:d9:73:a6:
7b:09:3a:3a:24:44:a5:19:64:19:d9:2f:3a:30:ba:6a:bf:78:
f1:27:f2:72:9c:e8:9d:18:be:af:eb:25:d0:9e:af:53:c2:b9:
65:dd:f9:3a:a0:f9:27:35:dd:b0:13:ca:55:93:91:87:1e:bd:
88:9d:97:e7:2d:6b:28:84:21:47:82:14:9f:e5:1f:9c:89:36:
78:96:ec:bd:48:90:20:f8:07:77:6a:d9:06:1b:0b:45:90:59:
2a:47:bf:36:5d:9a:22:61:63:9c:ee:f7:d8:0a:c3:23:e2:59:
a5:df:02:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:00:38 2025 by rpki-client