Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
File: BDjuFv-LwYTI-qF62vWZ4_rwynE.mft (raw, json)
Hash identifier: Tg2vWzfLaiTo6joOcOJ+5S+8KXnsc+PL2PtQoWQwqXw=
Subject key identifier: 21:B8:DF:42:F1:C6:66:E4:DF:29:A4:AF:10:B0:B3:A7:05:78:CB:88
Authority key identifier: 04:38:EE:16:FF:8B:C1:84:C8:FA:A1:7A:DA:F5:99:E3:FA:F0:CA:71
Certificate issuer: /CN=0438ee16ff8bc184c8faa17adaf599e3faf0ca71
Certificate serial: 019A725C6B37179D366AEE9AEAC45BD32E6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
Manifest number: 0CE2
Signing time: Tue 11 Nov 2025 10:00:50 +0000
Manifest this update: Tue 11 Nov 2025 10:00:50 +0000
Manifest next update: Wed 12 Nov 2025 10:00:50 +0000
Files and hashes: 1: BDjuFv-LwYTI-qF62vWZ4_rwynE.crl (hash: Aq/hJXVNLZdRXhFdzGxMTQHWxdEEOdJxVcXjqfMPMtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:6b:37:17:9d:36:6a:ee:9a:ea:c4:5b:d3:2e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0438ee16ff8bc184c8faa17adaf599e3faf0ca71
Validity
Not Before: Nov 11 10:00:50 2025 GMT
Not After : Nov 12 10:00:50 2025 GMT
Subject: CN=21b8df42f1c666e4df29a4af10b0b3a70578cb88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:83:9c:d8:45:dd:3a:a3:9e:2f:4f:0e:7f:c0:
a6:1d:df:f0:ab:43:dd:20:11:b1:93:0d:ec:01:0c:
99:5c:fd:f2:a4:8a:e4:f3:3d:78:13:7c:88:ec:be:
ae:47:98:62:b7:12:64:34:4c:1c:c0:f7:6a:d2:f4:
dc:de:e3:9e:83:5a:3b:c9:05:93:a5:fd:28:d1:d4:
b7:cb:dc:fb:d6:7f:7b:95:31:96:f5:1a:68:8e:37:
01:6b:73:2e:48:68:44:64:3b:76:b0:d4:3b:52:b2:
87:53:e5:90:bd:8a:48:4c:08:44:07:90:5f:cd:24:
02:a4:54:c5:cd:55:7e:41:8e:19:3f:e6:4e:8b:41:
5f:ac:73:e6:7c:fe:82:8a:da:52:e4:22:06:93:4e:
28:2f:25:4b:21:fc:bd:85:30:c7:b0:31:8b:cc:de:
3b:60:9a:ad:41:79:26:0b:c4:2f:b2:2f:71:ef:25:
9f:1f:96:b8:30:62:0f:d1:1c:16:09:b8:d7:8c:df:
7e:3d:45:70:27:1a:0d:2f:84:f3:b1:0e:7d:ed:3e:
8e:0b:ea:8e:a3:3b:de:d0:14:51:d9:b4:27:1a:3d:
5a:07:31:19:b8:b1:fd:cb:8d:a8:5e:6e:95:e0:25:
0e:9e:67:7f:bd:ed:c1:d2:21:70:6a:75:06:da:21:
38:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B8:DF:42:F1:C6:66:E4:DF:29:A4:AF:10:B0:B3:A7:05:78:CB:88
X509v3 Authority Key Identifier:
keyid:04:38:EE:16:FF:8B:C1:84:C8:FA:A1:7A:DA:F5:99:E3:FA:F0:CA:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:45:fd:fe:e3:75:be:6d:4b:67:30:ab:b8:e1:c7:ac:6a:f5:
c5:b4:f6:9a:a4:e0:e4:06:99:2b:5a:0e:60:8a:91:8a:d0:5f:
da:fc:b6:48:8c:75:57:b4:59:6f:a2:9a:2c:5f:f0:8a:f0:bb:
89:0e:fc:08:52:2c:67:b9:27:4d:80:00:1c:34:c7:f1:46:9a:
0e:ce:78:e8:4f:60:85:8b:ef:77:79:f2:0e:cb:11:5d:a5:69:
40:83:ac:0e:55:77:de:a3:c0:c5:89:45:9c:8e:7b:f1:c8:b7:
60:75:ed:32:7c:70:92:14:62:1c:61:3d:16:41:78:9b:10:36:
24:a7:9d:f8:e9:dc:33:ed:c6:a1:87:19:9d:96:d5:28:52:36:
d5:e8:10:17:d4:22:49:cc:2c:7c:ea:8b:d5:c1:b4:8d:17:52:
08:d5:33:26:18:4a:17:d8:94:af:19:68:a9:65:93:32:ea:5c:
d2:42:c4:61:14:13:a5:17:5e:97:ef:ec:a5:da:fd:80:2e:da:
b3:15:ca:fb:e3:e4:af:ad:9e:f7:14:7b:b5:5e:19:2a:ee:c6:
3e:85:7a:8f:03:84:0d:40:20:f8:dd:42:5f:17:74:bf:15:4d:
c7:44:ef:65:e6:8b:fb:4f:b1:32:f7:d6:b2:30:82:e8:83:35:
9e:89:ad:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:51:44 2025 by rpki-client