Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
File: BCrDgmiWh7YPzlzp24h7IdaKarw.mft (raw, json)
Hash identifier: LEn5n5xctyomhWusVom7JWJMhYewABRA/jQwb/zWne8=
Subject key identifier: 08:5D:8C:42:53:C9:13:47:3F:A6:0B:A2:8C:FA:22:13:4A:9B:5C:89
Authority key identifier: 04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
Certificate issuer: /CN=042ac382689687b60fce5ce9db887b21d68a6abc
Certificate serial: 019A4E1889A913C7E5B5DED3DFC6C4086D41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 09:00:21 +0000
Manifest this update: Tue 04 Nov 2025 09:00:21 +0000
Manifest next update: Wed 05 Nov 2025 09:00:21 +0000
Files and hashes: 1: BCrDgmiWh7YPzlzp24h7IdaKarw.crl (hash: 9Y0SxrNjQWinFezVRwUg6Ir9mXljK3zSNoexBCrevgs=)
2: Lh8yvuYECQW6dDow2L76nBGsr6E.roa (hash: 0hiYjVR3RerVN9RXXudfA5pr9cnXHHQqw5O/Jaf9Snc=)
3: vtX7rusa6fZMmF3lc_ZvTTSyZII.roa (hash: /Q3goqDnJ6EwR3K+qh2LYwfBLshEeT0YC75y12sQLG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:89:a9:13:c7:e5:b5:de:d3:df:c6:c4:08:6d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=042ac382689687b60fce5ce9db887b21d68a6abc
Validity
Not Before: Nov 4 09:00:21 2025 GMT
Not After : Nov 5 09:00:21 2025 GMT
Subject: CN=085d8c4253c913473fa60ba28cfa22134a9b5c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:cd:7d:ad:a3:45:6c:58:34:b4:2f:d5:76:88:
7b:02:65:53:4a:f4:84:11:5c:36:3d:c7:5d:23:18:
7e:49:e0:fc:5b:29:53:cf:49:ef:20:d2:74:78:cb:
29:a5:c4:b0:93:b5:3d:7d:2a:e7:88:43:10:90:9f:
de:e8:21:7d:79:13:dd:59:71:39:37:c2:a1:c3:2a:
cf:26:93:c5:7b:4b:92:ad:76:c3:82:6c:8e:b3:29:
6d:63:ee:e8:94:24:90:a8:a6:1e:8e:dd:f2:7d:38:
d6:04:4c:78:8c:f1:33:f5:03:bb:46:7c:0e:eb:39:
ac:fd:a4:2c:29:65:67:e0:12:85:78:a5:59:f8:3a:
7b:04:92:1a:77:67:a8:8f:8e:ee:c6:00:00:aa:da:
f9:30:c6:b3:24:5c:55:e8:0a:5b:9f:d6:56:c1:cc:
ea:b0:58:ee:df:ec:b7:1e:6d:5f:4a:98:c0:b8:45:
17:6b:59:04:d4:9e:c1:28:20:e7:61:5e:92:91:77:
51:5d:36:c6:b4:de:db:a3:26:31:0c:8b:bb:d1:bc:
3a:60:64:53:e7:cd:cf:81:6f:7b:95:f2:c0:f4:cf:
61:4b:4c:cf:0a:bc:f6:e1:b6:35:fa:5f:08:b5:f9:
7c:53:b1:06:48:29:1c:56:bd:4c:d9:f7:af:c6:6a:
08:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5D:8C:42:53:C9:13:47:3F:A6:0B:A2:8C:FA:22:13:4A:9B:5C:89
X509v3 Authority Key Identifier:
keyid:04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:7a:7b:0c:e2:c0:4f:15:4c:27:d9:12:88:6e:48:3b:67:9e:
9c:f4:c3:24:0d:03:a7:96:38:9f:db:ff:63:52:69:b1:8a:df:
e2:1d:72:25:a7:86:45:97:2e:93:0f:b1:38:54:c3:b8:c3:8d:
b6:b6:89:dd:2d:aa:6b:3d:f1:67:6e:ae:43:92:89:54:f4:bb:
59:0a:1b:f5:45:a9:aa:e3:ff:cb:02:51:00:4a:57:e0:69:38:
71:cc:93:19:04:6b:76:6e:57:00:fe:c6:89:08:1b:a9:6d:9d:
be:7d:28:8a:7b:0e:6d:ba:64:ff:f7:91:b1:d5:46:f8:25:40:
cf:fa:d8:58:cc:37:66:81:62:50:0b:df:bb:9e:1b:61:d7:e4:
fe:99:92:84:2c:59:ae:76:5d:97:84:db:60:25:d7:71:81:cc:
3d:b7:e9:54:4d:1b:41:be:d7:8c:a3:6c:f3:06:7a:53:79:90:
27:1b:51:98:a2:1d:1e:26:4e:84:d8:9a:06:18:51:97:93:bf:
8f:2e:19:a1:1d:87:0a:e1:06:e6:ae:61:e8:f9:15:d9:ec:33:
61:98:dc:46:93:1f:54:70:ec:14:4d:3c:29:65:f3:74:b4:f5:
08:2f:b1:6a:49:fe:c3:ff:ff:20:fb:0d:50:1f:3b:2c:1f:ca:
55:53:8b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:41 2025 by rpki-client