Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft
File: _BP3-iN_idARIzuscyjCIZun1iw.mft (raw, json)
Hash identifier: qkrTDAxPcqfTLQDJKpYaF/T1djYxFeEGHLywKe1920o=
Subject key identifier: CD:A4:4C:EC:8D:9C:82:67:77:C2:B4:56:35:18:1B:EB:5F:E5:25:EF
Authority key identifier: FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C
Certificate issuer: /CN=fc13f7fa237f89d011233bac7328c2219ba7d62c
Certificate serial: 019A51F5D71AE1416B33E75F88F4183B113B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft
Manifest number: 1717
Signing time: Wed 05 Nov 2025 03:00:57 +0000
Manifest this update: Wed 05 Nov 2025 03:00:57 +0000
Manifest next update: Thu 06 Nov 2025 03:00:57 +0000
Files and hashes: 1: 4DlDfpniYRoqx5RnbBQ2QyX4S0s.roa (hash: 6W2AtaQBI78k64Wvc+o0EJDF11ZLR+JxMn3tTY6KLb4=)
2: GP2Q_Wo-_yK4eP2QDnc65CMZm9M.roa (hash: 0BR2eQuYyvuB8xq6ftmI/kAgu9noQmyJZpAp5YGagjg=)
3: _BP3-iN_idARIzuscyjCIZun1iw.crl (hash: Ko/j9z8zMSf9hjl/kikH7LNsiZFEDiZQHOIeWdnHuus=)
4: jrhngJH5WqcrHBQKWDaE0mXlivg.roa (hash: b0vzPK3TykyX3k8EOTeZC+7bd64uJKZrG9G6u+Jqaek=)
5: mBNBPvpQ0ZyKyklOFfh-zOZGjfY.roa (hash: /KSNQLTNa7loW014tE7eo3A+ZK7sfCtmbcB6pN7dyog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:d7:1a:e1:41:6b:33:e7:5f:88:f4:18:3b:11:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc13f7fa237f89d011233bac7328c2219ba7d62c
Validity
Not Before: Nov 5 03:00:57 2025 GMT
Not After : Nov 6 03:00:57 2025 GMT
Subject: CN=cda44cec8d9c826777c2b45635181beb5fe525ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2a:97:69:82:1f:21:a9:f9:55:84:2f:9e:ac:
05:7e:6a:c4:31:60:27:a0:b8:5e:0f:6c:c1:8a:ee:
de:25:a3:8f:59:20:5c:f6:b2:8e:21:b9:34:7f:cf:
b4:0b:30:1b:18:72:c5:5b:70:03:34:3d:9d:19:c2:
c3:c6:b3:c0:72:85:ae:cf:79:ab:53:d0:23:63:76:
d9:8f:54:32:02:c6:dd:c6:9f:a6:b1:a0:f6:13:5e:
f4:d6:d5:4c:20:ef:b5:a6:b3:9f:a0:75:ed:9d:78:
03:4c:49:45:ec:93:1e:0a:60:e6:f8:09:7a:4f:55:
eb:14:87:97:5b:96:13:b3:40:c1:d8:cc:bc:ca:f0:
49:02:a4:f5:d6:d0:40:82:ac:4d:d4:4c:cd:e3:41:
4d:87:4f:71:29:f3:53:f1:f5:74:fe:f1:64:ef:35:
3f:a2:dd:ae:d8:2a:32:f5:f9:6d:2f:03:1e:d5:34:
40:01:27:39:ea:37:4c:c7:9f:7e:5a:b4:0a:83:09:
0a:6c:b3:9c:63:9c:46:52:bf:b4:5e:b4:fe:74:40:
62:dd:a0:a7:8d:ed:78:dc:6d:d9:75:66:e9:10:76:
3a:5a:b3:66:34:ee:bc:06:4e:25:2b:ba:38:b9:ab:
06:d2:12:c8:38:15:84:26:61:1c:f7:55:73:18:b7:
74:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A4:4C:EC:8D:9C:82:67:77:C2:B4:56:35:18:1B:EB:5F:E5:25:EF
X509v3 Authority Key Identifier:
keyid:FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e3:1d:51:94:41:1e:41:d7:81:01:3d:83:d1:cd:b7:8a:e0:
ef:a4:f3:17:31:86:c0:0e:4c:ca:b4:fc:93:ed:a5:f2:c5:e6:
d2:f8:ca:80:92:0f:75:42:33:5c:f0:1f:57:22:0a:2d:81:db:
9e:1b:9f:2c:86:41:92:e3:f3:09:77:48:06:d1:30:c6:2c:df:
8a:66:b6:c6:92:2a:a9:15:9a:f5:03:27:34:4f:1b:d4:de:bd:
c0:3a:24:9d:0d:f2:86:53:9a:85:10:4c:41:ba:e0:4f:8b:ea:
57:a5:69:07:49:b4:94:35:a0:da:12:bf:36:11:48:eb:46:64:
aa:13:12:e3:99:5e:f5:9a:31:7a:09:1f:52:99:cf:89:f2:ca:
75:76:2b:3a:20:19:02:9b:40:c5:22:ad:cf:76:20:b0:cc:5f:
03:e6:0a:1b:75:e0:64:da:8d:51:38:ce:d2:ea:4e:a0:79:f0:
6f:e7:5f:28:92:bc:0e:1d:85:40:36:e7:54:da:e6:66:4a:69:
bf:66:9d:57:7c:01:38:cc:36:d4:f0:92:fa:1e:5d:50:3a:50:
84:4c:95:2b:c0:00:44:01:35:81:ca:83:b7:b5:59:37:5d:35:
bf:2f:1b:fd:dc:61:fd:69:6d:fa:87:f8:a1:ac:eb:b4:38:2f:
a3:ce:1e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:06:50 2025 by rpki-client