Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
File: BaCPua9NbK_M-uOyjsbtScQj78Y.mft (raw, json)
Hash identifier: MtcAfhOlWLCxG0VAkd4VE5QffrPfrXT3W/7+yLHGAxI=
Subject key identifier: 53:B7:B1:DC:BF:6B:78:B4:2B:76:18:35:34:BA:72:39:6F:02:47:4A
Authority key identifier: 05:A0:8F:B9:AF:4D:6C:AF:CC:FA:E3:B2:8E:C6:ED:49:C4:23:EF:C6
Certificate issuer: /CN=05a08fb9af4d6cafccfae3b28ec6ed49c423efc6
Certificate serial: 019A4E86BB3766289EE38CDC0638543CBDBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
Manifest number: 12BE
Signing time: Tue 04 Nov 2025 11:00:43 +0000
Manifest this update: Tue 04 Nov 2025 11:00:43 +0000
Manifest next update: Wed 05 Nov 2025 11:00:43 +0000
Files and hashes: 1: BaCPua9NbK_M-uOyjsbtScQj78Y.crl (hash: N78eDQL5BTZSVKLnUXCHCUJa2PlhSALEblCmP/4E2ho=)
2: SGQBvdPhJeyzXH46rCn1HprgoUQ.roa (hash: JigxCYquveWyuHmkXH4kT+LxBtbk4j6Ry0hBrLIoDFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:bb:37:66:28:9e:e3:8c:dc:06:38:54:3c:bd:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a08fb9af4d6cafccfae3b28ec6ed49c423efc6
Validity
Not Before: Nov 4 11:00:43 2025 GMT
Not After : Nov 5 11:00:43 2025 GMT
Subject: CN=53b7b1dcbf6b78b42b76183534ba72396f02474a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:74:60:cf:aa:04:8d:b3:53:32:fc:a4:1e:cb:
80:47:fd:f8:03:4a:60:38:b3:19:d5:ac:6b:5a:28:
f1:e8:0f:05:4f:b5:92:2f:65:bf:16:99:1d:0a:70:
36:bb:06:40:5e:7d:d0:31:d8:09:0b:61:61:f0:fc:
db:b9:d1:2f:af:1b:3e:58:cf:72:03:5c:27:cf:8a:
2f:0d:7e:f0:9b:0c:e0:22:cb:ff:10:8a:0d:2b:c4:
a8:33:bb:c0:3d:72:96:b5:24:5f:e3:59:94:67:39:
30:9a:49:3e:1f:db:80:fb:cc:61:86:a9:bd:74:c0:
19:9e:7d:a9:82:2b:3e:a6:0d:88:a2:8d:36:7b:66:
f9:95:08:56:65:81:87:9a:59:06:fa:22:af:3b:5a:
4d:35:f1:84:61:b0:35:55:99:ba:51:48:66:2e:6c:
27:2e:7e:c8:24:38:03:12:9a:cc:8e:d7:29:1e:f3:
f6:59:f3:a7:68:89:66:12:34:cc:a2:da:b1:ef:cf:
f1:dd:26:4b:ee:62:47:ab:f2:1f:d6:19:95:ac:ab:
6e:ca:67:a0:d0:30:a0:b3:0d:24:c8:6e:eb:21:71:
be:31:06:72:2a:4a:dd:43:49:0d:a7:49:b8:54:67:
55:52:42:53:4f:ab:5d:4b:6b:33:25:d6:91:14:50:
12:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B7:B1:DC:BF:6B:78:B4:2B:76:18:35:34:BA:72:39:6F:02:47:4A
X509v3 Authority Key Identifier:
keyid:05:A0:8F:B9:AF:4D:6C:AF:CC:FA:E3:B2:8E:C6:ED:49:C4:23:EF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e6:1f:12:a3:bc:d1:e2:b3:7f:96:ab:5e:5f:05:54:6b:57:
5f:47:94:72:55:9e:ee:98:c4:6d:45:c5:a8:04:3e:7e:0a:c0:
1f:f1:7b:3c:e8:7f:44:a4:4b:00:80:d6:7b:a0:f5:f3:02:4f:
e0:0a:dc:22:26:8e:28:8a:1f:47:5d:ac:90:af:ab:dc:18:56:
91:aa:b1:02:5d:11:72:de:f7:7f:28:91:7b:e3:64:81:53:1e:
c3:df:48:e1:25:f9:d5:2a:11:b9:f0:fa:36:e8:1d:62:d3:9b:
c8:05:ed:30:6f:86:1c:18:a7:60:ee:cd:d1:5a:69:de:d4:d0:
4c:e6:64:4f:b9:b0:99:c4:e5:04:c2:b6:82:41:3c:92:bc:18:
ac:6c:df:14:6a:80:9c:2f:fd:af:e2:16:78:33:7e:cc:d3:68:
b8:24:f7:d2:b2:b9:1b:a5:e8:af:c7:81:1b:b8:82:b8:d8:fe:
62:53:56:f7:11:ad:93:a4:38:0e:27:61:d4:aa:8f:63:27:3f:
0c:19:a5:0a:a4:7e:62:f3:56:c3:7d:82:ef:6a:8b:cd:59:12:
2c:62:82:e3:78:b5:40:98:cb:eb:75:a5:50:83:5f:f2:b4:b4:
ca:15:3b:d1:8c:9a:31:71:ad:7b:ab:e4:2a:0c:92:e2:be:ff:
52:31:7a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:08:01 2025 by rpki-client