Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
File: BcCcQdI4lrLVQoGCYj-I-mdubJA.mft (raw, json)
Hash identifier: z/9KhvKlLEpy23/i3aBegQFuo7MI8Jx2/AC3xruyXQU=
Subject key identifier: 59:69:6C:86:9C:81:49:28:60:73:33:07:69:3B:FF:6A:02:9B:61:FB
Authority key identifier: 05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90
Certificate issuer: /CN=05c09c41d23896b2d5428182623f88fa676e6c90
Certificate serial: 019A4DE15CE2CFD959257D9D3E359353DE28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 08:00:06 +0000
Manifest this update: Tue 04 Nov 2025 08:00:06 +0000
Manifest next update: Wed 05 Nov 2025 08:00:06 +0000
Files and hashes: 1: BcCcQdI4lrLVQoGCYj-I-mdubJA.crl (hash: 1Yvl3MIl/xFsrv93VzdtlWoF7eKuXbEHz7EHs8nNAQw=)
2: LjpB0wqPDlAY2LkZEeFhm2QXKMA.roa (hash: 90iV42vsD6bXusmrjQ9UcKOk5lPPv2pkCMxcdhSqD2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:5c:e2:cf:d9:59:25:7d:9d:3e:35:93:53:de:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05c09c41d23896b2d5428182623f88fa676e6c90
Validity
Not Before: Nov 4 08:00:06 2025 GMT
Not After : Nov 5 08:00:06 2025 GMT
Subject: CN=59696c869c81492860733307693bff6a029b61fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2c:c0:53:c9:88:00:eb:1f:2c:d8:2f:8e:1c:
c5:12:fc:c0:86:7f:03:15:3d:a1:81:69:a9:6e:03:
4c:4a:83:68:ea:48:59:10:0e:f7:c0:09:e6:98:2a:
b4:c6:c0:e9:74:22:49:95:91:f2:4e:27:b3:09:72:
2d:88:0b:39:3c:02:19:62:8c:c7:b0:bb:09:43:6c:
53:bb:1c:0a:cd:b4:88:ad:12:79:80:f6:6c:9b:4c:
8a:ea:61:c6:1d:56:1b:53:7c:81:34:73:8a:df:19:
aa:19:d8:46:69:04:98:78:87:11:7e:24:04:49:64:
7b:0e:7f:40:2a:16:91:95:84:01:14:1b:29:e2:69:
b1:84:03:c3:95:8d:5b:1c:25:a6:f1:c3:5a:e7:e5:
c4:6f:96:76:8f:f9:b3:d5:88:cd:9f:e8:d0:5c:70:
28:69:5c:68:45:1a:bd:71:fd:59:d9:ff:e4:06:eb:
4b:90:2b:87:db:91:9b:0a:d8:13:0b:b3:92:df:70:
a6:6a:5b:32:97:46:88:c1:3b:cd:37:29:bd:8b:80:
20:8c:f5:85:16:d8:da:4c:92:42:b3:10:02:fb:c5:
a7:c0:e6:a0:9c:53:53:c6:03:2f:e8:6b:3c:28:66:
11:2e:e4:75:db:cf:af:eb:4f:a6:3f:91:6b:cf:c8:
73:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:69:6C:86:9C:81:49:28:60:73:33:07:69:3B:FF:6A:02:9B:61:FB
X509v3 Authority Key Identifier:
keyid:05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:db:56:cd:fc:b3:f0:7f:ab:59:6e:58:85:b7:59:68:6a:f0:
ac:2f:30:b6:e9:1f:90:e1:28:b1:89:41:fb:63:af:91:d0:cc:
be:db:03:40:02:84:5e:32:96:03:9b:de:d7:59:f6:c3:c6:9f:
9b:a5:ac:28:fc:70:05:7a:ba:c6:5f:6e:1e:a6:cc:d9:72:a0:
64:ee:b9:00:93:cd:0e:d6:40:de:ad:98:07:27:68:b8:0a:f4:
84:bb:92:5c:79:ed:bd:54:44:4f:08:ef:2c:9a:16:b7:c9:1f:
dd:e1:29:7f:d5:c2:12:f5:03:75:5f:92:7e:1f:5a:e9:72:09:
5c:5b:49:49:ba:3b:00:1b:b5:2a:b0:ec:60:70:36:19:f6:f3:
82:91:91:26:4c:31:2f:b4:f7:3a:98:1e:15:2d:c4:1c:ec:07:
1c:e4:0b:77:a8:cc:52:1c:8f:1c:aa:0b:63:79:79:9d:91:3d:
c7:6f:3f:23:7c:2b:9d:10:e1:57:42:6b:c1:ac:b5:68:c5:e4:
a7:fa:24:29:e5:5e:7e:8b:70:50:8c:e2:05:78:42:9f:b4:78:
76:71:c0:65:1b:be:17:b7:73:df:fe:4a:b1:d1:88:a7:58:3d:
b0:ae:ad:c3:2f:f5:c0:be:8b:5f:fc:9c:62:89:06:77:ae:ae:
c3:03:a7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:37 2025 by rpki-client