Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.mft
File: BsvHYUtJh4vzf94MGNfIUcLQfm8.mft (raw, json)
Hash identifier: 5odx4p8kV/FNAMo/xSeJf2DR5zFzcfRvV29Ex9l0Le0=
Subject key identifier: 1A:2C:9A:27:55:9C:38:7C:D9:E1:52:7B:D2:DB:52:5D:C3:DA:BE:F4
Authority key identifier: 06:CB:C7:61:4B:49:87:8B:F3:7F:DE:0C:18:D7:C8:51:C2:D0:7E:6F
Certificate issuer: /CN=06cbc7614b49878bf37fde0c18d7c851c2d07e6f
Certificate serial: 019A4DE1E4518218E36DC50966AFC7DAEA27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 08:00:40 +0000
Manifest this update: Tue 04 Nov 2025 08:00:40 +0000
Manifest next update: Wed 05 Nov 2025 08:00:40 +0000
Files and hashes: 1: 8AWj4g0mxpAeQ6fJYXYND52Gfz8.roa (hash: 2r0E8x2l8OQ6i+ALf5Xdf7skVCZem0LAwWfFUiiW7hQ=)
2: BsvHYUtJh4vzf94MGNfIUcLQfm8.crl (hash: njkuOO4cHW2ffnh7M/1rQdb3dyLXGeo3T4w49NOw1CY=)
3: z9CRwAoKZD-WKyzEgGIY-4pomCM.roa (hash: GIFVDo3J/VItfarKhSpqOK3aHLE2Bigm2lGriNtj4SI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:e4:51:82:18:e3:6d:c5:09:66:af:c7:da:ea:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06cbc7614b49878bf37fde0c18d7c851c2d07e6f
Validity
Not Before: Nov 4 08:00:40 2025 GMT
Not After : Nov 5 08:00:40 2025 GMT
Subject: CN=1a2c9a27559c387cd9e1527bd2db525dc3dabef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:00:e6:a1:ab:1f:ce:19:94:90:a5:2a:44:04:
ac:87:43:2b:26:44:4b:12:78:55:a7:8b:37:78:b5:
92:ee:fa:9f:11:cc:e3:c5:1d:f9:49:38:a0:ee:1d:
79:2d:b1:f2:08:26:38:5f:eb:a6:f1:53:c6:ad:ca:
4f:37:b5:75:ef:e5:3d:ab:cc:a4:6a:8f:62:a0:53:
54:9d:3b:30:64:d2:9b:74:4f:9a:3f:8f:ba:ff:bf:
25:f6:b8:c6:98:c0:fb:75:16:9a:38:5a:ee:3b:b8:
f4:94:6a:cf:b3:f0:53:2d:15:26:f0:85:98:ae:90:
bd:5d:9e:3e:07:01:5b:6c:5a:0f:ae:26:34:16:67:
1e:b2:93:27:5e:e0:90:4b:4f:10:c6:d4:e2:a0:8b:
ed:37:7b:b5:05:6e:81:5c:25:51:85:e6:76:81:8d:
00:df:c7:35:96:4c:10:80:c7:b9:31:f7:f3:31:6a:
37:49:0e:6f:ab:56:05:68:7d:b0:a8:fc:53:4a:86:
88:e2:dd:f2:7f:64:ba:db:34:02:eb:32:ba:c2:ad:
6e:f9:ad:3b:36:7f:92:d5:06:56:27:62:72:ae:5b:
53:79:f1:cb:e9:55:2c:8c:00:e7:bb:af:37:a4:dc:
6e:03:2b:09:56:34:15:6a:54:07:55:77:d2:bd:ac:
73:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2C:9A:27:55:9C:38:7C:D9:E1:52:7B:D2:DB:52:5D:C3:DA:BE:F4
X509v3 Authority Key Identifier:
keyid:06:CB:C7:61:4B:49:87:8B:F3:7F:DE:0C:18:D7:C8:51:C2:D0:7E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:12:2a:a2:18:ae:fc:fe:38:6b:1a:5a:cd:a7:5a:c1:32:69:
61:29:e6:f9:96:06:e1:37:b9:2f:d2:6c:f5:34:8a:e3:ae:65:
c0:62:69:81:1d:51:c2:1c:cb:3b:bc:a3:79:75:cc:2e:66:83:
40:82:4d:41:08:01:e6:be:b0:f5:1e:92:c9:bb:bb:54:29:a4:
97:46:a9:d7:45:67:35:22:28:d5:de:18:72:1b:a9:fc:50:20:
5e:08:f5:f3:fd:d4:07:d3:9a:4c:e7:ba:87:07:5a:d8:ab:32:
04:f9:00:01:f6:7d:2b:5a:04:c3:44:b8:23:21:ff:4d:f8:df:
bf:06:13:8e:7d:1e:54:ca:80:bb:c6:9a:28:9f:75:06:71:bd:
98:a3:0b:96:dd:c7:34:4b:52:c4:bc:02:74:ff:82:d0:a0:12:
d0:f9:c2:95:18:22:9d:1a:12:b0:41:a3:d6:bb:a8:da:90:6f:
bb:62:cc:81:2d:72:e6:17:2a:f7:8e:31:2d:86:1e:c1:b8:20:
51:ee:09:32:9c:3d:a5:0c:d6:7a:bc:44:f9:ef:e4:00:00:9d:
55:96:25:22:a2:3c:b2:0d:bb:c7:9a:64:19:40:a7:6e:1f:01:
65:79:0d:d0:37:ed:0b:17:44:2e:ae:f1:d0:b7:f0:49:fd:cd:
04:e3:16:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:11 2025 by rpki-client