Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.mft
File: bvqMD-YuxUrMveNcYL2K1LkBT_c.mft (raw, json)
Hash identifier: J6WmbfAkQ3E7nEHWWOwdvCz8EEWlx+L4+Xp27HIEAHs=
Subject key identifier: D9:F5:3D:36:4D:AC:CB:82:07:20:7E:5D:7D:24:2C:74:0B:2B:0F:01
Authority key identifier: 6E:FA:8C:0F:E6:2E:C5:4A:CC:BD:E3:5C:60:BD:8A:D4:B9:01:4F:F7
Certificate issuer: /CN=6efa8c0fe62ec54accbde35c60bd8ad4b9014ff7
Certificate serial: 019A4EF41AFAA8F231FD95B94C6A1D6AA88C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.mft
Manifest number: 15AA
Signing time: Tue 04 Nov 2025 13:00:11 +0000
Manifest this update: Tue 04 Nov 2025 13:00:11 +0000
Manifest next update: Wed 05 Nov 2025 13:00:11 +0000
Files and hashes: 1: bvqMD-YuxUrMveNcYL2K1LkBT_c.crl (hash: NDKMFYVvtqtEQtxyUvL3j2WK4vL56/x7iqYvL6Oxnzw=)
2: uBSOOeaOOAPA_AKPY15x-quda9A.roa (hash: Dt69/ItO+3jelx7+KElGDpHbyUEQGmbIcaxvgmv3LtA=)
3: xV8gMpC2ZlpVgs9mctOG60i8N9M.roa (hash: 4+rPE2A2/Gm76JYESuCkyPm8V8bnBXJ1IGMnwsuV4qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:1a:fa:a8:f2:31:fd:95:b9:4c:6a:1d:6a:a8:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6efa8c0fe62ec54accbde35c60bd8ad4b9014ff7
Validity
Not Before: Nov 4 13:00:11 2025 GMT
Not After : Nov 5 13:00:11 2025 GMT
Subject: CN=d9f53d364daccb8207207e5d7d242c740b2b0f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7b:40:1f:c8:f8:46:02:89:01:d7:14:d6:44:
f5:83:c3:f7:7d:d0:87:1d:b2:40:99:20:84:1a:eb:
ee:a8:19:47:ab:15:1f:5e:a6:89:df:19:2c:e3:6b:
b9:95:20:22:ad:d7:5e:6f:21:84:2c:2a:53:37:42:
cc:76:4b:ec:40:28:62:1e:9e:11:e3:31:db:fd:94:
86:75:48:18:5c:85:26:e9:9c:07:fb:93:1f:28:82:
2c:21:0f:61:af:2a:3a:ca:41:cd:9d:ba:21:17:15:
d0:a7:95:d7:c6:07:9d:2b:bc:20:d9:c7:8e:4c:56:
1a:44:5c:d8:48:6b:26:5f:0a:06:0c:48:4a:1c:c9:
99:d1:51:b9:f5:8c:94:c3:a4:96:dd:e7:5e:e0:bc:
64:30:95:87:60:60:cf:0e:13:86:66:5d:8d:3e:3d:
5c:22:99:63:28:42:d1:9c:0e:d1:68:c7:ce:34:a2:
d4:35:a3:99:16:d4:af:72:c8:21:01:06:71:b7:3d:
9d:b4:1d:d2:13:67:9b:03:dc:84:93:07:fe:9f:d1:
2c:31:92:4f:25:8f:d5:a1:9a:64:f9:3e:74:e0:0b:
33:0c:e1:d3:b9:47:5a:ca:ae:fc:18:49:c6:b6:a1:
1d:8c:64:6b:d1:4e:d8:84:71:76:2a:65:2a:66:74:
93:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F5:3D:36:4D:AC:CB:82:07:20:7E:5D:7D:24:2C:74:0B:2B:0F:01
X509v3 Authority Key Identifier:
keyid:6E:FA:8C:0F:E6:2E:C5:4A:CC:BD:E3:5C:60:BD:8A:D4:B9:01:4F:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:91:4e:a5:30:42:6e:29:3d:e9:6d:d4:83:e4:d9:95:93:fc:
ed:6f:cc:4b:79:f8:4c:0b:b5:12:3e:6d:08:b7:a3:54:66:da:
03:5d:b7:62:3f:62:68:36:4a:78:6a:db:ae:3f:26:41:55:45:
8b:fb:60:e6:f2:da:54:46:ee:52:dd:a0:58:3c:4d:1f:e9:03:
0c:67:23:a9:4b:79:34:bb:fb:9f:8a:74:49:34:02:84:57:a4:
cf:08:45:cf:c3:57:83:ea:b7:f1:37:b9:1d:f7:0b:a4:17:43:
96:47:4e:9b:a9:8f:68:cd:2e:8f:77:e8:60:26:bb:01:53:bc:
55:1e:a7:16:6d:2f:2d:5b:67:4b:ab:e7:4e:cf:46:1c:2c:e5:
ae:3c:a7:c9:80:7a:39:11:5b:a5:86:87:30:d7:3f:cd:bc:26:
9d:21:0d:b6:e3:f2:74:6a:cd:9a:e7:36:45:99:ea:de:7b:cf:
3f:6e:4d:a4:da:80:e3:a2:27:64:3c:bc:95:ef:60:0e:7a:a5:
60:d6:09:6c:65:5e:85:96:87:ef:3e:0b:27:92:93:71:91:8f:
2a:01:76:de:61:4d:67:a7:10:bb:ac:94:d0:ef:e8:5a:0c:68:
ef:fa:3b:6a:9e:f5:e5:1c:30:ce:1a:e4:5e:03:ed:8f:bc:33:
69:d0:8d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:55:12 2025 by rpki-client