Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
File: BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft (raw, json)
Hash identifier: bxsgDl2RhDXFUWzrG3s+NfGQdKjrYlDvM3Ow8qksUTE=
Subject key identifier: 1E:27:98:33:65:FA:03:A8:AD:ED:1A:45:9C:4D:A0:9A:76:55:A0:BC
Authority key identifier: 05:74:07:D2:E7:B2:FF:4B:CE:E6:EA:10:D4:08:52:EC:DC:BC:69:B8
Certificate issuer: /CN=057407d2e7b2ff4bcee6ea10d40852ecdcbc69b8
Certificate serial: 019A4DE1FF7D2E1F074CCAE28F4DE9052CBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 08:00:47 +0000
Manifest this update: Tue 04 Nov 2025 08:00:47 +0000
Manifest next update: Wed 05 Nov 2025 08:00:47 +0000
Files and hashes: 1: BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl (hash: KyINdQkbjUuDG+JI0bGCmj8XORgyrDVos4XV8rwWjx8=)
2: V1jBLHDx-YMbIoIxpTiAmkmziIw.roa (hash: SGHuNvgj4twRIgtAoRf+w31bdCCwfTwFv+zuwmyR4Do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:ff:7d:2e:1f:07:4c:ca:e2:8f:4d:e9:05:2c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=057407d2e7b2ff4bcee6ea10d40852ecdcbc69b8
Validity
Not Before: Nov 4 08:00:47 2025 GMT
Not After : Nov 5 08:00:47 2025 GMT
Subject: CN=1e27983365fa03a8aded1a459c4da09a7655a0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ff:ad:67:18:af:ea:a5:af:00:a6:d5:5c:f0:
c0:63:00:40:f1:61:b0:b0:16:6f:4c:1e:e3:0f:d8:
8e:da:8b:4a:af:89:1e:ea:e7:82:32:9a:30:27:c0:
f9:99:c2:db:c8:dd:ee:79:a9:cb:7f:2b:8f:08:39:
ad:b5:de:21:49:a2:62:3c:92:ae:29:c3:62:4c:7b:
77:f8:44:a3:d3:5f:9f:fa:e4:cf:2a:3e:f5:6b:09:
7b:e4:c9:78:c7:4f:c5:f3:13:85:a3:d3:6f:36:c8:
56:af:89:a6:0b:44:ea:39:69:cb:37:39:3e:bc:75:
d9:7d:0c:85:de:4c:44:7c:8a:5d:b6:06:ed:fe:16:
6a:85:33:68:71:52:d7:fc:75:83:b5:15:24:ea:c8:
20:ac:dc:78:26:b7:6e:a7:ea:3d:c5:54:87:56:b4:
0f:6b:5d:00:3b:61:cb:ae:6b:c6:e8:e3:25:df:36:
fc:db:56:69:3d:af:20:bf:a1:93:34:c4:9d:a6:3c:
9e:77:b0:a3:4d:29:a1:d2:87:57:5f:ba:ec:d9:0c:
a5:4a:49:e0:2e:70:97:b8:d0:e4:05:be:0b:da:37:
55:58:60:11:31:e2:2e:ac:70:5b:90:d7:0d:a7:cc:
f0:a2:7a:33:7a:b1:1e:af:d5:89:af:49:50:82:70:
c8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:27:98:33:65:FA:03:A8:AD:ED:1A:45:9C:4D:A0:9A:76:55:A0:BC
X509v3 Authority Key Identifier:
keyid:05:74:07:D2:E7:B2:FF:4B:CE:E6:EA:10:D4:08:52:EC:DC:BC:69:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:90:ae:16:ed:1c:1e:2e:11:6a:5c:5b:1f:1a:36:ad:de:cf:
72:3e:35:c7:0a:b6:a5:47:13:2d:7d:55:b5:26:e5:a5:4d:26:
ed:38:5b:d7:9f:1f:16:d4:a7:02:6d:ef:f3:1a:2d:d7:a0:eb:
91:b8:83:dc:1d:8c:d9:c7:6b:64:88:af:d4:fd:52:18:f0:2b:
09:44:91:52:fb:14:92:09:29:6a:66:56:24:d6:75:dc:06:ee:
12:dd:82:26:f8:8c:dd:a9:51:d1:10:8b:93:2b:65:7d:9c:bd:
01:fa:9f:b1:72:17:41:b7:34:6f:3e:6b:1b:61:50:ea:08:e4:
37:8b:23:62:08:cc:60:d5:69:f6:65:a7:06:86:40:b9:8a:8e:
10:f1:28:67:b4:a8:93:c8:3d:c9:1b:72:94:21:2c:65:aa:9c:
aa:a2:ac:77:db:f4:5a:31:44:c4:ed:cc:ff:27:58:f5:e6:93:
72:c8:24:c8:01:80:54:56:66:79:50:44:e3:41:fe:ee:2f:ce:
e4:5d:bf:0a:af:77:5c:2c:c4:1c:57:d5:18:70:57:88:8d:41:
24:1a:fe:5b:f1:ab:05:57:4c:83:a0:49:f4:b9:89:0d:95:ec:
bd:2f:b2:07:9d:d8:17:da:3e:d7:2e:1e:46:a2:cd:b1:e5:17:
61:6a:72:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:16:50 2025 by rpki-client