Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
File: BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft (raw, json)
Hash identifier: vwpPLU/jQv/r82l3d0EL0OfBtDUWMvDVqrH2X+EcOQM=
Subject key identifier: 41:5F:A3:45:B5:F9:72:35:9E:58:D6:E0:2D:26:13:4E:66:89:A2:CE
Authority key identifier: 05:F2:21:F5:F0:4C:F9:D9:6D:DE:A4:42:51:B2:B8:23:F7:11:46:63
Certificate issuer: /CN=05f221f5f04cf9d96ddea44251b2b823f7114663
Certificate serial: 019A4F61F066B5E7E27250AAD0390413D34D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
Manifest number: 042E
Signing time: Tue 04 Nov 2025 15:00:09 +0000
Manifest this update: Tue 04 Nov 2025 15:00:09 +0000
Manifest next update: Wed 05 Nov 2025 15:00:09 +0000
Files and hashes: 1: BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl (hash: J3cSHl4RhLWDEdz6GQaH48St7K6DL0K57FqK4esmkP0=)
2: xRcmRRI7cJbjjDDpwXYPAzS-KSc.roa (hash: +JILVppUk45vww/N3lSTziP5G1U9pzpXHROPOpD0HAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:f0:66:b5:e7:e2:72:50:aa:d0:39:04:13:d3:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f221f5f04cf9d96ddea44251b2b823f7114663
Validity
Not Before: Nov 4 15:00:09 2025 GMT
Not After : Nov 5 15:00:09 2025 GMT
Subject: CN=415fa345b5f972359e58d6e02d26134e6689a2ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ab:f2:da:42:86:22:8b:d6:d0:36:f0:e7:c5:
98:cb:b6:22:3f:01:3b:14:42:12:ea:1e:c9:a7:07:
5d:83:9b:1c:61:b8:19:98:a6:73:b6:bd:85:47:48:
66:17:f3:46:16:59:ab:7e:33:25:50:a5:c4:d3:dc:
27:b7:1d:c1:82:b3:61:3e:5b:eb:a0:08:fe:00:05:
a8:0f:66:3d:bb:82:78:76:de:da:67:d6:aa:f8:5d:
36:00:3b:f1:d4:11:2e:32:2a:21:4a:80:a3:8a:74:
d9:e4:c1:e6:48:47:f5:b3:99:79:1a:d2:23:32:6b:
00:3b:79:4f:c2:85:44:0e:f6:b8:e4:13:a5:9e:1c:
2a:62:5d:94:eb:24:63:19:c0:a4:a2:15:9c:f6:35:
26:e5:80:ea:a7:bb:a2:35:ec:23:e2:ab:b2:39:74:
7d:98:b9:a9:b5:39:c9:6b:49:79:b7:65:40:f7:6b:
8e:f9:dd:aa:0d:4e:fe:5e:52:12:13:ee:3b:28:fe:
8e:71:a2:61:70:99:9b:ba:0b:8d:e1:ac:42:12:29:
d1:3f:69:f3:36:ac:48:02:1c:74:96:d5:bd:c9:4d:
b6:d5:7f:e7:ea:b7:82:d8:86:29:a2:77:a9:d9:5e:
21:e3:2e:6f:64:16:c1:1c:8a:8a:1b:51:5f:95:e8:
8a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5F:A3:45:B5:F9:72:35:9E:58:D6:E0:2D:26:13:4E:66:89:A2:CE
X509v3 Authority Key Identifier:
keyid:05:F2:21:F5:F0:4C:F9:D9:6D:DE:A4:42:51:B2:B8:23:F7:11:46:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:d2:45:1e:7b:19:78:02:97:11:ea:2a:91:97:17:7e:57:fb:
b7:1e:21:8e:eb:aa:c6:e6:30:52:39:31:1a:cd:a5:7a:57:58:
af:af:59:d5:61:a6:85:12:1f:53:49:8a:48:47:bd:c9:90:f1:
e3:87:a5:02:14:cc:02:8f:2e:74:57:68:a5:ef:aa:f6:e5:9d:
69:a5:69:4f:41:44:03:e3:dc:a3:5d:de:99:e9:79:ac:1b:02:
c5:79:de:09:20:97:e3:40:ab:5a:b6:25:46:b9:6d:7b:86:f8:
09:10:c1:66:60:ad:76:57:df:2c:23:9b:2b:36:0d:00:45:59:
05:ed:d8:2f:8d:52:e2:fe:0d:e6:61:fd:60:58:9e:6a:10:6e:
17:33:2d:0a:9e:c1:70:a3:e4:b3:cc:79:37:7e:fb:92:84:ea:
49:b4:3b:da:5e:bf:17:39:a4:d8:a3:fd:45:d7:dc:c8:f2:7c:
77:7a:98:e7:7a:d4:2b:e5:c9:90:1f:90:64:0e:3a:2b:ce:59:
ff:62:5e:55:4e:31:ee:29:da:e0:f0:51:2c:4f:06:71:f8:f4:
5c:76:ca:60:c8:9d:4a:42:a0:4f:47:fe:67:c5:20:20:21:3f:
60:a8:e2:7b:93:61:56:a4:da:e8:46:85:3c:4b:6c:32:59:6f:
cd:89:a9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:54 2025 by rpki-client