Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
File: BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft (raw, json)
Hash identifier: ykgXJUfhaXGq5itfOSEXI8lrvai5/vFc+Et1WX/QzQI=
Subject key identifier: CF:D5:2E:7C:35:D6:7E:F1:B0:D6:55:13:99:36:9A:4F:82:F1:D1:01
Authority key identifier: 05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91
Certificate issuer: /CN=050e3b7dfbd59910fe527cc7e29af64d53806c91
Certificate serial: 019A53085F830A463E71F8460C170BB2D4A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 08:00:48 +0000
Manifest this update: Wed 05 Nov 2025 08:00:48 +0000
Manifest next update: Thu 06 Nov 2025 08:00:48 +0000
Files and hashes: 1: BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl (hash: lt96FwIS4D2HX8IlCLGIsBGo8SymU1orALvUAgYwndM=)
2: IMkMxuP_HIe-8yHaxaZmmkfgrkU.roa (hash: VP/3gFLV/p+/OXdm2saWsfz+k4M/NDwKldgBYB4HtdM=)
3: gePsgMm1SXrgosAl9EBGRbblOJY.roa (hash: oh2vSEtXqPjZczOQ5pTX784c3RYOTBDe5sYQaczr//U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:5f:83:0a:46:3e:71:f8:46:0c:17:0b:b2:d4:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050e3b7dfbd59910fe527cc7e29af64d53806c91
Validity
Not Before: Nov 5 08:00:48 2025 GMT
Not After : Nov 6 08:00:48 2025 GMT
Subject: CN=cfd52e7c35d67ef1b0d6551399369a4f82f1d101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6c:cb:f3:49:bf:29:08:54:91:70:47:ef:28:
d5:00:ff:74:24:61:db:bb:d5:34:49:c1:ca:a3:ec:
ff:55:85:f4:0f:0a:a5:94:d0:40:62:79:59:bc:45:
67:a8:53:3b:bc:1e:f3:4b:83:ab:a0:75:c2:30:6c:
ba:95:58:e9:8a:0f:48:2b:91:ed:f5:e9:8a:21:9e:
b6:43:cd:31:1f:a6:fd:72:67:58:76:36:58:25:4f:
2a:ac:af:5a:84:2f:eb:e2:af:ed:30:02:0f:ee:92:
9d:c8:82:12:dc:97:89:12:ae:30:81:d8:cc:2d:52:
e0:d7:12:96:b6:dc:6f:97:79:ba:43:a8:be:ca:12:
c0:e8:ba:15:32:5a:b1:9a:bc:84:95:a0:e4:6d:a5:
42:1c:3c:06:0c:d5:53:cc:88:0e:cf:f7:ba:e7:cc:
2d:e4:36:be:1d:c0:f2:c7:4e:20:e8:b4:c5:d8:14:
66:5c:5e:2b:a5:40:68:f6:39:56:f2:d4:46:5f:17:
e6:9d:47:8f:ae:d8:50:6c:54:77:f2:f4:04:f5:6c:
b1:8e:9e:09:c4:f7:36:7b:fa:f9:1c:f6:5a:3a:9d:
6c:eb:6c:64:77:56:da:d8:c9:79:62:16:9f:49:f0:
37:df:cc:9c:22:0a:64:d5:97:ed:8a:55:d2:8d:8c:
0d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D5:2E:7C:35:D6:7E:F1:B0:D6:55:13:99:36:9A:4F:82:F1:D1:01
X509v3 Authority Key Identifier:
keyid:05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:6d:5a:4b:a7:82:94:7f:6d:16:2a:5f:ef:18:55:76:89:9a:
d7:e4:ec:6e:07:35:a9:51:d8:c3:19:3b:11:f5:f6:59:68:f4:
6f:9e:67:46:b4:bb:c8:d7:3d:b6:8c:e2:82:ea:fe:b5:1f:a9:
e0:83:f5:41:f9:ff:9d:1e:0e:e1:41:e7:8e:61:f1:96:18:d9:
39:c9:9b:2b:03:a6:65:46:45:82:60:78:7b:fe:2d:46:c1:e3:
8b:0e:77:9b:44:d5:cd:50:53:c9:10:33:55:9a:ca:72:74:f6:
e6:85:aa:55:f7:ad:83:7d:07:dd:3c:f4:dd:31:fe:60:c8:e2:
e5:c9:16:af:4e:f8:51:d4:e9:72:51:9a:26:8f:03:86:9f:2f:
a7:1d:1d:b9:94:4b:fe:e3:06:7a:d3:82:78:8a:97:ad:b1:fd:
d4:aa:3e:dd:d4:99:c2:18:da:b0:7e:3f:1f:2d:4a:8a:44:1d:
ff:27:3b:e5:21:aa:5e:3e:9d:b9:b9:b4:1b:c4:d6:59:37:61:
97:1b:17:f2:39:b0:ca:c0:60:aa:fd:2e:77:56:49:2a:07:8c:
d4:34:21:e2:0d:09:da:93:07:8a:24:45:4f:33:a5:6c:3d:ae:
6b:c3:c5:3d:93:db:b3:7c:37:d1:1b:f7:34:50:22:8c:af:00:
28:3b:80:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:36:09 2025 by rpki-client