Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
File: bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft (raw, json)
Hash identifier: V/G/0nDIpop+iGM6Cao0HAMMNJLd0y2ibJTXgPVzICA=
Subject key identifier: C9:FC:94:DA:78:22:F0:7C:94:D5:0B:5D:56:35:28:D7:B0:6C:B6:C2
Authority key identifier: 6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74
Certificate issuer: /CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
Certificate serial: 019A51F5A26472A2F4ADC4FDA9FF56A6622D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 03:00:43 +0000
Manifest this update: Wed 05 Nov 2025 03:00:43 +0000
Manifest next update: Thu 06 Nov 2025 03:00:43 +0000
Files and hashes: 1: 49pxkgi7itIv6ImUGF743Hog5ps.roa (hash: hT65WPD3rxjKAyyXgkyC1Te/5QcBwu6G6s4Re/Tw2UE=)
2: Jyvq7rcCs6Qlew8Ff4iEMvVHpXo.roa (hash: cAmAOJsrcg5h/lolypAUDsWdoBjnFRvupRZVbDEj0XI=)
3: bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl (hash: A4+Ul24XZuf2MzutZHlivL7VFn6Fcc6uwsUN/S7w76U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:a2:64:72:a2:f4:ad:c4:fd:a9:ff:56:a6:62:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
Validity
Not Before: Nov 5 03:00:43 2025 GMT
Not After : Nov 6 03:00:43 2025 GMT
Subject: CN=c9fc94da7822f07c94d50b5d563528d7b06cb6c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b5:3f:d2:fb:61:b4:0f:8d:d6:ec:12:8d:2d:
c7:56:8e:05:c2:ce:11:d6:9b:e7:93:e9:ac:e0:42:
e1:fb:be:2e:a2:4b:cf:14:c3:27:d2:94:7e:f8:6f:
d1:20:f7:98:23:1b:58:af:c4:50:89:b8:d5:74:1d:
40:af:7a:bc:6f:3c:7c:34:f3:ce:52:76:b6:7d:c1:
7f:2a:34:12:80:42:51:94:6d:23:84:f4:88:9b:60:
24:43:75:4d:9a:dc:4d:ff:a6:98:93:b2:ea:73:cc:
13:65:e1:c2:01:75:5e:1a:f6:99:bc:4b:10:30:6b:
71:f4:0e:36:cb:47:6c:64:34:b6:4f:3d:09:09:49:
c0:51:a1:0e:2c:0a:53:be:ee:0b:4b:04:9e:ec:0b:
3d:70:53:ae:19:f2:82:35:e2:08:2d:55:03:aa:b3:
05:86:fc:7d:a4:20:99:b6:77:0e:14:21:07:88:94:
a6:ce:a1:6e:69:a6:1f:ef:fd:35:f6:a2:36:1e:d9:
40:ba:6b:09:3d:f2:25:50:22:2c:29:7f:ca:b9:5c:
a9:d7:7a:63:84:09:c1:85:96:1b:3b:64:85:98:8f:
28:51:6c:2e:d1:cb:43:92:62:e6:87:86:7d:22:98:
6c:61:e3:a2:e5:a7:c5:dc:7a:19:14:dc:e5:f4:22:
ff:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:FC:94:DA:78:22:F0:7C:94:D5:0B:5D:56:35:28:D7:B0:6C:B6:C2
X509v3 Authority Key Identifier:
keyid:6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:99:e2:48:f1:9c:82:6b:26:a4:20:45:dc:f5:e2:34:ff:07:
80:1e:2b:89:b7:58:8b:ef:5b:0c:aa:bc:ff:44:b1:a2:8a:88:
2a:49:24:2a:49:ec:a9:1b:91:e9:ff:9b:d5:b8:8b:55:3e:e3:
f4:a4:f2:28:22:f2:1f:f6:63:a3:da:86:99:08:0b:34:c2:94:
67:83:4e:3f:fc:06:5d:21:f1:06:88:0a:75:6c:0b:4a:2a:d9:
7f:1b:05:dc:e0:60:7b:44:7c:38:a8:46:98:82:a2:df:10:a0:
32:c2:17:ac:5a:a8:a6:a4:56:43:93:8c:02:c1:88:a5:8e:cb:
8f:c3:12:19:02:67:4b:09:53:38:14:12:c1:29:6c:97:13:6c:
e8:17:78:b6:dc:f2:e7:2b:d8:40:3f:29:ed:fa:90:aa:dd:80:
73:22:00:2a:a3:73:42:66:02:2d:ed:5d:80:c8:07:4a:ad:a9:
81:50:cf:ce:1e:02:59:5c:77:e4:e9:6d:e6:a2:68:92:91:f8:
66:3f:89:db:04:61:49:c9:18:ae:5f:4e:44:cc:4d:c5:1f:6a:
9d:ee:7e:0e:48:2f:24:8a:6f:ef:c9:00:62:2d:46:c0:5a:bd:
18:c7:f0:36:9e:1e:13:9b:6f:3d:b0:d0:20:89:5e:4e:b3:05:
33:54:fb:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:09:10 2025 by rpki-client