Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
File: BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft (raw, json)
Hash identifier: mC8+048HO5EGJJKcRf02rpQkgXj2nEyJe0FTJnJ6ZAY=
Subject key identifier: 25:54:C9:53:EE:88:27:BF:9D:AC:4B:21:AD:5B:FA:6E:31:8F:6B:DE
Authority key identifier: 05:77:BB:93:24:FC:75:0A:53:E0:55:84:8E:F0:69:03:41:6C:3E:08
Certificate issuer: /CN=0577bb9324fc750a53e055848ef06903416c3e08
Certificate serial: 019A4EF48913503FBB2291B450646944CE1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
Manifest number: 1708
Signing time: Tue 04 Nov 2025 13:00:39 +0000
Manifest this update: Tue 04 Nov 2025 13:00:39 +0000
Manifest next update: Wed 05 Nov 2025 13:00:39 +0000
Files and hashes: 1: BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl (hash: jUQv5gF+Z2Ku62G+7Z6ntojmuX4geMp0fuUrnQ52EjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:89:13:50:3f:bb:22:91:b4:50:64:69:44:ce:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0577bb9324fc750a53e055848ef06903416c3e08
Validity
Not Before: Nov 4 13:00:39 2025 GMT
Not After : Nov 5 13:00:39 2025 GMT
Subject: CN=2554c953ee8827bf9dac4b21ad5bfa6e318f6bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c1:81:32:d3:a7:45:3f:73:e6:a6:75:3b:cb:
89:f5:ba:49:34:75:f9:8d:81:3c:31:9f:94:bb:eb:
03:d7:3a:ab:68:6a:91:ab:9a:df:a7:39:66:d3:c2:
72:d4:46:01:bb:eb:66:1f:22:c8:b8:b0:28:37:36:
ea:a0:ac:68:d5:03:4b:22:70:2c:0d:c2:84:37:2d:
02:a5:e2:98:b0:e0:f0:37:58:8f:b8:96:6e:77:8f:
bc:d4:7f:32:81:b9:38:61:c8:75:e1:b9:86:d2:2d:
8f:43:ad:38:af:c0:ea:c1:be:34:10:1c:17:b4:8e:
20:75:42:a3:77:fd:e6:cc:38:01:33:d4:07:48:19:
9a:f2:14:86:bd:ad:5e:3f:da:6f:52:2f:b9:3a:d1:
a9:6f:36:e8:01:34:26:44:50:c6:7c:1a:4e:c0:ea:
9d:d1:76:90:d8:46:10:b6:1a:4d:1a:bc:da:9d:09:
3f:a8:58:34:10:9b:d1:38:b0:b4:b0:5b:f1:b8:34:
d4:0d:fd:9d:6c:a2:0c:1a:d6:f8:92:21:ae:e9:cc:
6d:b0:bc:95:b4:80:ec:fa:9e:bc:62:08:ec:85:92:
e9:ee:9d:c2:61:bc:22:89:65:53:5b:1f:8b:3f:e0:
e6:31:50:30:db:16:a4:a9:95:05:53:9d:66:6e:eb:
6d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:54:C9:53:EE:88:27:BF:9D:AC:4B:21:AD:5B:FA:6E:31:8F:6B:DE
X509v3 Authority Key Identifier:
keyid:05:77:BB:93:24:FC:75:0A:53:E0:55:84:8E:F0:69:03:41:6C:3E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:34:ab:fb:20:5f:4e:6c:b6:3d:b6:ac:9b:d2:ab:a5:fe:43:
4b:b1:20:9a:58:13:fd:b6:ac:66:e5:7c:4f:33:c4:91:0e:92:
14:d1:59:af:be:10:08:6b:1f:87:4e:93:2c:3d:6f:2e:69:a8:
5d:e0:8e:b4:01:3f:b0:67:89:db:81:34:12:b5:54:c2:27:37:
e3:8d:ad:a8:db:a2:03:65:80:12:f6:69:e0:44:5e:60:b0:66:
87:da:f6:a9:38:e2:49:ec:8e:5d:bd:6e:eb:f9:df:31:43:0e:
ac:e5:39:2d:98:b0:3b:08:31:26:b9:71:ce:8f:bd:a9:2a:a7:
55:f2:f1:b0:68:b2:b1:53:00:9a:bb:6b:2e:1b:79:e5:1d:9a:
8a:d5:a9:54:af:6a:ee:f1:0d:21:94:e5:ff:e3:94:97:d9:4f:
9a:84:58:c4:ac:1c:e4:f1:ec:98:b5:a5:ef:22:f9:05:94:34:
86:eb:4f:e9:d4:cc:5f:b6:96:dc:cc:3c:45:c5:63:7d:e8:be:
dd:bd:c0:3a:c6:af:73:f2:d0:f2:db:81:28:ea:c1:23:f6:46:
5f:56:b5:43:74:c0:4b:86:29:e7:bc:52:b4:50:80:31:77:d4:
5a:cb:cd:d5:75:c8:61:a2:60:cb:73:86:a3:c8:15:9b:9e:1f:
da:ff:ae:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9IkTUD+7IpG0UGRpRM4aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NzdiYjkzMjRmYzc1MGE1M2UwNTU4NDhlZjA2OTAzNDE2
YzNlMDgwHhcNMjUxMTA0MTMwMDM5WhcNMjUxMTA1MTMwMDM5WjAzMTEwLwYDVQQD
EygyNTU0Yzk1M2VlODgyN2JmOWRhYzRiMjFhZDViZmE2ZTMxOGY2YmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcGBMtOnRT9z5qZ1O8uJ9bpJNHX5
jYE8MZ+Uu+sD1zqraGqRq5rfpzlm08Jy1EYBu+tmHyLIuLAoNzbqoKxo1QNLInAs
DcKENy0CpeKYsODwN1iPuJZud4+81H8ygbk4Ych14bmG0i2PQ604r8Dqwb40EBwX
tI4gdUKjd/3mzDgBM9QHSBma8hSGva1eP9pvUi+5OtGpbzboATQmRFDGfBpOwOqd
0XaQ2EYQthpNGrzanQk/qFg0EJvROLC0sFvxuDTUDf2dbKIMGtb4kiGu6cxtsLyV
tIDs+p68YgjshZLp7p3CYbwiiWVTWx+LP+DmMVAw2xakqZUFU51mbuttkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCVUyVPuiCe/naxLIa1b+m4xj2veMB8GA1UdIwQY
MBaAFAV3u5Mk/HUKU+BVhI7waQNBbD4IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlhlN2t5VDhkUXBUNEZXRWp2QnBBMEZzUGdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lM2VlZjctYmFhYi00ZDUxLWIxNmIt
MjdmZWY2ODVjYmIyLzEvQlhlN2t5VDhkUXBUNEZXRWp2QnBBMEZzUGdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9lM2VlZjctYmFhYi00ZDUxLWIxNmItMjdmZWY2ODVjYmIy
LzEvQlhlN2t5VDhkUXBUNEZXRWp2QnBBMEZzUGdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKDSr+yBf
Tmy2Pbasm9Krpf5DS7EgmlgT/basZuV8TzPEkQ6SFNFZr74QCGsfh06TLD1vLmmo
XeCOtAE/sGeJ24E0ErVUwic3442tqNuiA2WAEvZp4EReYLBmh9r2qTjiSeyOXb1u
6/nfMUMOrOU5LZiwOwgxJrlxzo+9qSqnVfLxsGiysVMAmrtrLht55R2aitWpVK9q
7vENIZTl/+OUl9lPmoRYxKwc5PHsmLWl7yL5BZQ0hutP6dTMX7aW3Mw8RcVjfei+
3b3AOsavc/LQ8tuBKOrBI/ZGX1a1Q3TAS4Yp57xStFCAMXfUWsvN1XXIYaJgy3OG
o8gVm54f2v+ugw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:40:44 2025 by rpki-client