Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
File: BVYYphlfHsrLCFztOwoaF8YqLPo.mft (raw, json)
Hash identifier: uml7gGKEep/v9mLEoAtnF0pOh1YbTzfeMjmrajFQV0c=
Subject key identifier: 5E:65:F3:CA:01:1F:35:F2:8C:76:7E:FC:AA:16:9C:0C:D6:0D:10:17
Authority key identifier: 05:56:18:A6:19:5F:1E:CA:CB:08:5C:ED:3B:0A:1A:17:C6:2A:2C:FA
Certificate issuer: /CN=055618a6195f1ecacb085ced3b0a1a17c62a2cfa
Certificate serial: 019A4EF5C3A4E2E7F95E3238AF61B53B3CB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
Manifest number: 129E
Signing time: Tue 04 Nov 2025 13:02:00 +0000
Manifest this update: Tue 04 Nov 2025 13:02:00 +0000
Manifest next update: Wed 05 Nov 2025 13:02:00 +0000
Files and hashes: 1: BVYYphlfHsrLCFztOwoaF8YqLPo.crl (hash: BtsQ7mdJVwmkQG3exQTjLbYjmiMmhxs2Ofppcip3mtE=)
2: e_kofoKg7y1J8uLrVIeuvY2O9Mk.roa (hash: F9D5aBOFLIrm7XWZ3/0StMK2qKNaesetbFTA4limnyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:c3:a4:e2:e7:f9:5e:32:38:af:61:b5:3b:3c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=055618a6195f1ecacb085ced3b0a1a17c62a2cfa
Validity
Not Before: Nov 4 13:02:00 2025 GMT
Not After : Nov 5 13:02:00 2025 GMT
Subject: CN=5e65f3ca011f35f28c767efcaa169c0cd60d1017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b3:c7:21:ac:71:8d:73:89:65:c3:0c:cf:7b:
6f:93:7e:cd:37:c1:94:bc:f0:22:86:16:9b:26:27:
76:a0:45:0c:2b:22:42:bf:48:59:f1:a5:83:a9:ef:
08:6e:b2:45:be:03:a0:23:d7:26:73:8e:29:00:24:
de:b1:e8:ce:fc:cf:e2:8a:d1:31:37:60:95:d4:e1:
cf:c0:6c:ef:77:d1:7f:fc:e6:3e:26:85:3c:ea:85:
6b:5f:d7:c1:c1:6d:43:04:f8:78:95:b8:c4:18:b0:
d9:14:76:13:e5:78:72:05:20:dc:b1:fa:8a:2e:62:
00:d4:e6:ed:ec:5c:c4:aa:23:88:12:8b:a5:ac:23:
cd:d8:30:1a:fe:87:7f:0d:19:dc:17:df:a2:dc:6f:
a8:9b:e5:73:6a:e5:84:42:a4:cc:7e:68:bc:10:a2:
fa:de:e5:e0:49:8d:ec:2d:ac:21:f2:94:3e:21:c2:
39:35:4e:aa:a1:66:e4:9d:65:e8:ae:1b:bd:b6:78:
9b:34:61:1b:6d:8a:95:d6:52:6b:2f:53:29:42:db:
64:5f:4a:ef:d6:9e:34:21:5f:ba:fe:7f:14:78:b6:
04:82:22:c6:af:a2:17:13:d9:89:63:fe:84:22:c9:
d8:33:03:7d:3d:8b:bf:8f:4c:b3:e8:bf:ad:5c:25:
d6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:65:F3:CA:01:1F:35:F2:8C:76:7E:FC:AA:16:9C:0C:D6:0D:10:17
X509v3 Authority Key Identifier:
keyid:05:56:18:A6:19:5F:1E:CA:CB:08:5C:ED:3B:0A:1A:17:C6:2A:2C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:00:ad:42:a6:8f:8f:f3:e9:ae:8f:d4:2c:4e:50:bf:ad:c5:
34:31:8e:30:0c:05:b1:2c:3d:bf:46:8e:94:b6:46:fb:d9:39:
c7:c1:d3:66:7b:07:a1:ab:d1:8a:f2:56:09:ca:a8:81:6f:52:
b9:d1:a7:be:e8:41:f1:46:93:f3:f5:a6:21:b8:3c:12:9a:fd:
03:67:9e:d8:93:61:1c:7d:ca:29:a0:d8:17:9e:36:06:ae:a1:
ab:7d:ed:18:45:47:a5:78:05:d2:e6:da:27:0a:24:8a:b9:be:
ab:e1:68:b8:03:42:88:f8:3b:2d:0b:b5:a8:56:a2:a3:a5:77:
5e:00:82:12:c2:05:9a:fa:da:53:1c:33:51:11:83:10:83:a5:
df:c4:61:36:d9:db:42:56:bb:d4:b6:1c:83:27:d3:b1:03:50:
85:db:d2:82:75:b1:b7:79:9a:79:a0:f0:2d:80:4f:7b:df:00:
20:43:51:bd:2d:a0:0c:8b:0e:8e:7c:7e:c4:b9:ae:fe:40:18:
af:8e:8e:0b:5b:c7:06:d7:5c:1a:90:f0:31:5e:4d:2c:31:c8:
9b:83:93:ca:56:c8:e0:60:bc:96:ef:3f:b8:e5:ff:ac:63:da:
e4:bc:4d:2a:67:67:1d:a1:f7:e4:f7:d0:26:7d:89:be:9a:3f:
ef:98:f1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:36 2025 by rpki-client