Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
File: Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft (raw, json)
Hash identifier: jegOdjRcmz6eubYEgvunCQI16k1EPy/D9iIwYv996PQ=
Subject key identifier: 7B:68:68:20:88:3A:61:E2:AD:26:29:D0:9E:87:4F:65:FF:99:B0:60
Authority key identifier: 06:F7:66:F1:DE:13:AE:C7:FB:05:01:93:F8:32:9A:66:09:E0:09:5D
Certificate issuer: /CN=06f766f1de13aec7fb050193f8329a6609e0095d
Certificate serial: 019A4C97CD536EB3D216650CFE93CB2BBE43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 02:00:08 +0000
Manifest this update: Tue 04 Nov 2025 02:00:08 +0000
Manifest next update: Wed 05 Nov 2025 02:00:08 +0000
Files and hashes: 1: Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl (hash: ukpaAh10Df8l3QzNcC68rYf3Y2NKFI1Io1OKLk7i5ao=)
2: oGJ3VwT7Kor9HUj6Ls93pR91zps.roa (hash: aLxAJ/2BMqLJ72HUFwwNF6sObyfI6ewUQ19ZgSavYnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:97:cd:53:6e:b3:d2:16:65:0c:fe:93:cb:2b:be:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06f766f1de13aec7fb050193f8329a6609e0095d
Validity
Not Before: Nov 4 02:00:08 2025 GMT
Not After : Nov 5 02:00:08 2025 GMT
Subject: CN=7b686820883a61e2ad2629d09e874f65ff99b060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:54:e1:84:14:e9:80:bc:22:64:56:a0:6e:3f:
60:5c:bf:23:8a:2a:70:51:17:29:f0:31:ac:7b:94:
10:7c:22:6a:d0:b1:5d:f8:fa:f8:b7:75:5f:9c:6e:
9e:80:05:61:25:95:a5:85:d4:fa:88:91:7c:82:23:
d9:f9:ef:39:35:e0:fd:6a:c1:e7:c4:de:8e:fd:38:
76:6b:25:18:d3:84:96:da:27:49:e8:71:6b:86:9b:
91:92:ea:f1:34:db:e0:78:87:bd:1e:68:99:c9:75:
f0:57:1c:f6:b3:f0:0a:03:fd:24:1f:1c:89:5b:51:
b4:f1:71:c9:54:39:4b:2f:08:72:72:05:b8:b9:a3:
52:3b:ef:bb:63:06:bb:fd:f2:0d:12:e5:aa:54:21:
86:75:97:29:af:1d:f7:df:c1:29:d0:a2:45:30:2d:
fe:ce:f8:d1:14:24:4a:aa:6a:27:f3:b5:ff:f0:0a:
70:76:da:48:e2:65:75:66:fd:74:9f:57:c5:ee:4a:
4f:c5:71:84:a2:3e:2d:f9:72:36:fd:ee:6f:10:c2:
b7:fd:a9:de:7c:7e:2d:43:83:af:1a:af:90:2a:56:
a1:e3:2c:49:b4:26:49:31:1c:6a:bb:86:0f:da:cd:
27:30:c6:3e:dc:46:c8:2f:20:a2:8b:87:5c:91:cd:
b5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:68:68:20:88:3A:61:E2:AD:26:29:D0:9E:87:4F:65:FF:99:B0:60
X509v3 Authority Key Identifier:
keyid:06:F7:66:F1:DE:13:AE:C7:FB:05:01:93:F8:32:9A:66:09:E0:09:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ce:26:34:c5:bf:d8:16:66:6f:ac:e5:ac:bb:d0:8f:6b:cf:
bd:ab:21:05:07:6a:39:3e:0e:1b:1c:f7:bb:b2:ef:40:74:1f:
07:1d:d0:a1:f0:57:30:67:51:93:ac:88:fb:db:cf:8e:77:db:
d1:9e:d8:ed:be:5b:df:d4:e8:be:39:73:b0:a4:59:22:03:d2:
8a:4d:ba:5a:25:3b:23:6a:63:c1:55:b6:e2:fb:ea:fa:8a:d0:
09:be:0c:5f:37:87:12:6a:87:fe:aa:a2:14:f8:cb:3c:45:58:
9a:b2:2f:a4:09:1d:51:a7:fa:b6:1c:49:7b:b3:2b:93:18:bf:
7c:6a:af:42:0e:19:0b:40:c2:01:fe:79:63:b5:8b:9d:3f:a2:
26:d6:09:c4:6b:c3:5b:e7:d4:eb:f3:2b:1e:07:95:3a:c1:ee:
d2:cb:df:7d:8c:0e:50:81:e5:a6:f2:6d:3b:a8:4c:c1:b2:27:
24:02:4c:93:64:20:42:78:77:c2:0c:dc:3d:0e:37:bc:a7:6d:
06:ce:0c:f0:19:d6:d3:22:a1:27:31:55:0d:a7:40:d0:ff:c0:
27:67:77:1f:79:1c:fa:8e:69:6b:fe:49:88:71:86:e2:4e:c7:
62:40:df:94:4a:c0:fe:c6:f2:01:79:5c:83:73:b0:0b:77:21:
76:4a:8e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:04 2025 by rpki-client