Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
File: BcgcgJdDfNF58xkYPAKC6mzRylE.mft (raw, json)
Hash identifier: WSLDh/5h0ou6gLNWYOhkHWfFlgN5bKGxFJ4Bnun8Brg=
Subject key identifier: 88:16:F9:6A:D9:DC:3C:75:FE:82:75:71:88:0C:3A:5A:8F:E4:4E:FB
Authority key identifier: 05:C8:1C:80:97:43:7C:D1:79:F3:19:18:3C:02:82:EA:6C:D1:CA:51
Certificate issuer: /CN=05c81c8097437cd179f319183c0282ea6cd1ca51
Certificate serial: 019A559B4C2B8B07E3BB6643387E7BD23DF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
Manifest number: 06CE
Signing time: Wed 05 Nov 2025 20:00:32 +0000
Manifest this update: Wed 05 Nov 2025 20:00:32 +0000
Manifest next update: Thu 06 Nov 2025 20:00:32 +0000
Files and hashes: 1: 0eEbXaLT72xMShRX80ks6Q4d5oI.roa (hash: qA3gKPtC1PDR4pbDhy0QBVS9nz5AKV5Uc6LznPWBGvQ=)
2: BcgcgJdDfNF58xkYPAKC6mzRylE.crl (hash: MnWbbpSepuqCLqTvU3SsRo+ckwKQTOLqHtcFUc41a2Q=)
3: z0nJV6Vj9yWOU_8BIeua9e3I6JE.roa (hash: YIrDiztONnsPy57n2ZnC2YoDiFkPGBFAHQe2Pe5+Gi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 20:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:9b:4c:2b:8b:07:e3:bb:66:43:38:7e:7b:d2:3d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05c81c8097437cd179f319183c0282ea6cd1ca51
Validity
Not Before: Nov 5 20:00:32 2025 GMT
Not After : Nov 6 20:00:32 2025 GMT
Subject: CN=8816f96ad9dc3c75fe827571880c3a5a8fe44efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:08:26:fe:22:a3:8d:93:ed:55:dc:4e:af:7a:
93:6c:2a:8d:27:93:81:8b:af:6d:8f:81:4a:e0:6e:
2a:82:b4:7a:37:d4:73:26:e6:ea:e9:51:91:54:96:
4b:87:18:7c:c8:32:3d:8b:5b:bf:e1:bd:0d:cf:0e:
63:3c:45:71:36:0e:2f:71:6c:53:eb:ab:69:ed:96:
c2:ad:b7:2b:4d:34:16:56:c3:e4:19:74:ef:02:f6:
a8:7d:a3:a7:55:26:52:0f:1e:5f:27:b4:6d:ce:cf:
ce:1a:2b:34:4b:31:90:9e:38:27:aa:5d:57:ef:12:
05:7d:a0:7d:f7:ab:51:2b:ae:90:94:0e:83:cf:1b:
4b:19:45:b3:f1:ad:8c:79:a1:43:f0:48:ad:b7:35:
b1:fd:39:b0:3e:3e:8d:7e:62:1b:8d:40:c1:25:76:
c2:0c:70:5b:b2:38:04:60:f0:52:74:44:0b:df:54:
de:d8:f2:a6:93:ba:f9:18:5c:b9:86:53:1a:8b:14:
17:ea:77:de:32:10:4d:e7:46:70:29:72:86:65:68:
ef:b8:97:45:f6:0a:90:1f:6f:90:46:93:b5:86:44:
5c:6f:b4:5f:97:2a:8b:df:35:e7:fc:67:06:64:b2:
f8:ac:55:a2:2f:f6:93:bf:c0:e7:e7:76:4b:2d:16:
58:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:16:F9:6A:D9:DC:3C:75:FE:82:75:71:88:0C:3A:5A:8F:E4:4E:FB
X509v3 Authority Key Identifier:
keyid:05:C8:1C:80:97:43:7C:D1:79:F3:19:18:3C:02:82:EA:6C:D1:CA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:3c:fb:22:7e:7f:19:85:4d:80:e6:d7:42:2e:7f:c1:97:0d:
22:13:80:10:91:d0:1b:c6:16:57:bc:ec:2d:82:ea:aa:3e:f1:
f9:0e:08:3a:31:94:36:69:42:3a:ee:e0:14:71:9d:b4:76:28:
6e:c5:d0:13:bd:e7:bb:9e:e9:4b:47:48:87:a3:aa:b8:ce:0a:
de:71:54:f2:e3:de:c0:9d:b4:72:cc:ad:de:3f:e3:90:a9:90:
81:b5:69:66:88:a1:fc:bb:e3:1c:65:4d:e5:dd:60:b8:ce:c7:
2e:ff:c8:11:c9:ae:79:04:d7:a9:6b:6a:c5:3d:32:0b:7c:56:
47:3b:f1:55:3e:e9:76:20:06:30:89:48:e3:03:19:81:c8:e5:
62:49:7b:c3:a4:f6:f6:e5:1d:7a:be:8d:86:b1:ff:04:3a:1e:
7a:b7:82:4f:47:89:a3:96:0d:a4:2b:5a:42:fc:bb:c3:72:d2:
80:cb:68:9a:5d:15:e5:ff:fd:68:d5:26:57:f7:de:49:9d:a2:
ce:86:30:e5:81:88:74:ca:47:f5:de:0c:34:15:8c:7e:da:11:
1a:90:fb:bb:f9:a2:ec:2f:03:f9:a4:50:51:a4:a0:af:18:b8:
99:75:18:dc:a4:04:39:b2:cd:15:cb:9d:07:56:0a:f4:1e:aa:
22:19:09:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 05:35:38 2025 by rpki-client